Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier: gnyzIbhP6Ed4Qw2h57IykcLmfXaKGDXhr3qc4elWEbs=
Subject key identifier: 69:46:27:9D:05:4A:97:B5:78:0D:F2:2F:DF:3B:7A:94:0D:5A:A7:7A
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 036B467AE63D86FC3CD0C2C8036306B6EBA11D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number: D9
Signing time: Tue 04 Nov 2025 05:32:05 +0000
Manifest this update: Tue 04 Nov 2025 05:27:05 +0000
Manifest next update: Wed 05 Nov 2025 07:50:05 +0000
Files and hashes: 1: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
2: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
3: AS834.roa (hash: 2mcI0qkzp8V/LGgi952jogtfghDvdysjT9Mot8wmRlI=)
4: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
5: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
6: AS207654.roa (hash: ZSFxThGneIBH2yStTA3bBZlpPy8KbeO+royJpbkOmHc=)
7: AS174.roa (hash: DaMQTt3FIh4yanc24DJw+nqwU+ihbYdYEHEGuJChWyA=)
8: AS393942.roa (hash: 46l3bM7TWiGl0BQ1hT2AGGcKGBGq0dWoMtWX2ZzlhYQ=)
9: AS401776.roa (hash: NJSAEzC4UThA3h4mwAlPIKBzvUnXhbmTO6s+w9msMjA=)
10: AS63199.roa (hash: 12M/4rDEnNlu6NpcT1coUXqoQ04lDw3cZPaAu5+YbWM=)
11: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
12: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
13: AS984.roa (hash: QG+vO3eIVnFVeSdGGuecccx/sa9flvva6qr8UCo7GNI=)
14: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
15: AS396982.roa (hash: wck0Q0rqhEQ5SkcL+goIs+/wb4+g0gW+rKGQFTxR6SE=)
16: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
17: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
18: AS214025.roa (hash: S+Y7ACmnPyLFx3wUM5GQmFaaoiI/cGnBmul8wsZLMZQ=)
19: AS214483.roa (hash: 6RqqmAQfiH5vxDsevnysTOwpoPe3+DXp3DMdAvOkobQ=)
20: AS27463.roa (hash: Qa9G1fyPkPtivskG7RmcNp+V3FFUx0ZZAO5NHVFED+0=)
21: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
22: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: xwRKA/Iz/tB3dIbiFZBGQC+NyJOhNLBxXAIFL8dzY4Q=)
23: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
24: AS48266.roa (hash: wN58VW25Z+LecojZP+oOAtM/5chfYovrCCO/Cl8gTkE=)
25: AS51202.roa (hash: jaf9+CqmSdD1PtQyT9sqfS5mksQ+Id5vFWrK+ivPIzo=)
26: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
27: AS152179.roa (hash: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=)
28: AS9009.roa (hash: HeIn3LUbPLqmFMnLZmgQe08tqcX0eAlPHd3caG3Qv+E=)
29: AS205886.roa (hash: sIoKLcdpSKHvFMoPqzWMK50V63lanyxAJGGUzmrRPLs=)
30: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
31: AS206781.roa (hash: u5AtvuN8DZoybC5jmpdLGiJIsJAgQ1te19Ty/6LaNP8=)
32: AS214432.roa (hash: BQxrTBE0A/cDkLfmkbSxeUneswUMu8VUv4klEIsDgtw=)
33: AS16276.roa (hash: SYJBEyw5v+f2dgoz+YEv7BlN2WoV56h0hjwrPXJp+PU=)
