Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: 2fuGjVI0mYIVf8GWZ/VpIBYlkiNr0IN5NS4t3QHs7HM=
Subject key identifier: 8F:46:E6:59:C6:2F:24:8D:EA:B0:90:32:A9:A1:0B:E4:0D:EE:12:DC
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 019A4E18782C8525768307B97415F7A70B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0D68
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: VDiabLbYP5AkJOeWSL7tmPLuzN+xvMbvufCtNrDpGcg=)
2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:78:2c:85:25:76:83:07:b9:74:15:f7:a7:0b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=8f46e659c62f248deab09032a9a10be40dee12dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:3e:03:20:71:68:9e:51:b3:b7:dd:1a:41:
30:f5:82:ca:2c:f6:d1:03:a2:52:cb:82:d8:54:51:
23:4c:5a:f3:3f:9b:79:26:e3:60:51:1e:bf:d4:6b:
7a:d7:a4:31:63:a1:56:47:54:9a:a9:44:57:6c:81:
be:46:cc:84:89:1a:b8:5f:5c:98:69:12:5e:93:b1:
6f:9c:5c:0d:85:05:d2:80:d7:af:1f:1d:5b:a1:24:
fd:be:e2:3a:2a:68:62:09:20:e9:87:87:b0:33:8f:
90:01:a6:86:e3:5f:80:9a:3a:1e:82:89:5b:7d:92:
66:b0:8a:54:19:72:75:5f:e2:70:91:dd:36:5e:4e:
69:bc:91:1d:61:73:9b:cc:3c:cd:35:79:56:74:ce:
b5:6b:68:13:78:79:0a:16:a1:a2:52:ea:8c:05:2f:
0e:83:50:7d:0f:13:e0:98:8d:59:5f:26:13:f5:68:
ad:fe:35:20:b6:0c:01:28:4c:67:07:19:6e:47:57:
9c:b5:fe:11:19:ad:eb:56:18:49:7c:2b:0f:7a:38:
0a:f1:92:65:58:3e:64:06:87:f1:af:ef:1c:54:87:
cc:8b:2b:d7:9f:d0:c3:70:ba:10:14:48:9a:04:a1:
2f:63:cd:b8:39:16:1d:e5:58:a2:0a:90:f1:c2:d9:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:46:E6:59:C6:2F:24:8D:EA:B0:90:32:A9:A1:0B:E4:0D:EE:12:DC
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:23:73:ec:ed:18:b3:08:f2:90:f1:fe:fe:87:67:c5:87:5c:
ca:e9:9d:17:3b:8c:83:fb:21:71:69:8e:7e:10:fc:ce:c4:5f:
41:19:40:03:0a:4a:93:5e:96:44:5c:dd:cc:0b:dd:a7:18:a6:
fc:09:ed:2b:0a:b7:b9:08:43:fa:06:79:95:e7:c3:ee:cb:d3:
4d:85:9c:63:82:bf:63:49:4b:3a:8c:1e:cf:af:21:d8:63:6e:
56:20:fb:a1:dc:cd:9d:6c:b3:4d:0b:a8:26:5f:1e:28:d1:82:
c2:15:ff:e7:3c:e8:9c:9f:93:83:c5:3a:9c:a9:58:fe:6c:fa:
7c:8e:62:c0:15:4f:79:3e:f7:34:27:0b:e2:4d:47:24:ce:bc:
5d:a5:9b:08:14:1d:26:cd:c9:5a:af:23:b2:6b:c2:48:aa:02:
8b:f1:5d:db:38:f3:4d:79:d1:15:ff:4d:e7:a1:90:f0:f2:b5:
fc:b8:88:03:01:cf:09:65:bc:f8:7d:f6:32:b4:fb:fa:c2:0f:
e0:95:ca:4b:34:48:83:bd:bd:f9:11:28:10:2c:66:46:e0:b6:
5d:c4:d8:27:82:21:63:43:a2:a1:99:36:a5:c7:84:fe:13:42:
57:8f:08:8d:0a:b7:ca:6a:b8:a8:7b:05:4b:a1:2b:d7:d4:96:
53:7a:1d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGHgshSV2gwe5dBX3pwscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmE1NTI2MDFjNDc3YzUyYmZjZTRhODhkYmFiZTFiN2Nk
NzJlMTkwHhcNMjUxMTA0MDkwMDE3WhcNMjUxMTA1MDkwMDE3WjAzMTEwLwYDVQQD
Eyg4ZjQ2ZTY1OWM2MmYyNDhkZWFiMDkwMzJhOWExMGJlNDBkZWUxMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Q+AyBxaJ5Rs7fdGkEw9YLKLPbR
A6JSy4LYVFEjTFrzP5t5JuNgUR6/1Gt616QxY6FWR1SaqURXbIG+RsyEiRq4X1yY
aRJek7FvnFwNhQXSgNevHx1boST9vuI6KmhiCSDph4ewM4+QAaaG41+Amjoegolb
fZJmsIpUGXJ1X+Jwkd02Xk5pvJEdYXObzDzNNXlWdM61a2gTeHkKFqGiUuqMBS8O
g1B9DxPgmI1ZXyYT9Wit/jUgtgwBKExnBxluR1ectf4RGa3rVhhJfCsPejgK8ZJl
WD5kBofxr+8cVIfMiyvXn9DDcLoQFEiaBKEvY824ORYd5ViiCpDxwtnT5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9G5lnGLySN6rCQMqmhC+QN7hLcMB8GA1UdIwQY
MBaAFNz6VSYBxHfFK/zkqI26vht81y4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQt
NDdjNjNjZGZmZDA4LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQtNDdjNjNjZGZmZDA4
LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCNz7O0Y
swjykPH+/odnxYdcyumdFzuMg/shcWmOfhD8zsRfQRlAAwpKk16WRFzdzAvdpxim
/AntKwq3uQhD+gZ5lefD7svTTYWcY4K/Y0lLOowez68h2GNuViD7odzNnWyzTQuo
Jl8eKNGCwhX/5zzonJ+Tg8U6nKlY/mz6fI5iwBVPeT73NCcL4k1HJM68XaWbCBQd
Js3JWq8jsmvCSKoCi/Fd2zjzTXnRFf9N56GQ8PK1/LiIAwHPCWW8+H32MrT7+sIP
4JXKSzRIg729+REoECxmRuC2XcTYJ4IhY0OioZk2pceE/hNCV48IjQq3ymq4qHsF
S6Er19SWU3odoQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:07:23 2025 by rpki-client