Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: CwyA/FyJgXOpfANxRTC+A8KZ9hPrjnz4EboJERa+Oms=
Subject key identifier: E4:C1:89:91:AE:12:70:87:45:BE:E2:26:E9:D8:D7:50:AA:A5:42:23
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 019A4EF480604E1C8768906E764E8FF55F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:37 +0000
Manifest this update: Tue 04 Nov 2025 13:00:37 +0000
Manifest next update: Wed 05 Nov 2025 13:00:37 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: EFBVDemiUhi74Ct2g8PiANcfnzGWj4CStKrtKC7IdFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:80:60:4e:1c:87:68:90:6e:76:4e:8f:f5:5f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Nov 4 13:00:37 2025 GMT
Not After : Nov 5 13:00:37 2025 GMT
Subject: CN=e4c18991ae12708745bee226e9d8d750aaa54223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:ce:7b:58:c8:53:7f:a3:1d:e9:e3:6e:1b:
6f:2d:e6:24:b1:02:cc:13:3c:90:ef:e9:61:c8:07:
a6:e9:fb:ab:20:2f:74:2a:94:72:b3:8b:d6:b3:a0:
cb:9d:28:68:21:5e:99:1b:c3:a5:2a:c5:e4:57:45:
41:4e:2f:e9:c3:55:8f:21:dc:a1:3f:a1:f9:96:c7:
30:2f:c6:4c:fb:35:89:42:8b:dc:6b:29:be:65:6a:
46:fd:28:40:5f:19:29:85:51:6b:0a:16:e9:54:ec:
71:e5:66:82:06:02:8f:1f:28:19:20:98:c8:c8:a6:
3e:5f:7c:d2:5b:4d:93:dd:32:1d:e7:13:ba:42:dd:
bc:92:bb:81:9b:51:d6:46:40:84:26:43:69:48:4e:
87:9c:b0:d5:f8:3a:d8:08:68:5e:8d:16:ca:d5:ab:
10:87:b8:39:67:16:fc:59:a4:9b:2f:1e:53:57:a0:
81:aa:c8:b0:c5:79:96:0f:53:26:89:54:6e:d5:60:
a8:86:16:58:77:04:6f:c7:91:8c:1d:fd:52:34:8b:
12:c3:5f:8a:04:18:57:5f:9c:f8:83:76:31:13:67:
2b:d2:c1:aa:dd:8e:c7:56:2f:07:45:45:37:e5:26:
41:16:6e:e0:22:23:23:b4:19:a2:54:9c:66:81:87:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:89:91:AE:12:70:87:45:BE:E2:26:E9:D8:D7:50:AA:A5:42:23
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ab:70:39:58:f9:57:5b:ef:ca:9a:cd:1a:d2:ff:de:c8:39:
0f:15:a9:28:f6:b0:8f:8b:7b:92:20:28:c1:56:58:b8:46:ee:
50:8d:fe:d4:8d:ee:a4:e2:eb:44:56:aa:6e:6e:08:23:e4:6f:
9a:b1:07:2e:58:27:8f:d0:32:8d:d7:a6:7e:d9:fc:a4:74:a9:
5f:6e:33:b2:a2:65:04:a4:68:69:72:8e:a8:9f:e3:96:bd:62:
64:d7:4e:b4:3f:4f:62:c4:00:3a:b0:b7:58:97:74:16:6f:bf:
4c:f4:af:e5:e8:95:b5:aa:9e:47:f0:41:ee:39:d3:3e:5e:2a:
84:b4:e6:0f:36:87:0f:00:bd:91:b2:49:7b:8a:53:38:24:92:
f0:c5:e0:5b:1b:5f:04:f0:42:ba:49:60:72:1f:ae:b4:26:d3:
e6:1a:c4:64:d1:aa:3b:43:c8:16:68:08:e2:fb:9c:01:41:1e:
92:64:e5:cc:02:c9:f1:4f:d0:ba:25:b4:8d:e9:1f:5b:d4:d2:
bb:a1:83:d6:51:99:18:b0:37:43:c3:e2:be:43:9d:69:05:91:
24:6a:9a:e9:d0:b9:d2:a3:04:6a:d3:ad:4b:3d:3b:d2:3d:b3:
55:7f:44:53:da:1b:a7:47:3d:ee:e9:fb:71:2c:43:49:a3:3c:
64:34:aa:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9IBgThyHaJBudk6P9V9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjRkNGJhODViNzU1ZWY5MjljOWI5OTVlYWY3NDZkMGUw
YjZlNTEwHhcNMjUxMTA0MTMwMDM3WhcNMjUxMTA1MTMwMDM3WjAzMTEwLwYDVQQD
EyhlNGMxODk5MWFlMTI3MDg3NDViZWUyMjZlOWQ4ZDc1MGFhYTU0MjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZTOe1jIU3+jHenjbhtvLeYksQLM
EzyQ7+lhyAem6furIC90KpRys4vWs6DLnShoIV6ZG8OlKsXkV0VBTi/pw1WPIdyh
P6H5lscwL8ZM+zWJQovcaym+ZWpG/ShAXxkphVFrChbpVOxx5WaCBgKPHygZIJjI
yKY+X3zSW02T3TId5xO6Qt28kruBm1HWRkCEJkNpSE6HnLDV+DrYCGhejRbK1asQ
h7g5Zxb8WaSbLx5TV6CBqsiwxXmWD1MmiVRu1WCohhZYdwRvx5GMHf1SNIsSw1+K
BBhXX5z4g3YxE2cr0sGq3Y7HVi8HRUU35SZBFm7gIiMjtBmiVJxmgYdBnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTBiZGuEnCHRb7iJunY11CqpUIjMB8GA1UdIwQY
MBaAFNz01LqFt1XvkpybmV6vdG0OC25RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAt
NDE0NzBhOTQ1OWExLzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAtNDE0NzBhOTQ1OWEx
LzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6twOVj5
V1vvyprNGtL/3sg5DxWpKPawj4t7kiAowVZYuEbuUI3+1I3upOLrRFaqbm4II+Rv
mrEHLlgnj9Ayjdemftn8pHSpX24zsqJlBKRoaXKOqJ/jlr1iZNdOtD9PYsQAOrC3
WJd0Fm+/TPSv5eiVtaqeR/BB7jnTPl4qhLTmDzaHDwC9kbJJe4pTOCSS8MXgWxtf
BPBCuklgch+utCbT5hrEZNGqO0PIFmgI4vucAUEekmTlzALJ8U/QuiW0jekfW9TS
u6GD1lGZGLA3Q8PivkOdaQWRJGqa6dC50qMEatOtSz070j2zVX9EU9obp0c97un7
cSxDSaM8ZDSqXQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:22 2025 by rpki-client