34: AS3320.roa (hash: Yr9E4NEO2sJzZFwsOz613kAb9AxoZeahd0Ea69UMrZU=)
35: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
36: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
37: AS197537.roa (hash: cJiH56Inady06LVYFGnSVA2pFpnweyE/PUKSOh0efWc=)
38: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
39: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
40: AS9304.roa (hash: AKSsIFJ9dIsTIbmq0ZJu8nzGzMGq4ZigbVERcSndunc=)
41: AS8820.roa (hash: QrwovIcaJEB2G0op7XzDDiP/g5RHgBPvlH2xjnTllSE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6b:46:7a:e6:3d:86:fc:3c:d0:c2:c8:03:63:06:b6:eb:a1:1d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Nov 4 05:27:05 2025 GMT
Not After : Nov 5 07:50:05 2025 GMT
Subject: CN=6946279D054A97B5780DF22FDF3B7A940D5AA77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:98:44:18:18:85:7e:5c:0d:c4:30:b1:f5:
fb:35:f0:d1:52:e0:08:0c:b4:d4:a5:ca:51:3f:28:
bd:27:11:0f:cc:ee:b2:3e:d3:d3:7d:bc:da:a6:62:
a8:32:47:0b:0a:b5:a6:c3:7c:ec:ef:74:98:9b:00:
7a:8f:b8:4c:1e:cb:48:50:04:7a:c7:31:1d:4c:d1:
eb:16:30:e8:5d:51:0e:85:c8:32:2a:1b:97:41:37:
1f:c9:a8:46:2e:97:c1:7d:12:c9:10:93:80:25:3b:
2e:22:4f:0d:f5:c9:88:5e:bd:81:0d:0c:2e:1b:d5:
a2:ce:14:ec:82:8b:67:16:0a:4f:5d:92:24:21:67:
cd:7c:dd:49:b1:a4:c2:e5:fd:b7:8b:38:cf:37:3c:
dc:c4:81:7f:ea:3c:af:26:52:7e:69:48:61:f0:ee:
3c:f9:bd:10:12:71:19:95:93:ba:ad:ea:82:58:07:
76:f7:a9:a0:1a:63:c8:56:10:48:60:2d:52:4e:c2:
10:b6:4f:82:90:52:4a:9a:54:54:55:03:fd:34:ca:
29:e7:4f:14:51:98:18:1d:26:80:9a:e3:34:7c:dc:
10:9d:3a:20:58:fd:51:ef:ac:9e:4d:68:37:b0:ca:
b3:78:22:36:27:01:04:a7:87:40:7a:1d:05:09:d0:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:27:9D:05:4A:97:B5:78:0D:F2:2F:DF:3B:7A:94:0D:5A:A7:7A
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:97:95:10:28:2b:1f:90:11:91:2b:a3:f8:76:e9:f2:17:f3:
8f:6c:a6:d7:78:df:96:82:d9:a6:42:b6:ff:b1:dd:c3:ef:16:
f6:32:d2:a8:2e:52:86:0a:c0:40:9e:82:cc:38:11:59:c7:ab:
d6:d0:91:f6:44:d9:08:d2:94:09:ec:b9:6d:fb:f2:2c:93:99:
e6:f0:b8:ef:a9:ea:21:44:79:1d:55:f4:8f:fa:e6:1f:ad:ff:
a1:4f:a0:2e:ba:8e:fb:f1:36:c4:9f:92:3f:97:df:67:19:49:
1f:38:b8:12:30:46:a5:c2:dc:da:b0:40:39:41:79:49:2c:5b:
9a:fd:a1:20:f9:af:5e:b7:3a:8d:9c:fd:44:03:82:27:2d:a8:
88:62:ab:2d:c2:e8:7e:55:36:2d:2c:9f:0f:cd:d0:52:73:38:
1d:27:07:eb:94:68:f5:66:6c:79:ca:18:9d:51:c5:97:af:32:
bb:2b:9d:07:b2:35:fa:77:94:30:66:25:01:76:18:45:42:12:
bc:40:0f:eb:cd:e9:e8:16:be:69:c6:72:d4:53:4a:29:cd:b7:
e4:37:b7:4c:11:17:b4:c1:3e:54:40:ea:59:4a:81:dc:2a:95:
b0:36:b0:7d:13:e9:76:3d:38:5e:93:d0:5e:56:11:72:ef:a2:
7f:e4:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:05 2025 by rpki-client