Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: NTHPehrq2ffjer/JycqejC/GPcHJVUnmEOFpJxhFtFw=
Subject key identifier: A3:5B:51:6B:98:01:35:DC:98:D3:F1:21:BB:3D:BF:BC:6B:2E:2B:33
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019A5307C4764646705234502D3EF9F6C268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 02B2
Signing time: Wed 05 Nov 2025 08:00:09 +0000
Manifest this update: Wed 05 Nov 2025 08:00:09 +0000
Manifest next update: Thu 06 Nov 2025 08:00:09 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: 7dFbAGwg9xX7WeDYiB5WvxUOtrKd3it0/A8rCjloM7o=)
2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=)
3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:c4:76:46:46:70:52:34:50:2d:3e:f9:f6:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Nov 5 08:00:09 2025 GMT
Not After : Nov 6 08:00:09 2025 GMT
Subject: CN=a35b516b980135dc98d3f121bb3dbfbc6b2e2b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:03:2f:12:9b:fd:9c:db:88:2f:91:41:3a:
20:5d:26:e4:4d:39:d3:6c:6e:90:2e:ba:97:c9:e6:
c0:7e:e9:d5:f1:6e:91:8c:01:64:e4:bd:9e:e5:87:
b9:e9:0c:7c:28:2d:ad:80:72:10:e6:10:bc:10:ff:
9d:13:67:5b:4e:22:e4:a9:72:6f:7f:10:db:4f:a0:
5b:3f:84:8d:ba:39:df:2d:5d:d8:bd:d2:bc:ba:f9:
a5:41:86:e6:29:5f:49:5e:15:96:a7:71:f2:f3:95:
cd:68:1b:39:e0:30:3a:5c:7c:be:0a:86:d2:59:7b:
bc:7f:2c:1e:53:7f:39:f2:50:a6:e6:f7:bf:d2:a2:
cf:93:5d:80:3a:b2:bb:97:7d:b0:c9:6a:73:3a:00:
17:ef:28:cd:45:55:cd:fc:dc:0e:a9:74:58:eb:e8:
81:41:8d:f1:6b:20:d0:a7:44:3e:fb:5e:00:41:e1:
fb:6e:7c:d6:42:37:5f:a4:d7:1d:e8:1e:84:34:f8:
1e:f0:01:43:38:34:0f:7a:dd:f2:e6:73:b8:d2:ce:
5f:0b:14:5f:1e:86:09:d6:64:cd:45:a2:dd:7f:84:
61:6d:06:2f:bf:88:35:a6:e0:da:5e:3e:1b:7d:04:
e6:1f:63:cf:3c:35:0e:4a:9a:9c:54:59:2a:8d:9b:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5B:51:6B:98:01:35:DC:98:D3:F1:21:BB:3D:BF:BC:6B:2E:2B:33
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:00:af:3c:21:5a:5c:3f:8e:8b:a2:09:a3:c0:56:fa:39:3c:
97:88:bc:b4:66:54:dd:11:c6:86:d7:0a:3e:d0:56:33:27:a2:
05:82:cf:21:10:28:09:f6:20:89:64:97:f2:8e:74:ff:16:58:
7b:5c:1d:77:67:4e:ad:cf:23:8b:bd:2e:32:56:c2:4f:44:9e:
e9:d9:d5:66:fa:6c:2f:c7:5c:c9:cf:3c:48:66:bb:d0:5a:0d:
ab:10:b2:84:32:75:1e:ab:81:85:c7:f8:7a:1c:1b:32:2b:bd:
6e:11:02:2d:de:9e:c5:5e:f7:6b:85:98:f4:d0:5d:45:bf:f4:
0e:b6:20:87:ca:6f:bf:6b:9a:4a:a9:a2:bf:05:29:75:4a:e2:
4a:3a:36:69:14:d9:b9:88:a1:ac:e7:4b:c3:47:94:0e:e3:22:
07:e9:04:87:0d:53:9a:93:4f:66:d6:4e:21:5f:55:de:80:3f:
73:8c:2b:e4:5b:51:b7:0f:ac:dd:e7:07:26:2a:04:6d:75:75:
b3:16:b2:23:88:c2:86:be:f6:1b:b2:cd:8a:dc:97:a4:21:19:
57:06:10:e7:7a:8f:df:58:3c:93:13:b7:c1:1c:3f:96:f7:28:
d6:ae:be:b1:59:4d:17:27:92:3a:33:b2:79:d0:a2:d5:3d:51:
c3:fe:0f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTB8R2RkZwUjRQLT759sJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi
NTZiMDcwHhcNMjUxMTA1MDgwMDA5WhcNMjUxMTA2MDgwMDA5WjAzMTEwLwYDVQQD
EyhhMzViNTE2Yjk4MDEzNWRjOThkM2YxMjFiYjNkYmZiYzZiMmUyYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7UDLxKb/ZzbiC+RQTogXSbkTTnT
bG6QLrqXyebAfunV8W6RjAFk5L2e5Ye56Qx8KC2tgHIQ5hC8EP+dE2dbTiLkqXJv
fxDbT6BbP4SNujnfLV3YvdK8uvmlQYbmKV9JXhWWp3Hy85XNaBs54DA6XHy+CobS
WXu8fyweU3858lCm5ve/0qLPk12AOrK7l32wyWpzOgAX7yjNRVXN/NwOqXRY6+iB
QY3xayDQp0Q++14AQeH7bnzWQjdfpNcd6B6ENPge8AFDODQPet3y5nO40s5fCxRf
HoYJ1mTNRaLdf4RhbQYvv4g1puDaXj4bfQTmH2PPPDUOSpqcVFkqjZsd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNbUWuYATXcmNPxIbs9v7xrLiszMB8GA1UdIwQY
MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt
NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy
LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwCvPCFa
XD+Oi6IJo8BW+jk8l4i8tGZU3RHGhtcKPtBWMyeiBYLPIRAoCfYgiWSX8o50/xZY
e1wdd2dOrc8ji70uMlbCT0Se6dnVZvpsL8dcyc88SGa70FoNqxCyhDJ1HquBhcf4
ehwbMiu9bhECLd6exV73a4WY9NBdRb/0DrYgh8pvv2uaSqmivwUpdUriSjo2aRTZ
uYihrOdLw0eUDuMiB+kEhw1TmpNPZtZOIV9V3oA/c4wr5FtRtw+s3ecHJioEbXV1
sxayI4jChr72G7LNityXpCEZVwYQ53qP31g8kxO3wRw/lvco1q6+sVlNFyeSOjOy
edCi1T1Rw/4P7A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:37:42 2025 by rpki-client