Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: F9tNB4cfRrYFNduLtUVDDFdUFmFls6fLc3XJn6rW/dk=
Subject key identifier: 3E:8C:29:EF:26:A6:A2:65:62:2A:41:D2:E8:12:9D:7F:B6:DD:14:00
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 019A4C986C2208313F0BF8CF59F10755BB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 141B
Signing time: Tue 04 Nov 2025 02:00:48 +0000
Manifest this update: Tue 04 Nov 2025 02:00:48 +0000
Manifest next update: Wed 05 Nov 2025 02:00:48 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: WGQdKeVlcAiUDegC3PFPUMHlqoZjv26ZO3qdl59XcTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:6c:22:08:31:3f:0b:f8:cf:59:f1:07:55:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Nov 4 02:00:48 2025 GMT
Not After : Nov 5 02:00:48 2025 GMT
Subject: CN=3e8c29ef26a6a265622a41d2e8129d7fb6dd1400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0b:0e:e9:0a:9a:4f:a9:0e:72:e1:e1:b9:d2:
1a:56:2c:1a:b6:a6:5d:06:34:cf:df:f2:a0:39:00:
c7:0b:0c:95:bf:92:a2:1f:5b:7a:a5:68:b7:6a:dd:
3c:90:9c:77:80:6d:62:d3:18:4d:b1:39:1e:75:5f:
ea:9c:7f:c0:96:29:b8:06:9e:b4:4e:a8:1a:01:de:
cd:8c:08:3e:39:d4:55:0f:08:02:01:8b:fd:5b:3d:
f8:d5:1c:0f:6d:8b:bb:e8:f6:86:a3:3f:32:b6:ac:
54:98:7f:b6:91:8f:04:33:cc:57:19:9a:3a:0f:ed:
a6:9e:d4:32:9e:a5:91:64:fc:8e:62:d7:c7:ae:bd:
4c:f5:a4:e0:ce:fa:8d:91:16:fa:c6:72:b7:bd:52:
2c:79:9e:ab:6a:c9:31:08:ca:d1:e8:2e:23:8a:d5:
67:4f:d6:9b:cf:b4:49:bb:75:9f:01:ce:dc:d8:0b:
ac:94:8d:79:cd:8f:f0:00:6c:e0:34:b2:31:a4:5a:
99:ea:f8:6c:1b:42:1d:c0:6d:b2:a2:6b:43:05:37:
ff:24:e0:f7:a3:18:73:21:43:12:b4:ae:ac:48:f5:
cc:dc:98:4e:30:dd:37:07:41:26:56:ca:82:b3:79:
b5:3e:8a:35:75:f6:8f:ee:25:06:95:1c:a8:3d:fd:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8C:29:EF:26:A6:A2:65:62:2A:41:D2:E8:12:9D:7F:B6:DD:14:00
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e1:12:ad:ae:01:9b:de:8b:9d:4f:25:a4:58:2c:f0:6f:23:
71:69:12:c9:fa:99:a6:a0:62:db:38:50:60:c5:1c:41:9d:4a:
db:22:c3:c6:fe:12:6b:17:23:e3:8b:2f:dd:ff:b1:5a:ac:36:
15:b5:fa:ef:01:10:76:5d:5f:ff:60:2b:ef:0c:37:c8:54:b4:
32:be:fc:69:9e:7e:e4:6c:92:12:a0:c9:64:5f:9f:f8:d7:e2:
71:47:7b:8e:ba:fc:4f:82:83:a0:b9:a1:cc:04:2e:56:31:9e:
e6:ad:3f:81:03:bf:f3:31:36:d7:e5:5f:86:4d:b3:cb:34:11:
c6:61:86:ff:9d:43:70:42:cf:9f:a6:5b:ce:f3:11:ba:37:c2:
15:73:4b:2a:09:3f:4b:e6:98:d0:1b:18:30:12:e6:ea:c3:6e:
ac:01:9c:a0:30:e8:81:7c:a0:84:34:b0:6a:9d:c7:b0:87:b1:
17:0a:65:f3:e7:b9:1e:7f:52:29:9d:fe:72:8b:4a:72:05:5e:
94:72:26:64:e8:d8:76:47:0c:b3:6a:eb:0b:fd:d9:f9:47:65:
0d:e9:f5:6c:5a:5c:f7:b7:80:7c:0a:12:da:1e:08:d5:77:64:
7f:ad:fd:20:19:ec:03:6e:15:86:c0:cf:2e:37:dd:ec:d6:47:
8b:61:62:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmGwiCDE/C/jPWfEHVbuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGRjMzA4ZmU2ZDg2MTIxMDI2Zjk3NDRhZGQ0MGUxMTcz
NTQzZGUwHhcNMjUxMTA0MDIwMDQ4WhcNMjUxMTA1MDIwMDQ4WjAzMTEwLwYDVQQD
EygzZThjMjllZjI2YTZhMjY1NjIyYTQxZDJlODEyOWQ3ZmI2ZGQxNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QsO6QqaT6kOcuHhudIaViwatqZd
BjTP3/KgOQDHCwyVv5KiH1t6pWi3at08kJx3gG1i0xhNsTkedV/qnH/Alim4Bp60
TqgaAd7NjAg+OdRVDwgCAYv9Wz341RwPbYu76PaGoz8ytqxUmH+2kY8EM8xXGZo6
D+2mntQynqWRZPyOYtfHrr1M9aTgzvqNkRb6xnK3vVIseZ6raskxCMrR6C4jitVn
T9abz7RJu3WfAc7c2AuslI15zY/wAGzgNLIxpFqZ6vhsG0IdwG2yomtDBTf/JOD3
oxhzIUMStK6sSPXM3JhOMN03B0EmVsqCs3m1Poo1dfaP7iUGlRyoPf3HRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6MKe8mpqJlYipB0ugSnX+23RQAMB8GA1UdIwQY
MBaAFMxNwwj+bYYSECb5dErdQOEXNUPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQt
ZDIyNmEzYjFmNDJkLzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQtZDIyNmEzYjFmNDJk
LzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuESra4B
m96LnU8lpFgs8G8jcWkSyfqZpqBi2zhQYMUcQZ1K2yLDxv4Saxcj44sv3f+xWqw2
FbX67wEQdl1f/2Ar7ww3yFS0Mr78aZ5+5GySEqDJZF+f+NficUd7jrr8T4KDoLmh
zAQuVjGe5q0/gQO/8zE21+Vfhk2zyzQRxmGG/51DcELPn6ZbzvMRujfCFXNLKgk/
S+aY0BsYMBLm6sNurAGcoDDogXyghDSwap3HsIexFwpl8+e5Hn9SKZ3+cotKcgVe
lHImZOjYdkcMs2rrC/3Z+UdlDen1bFpc97eAfAoS2h4I1Xdkf639IBnsA24VhsDP
Ljfd7NZHi2FiCg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:17 2025 by rpki-client