Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: IOV8DjAeGUWweRJeIjidEa57o7lYLTzmxQGtBgRKv3Q=
Subject key identifier: CA:FD:54:A6:1B:A0:DA:DF:91:F4:27:17:E0:C8:68:4B:35:DF:C4:DD
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0199FBEB76F9D9A1D9F6E5725B4C501F8909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 1645
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: QZ86+ixHyoapOrhFrCYR1O6P187/3ab3Lnlmm3ybQno=)
2: al8koS69bS-s8w2qJPy0DIH-LdM.roa (hash: 8dyaX5bVUEeKp0uMU4rnBV4TQ+sOGF79J4YeMsznYDw=)
3: hzEaXmPaUY54VWFGqzsc9-S_jco.roa (hash: b/9Jt4SeZhitJ6bIYinYMhWctfBNjzRlJm/hiKWEzLY=)
4: iB-5Gh1pHVkAWY83mt70GWf7F_k.roa (hash: cjAD02BpLiwlKz0QWbmdYPtsy/2NR9/61nPXd4hWOkU=)
5: lICq0eo5P-Axsog5Hx6FXYSQY4k.roa (hash: JlcFYpOXnqLTDv9/pwm19BH50eR0rn9KZzLrCOo3RLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:76:f9:d9:a1:d9:f6:e5:72:5b:4c:50:1f:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=cafd54a61ba0dadf91f42717e0c8684b35dfc4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:1e:4f:50:76:d1:e7:f6:9f:c8:9e:20:54:
e7:56:a1:00:3b:ee:96:ca:99:4e:12:87:f5:2c:66:
49:10:33:54:92:31:47:13:c8:03:f5:1b:15:dc:3a:
15:39:8d:13:50:47:40:ae:a0:02:d7:54:30:21:e2:
23:2e:64:50:53:e4:4f:3d:32:4f:52:59:0d:68:76:
01:07:b8:dd:e2:4d:81:57:b3:31:d8:b6:5c:14:3b:
e1:d6:5b:c1:a4:bc:62:f3:2f:7b:21:f1:bd:90:04:
70:fa:59:b5:ab:9a:2d:58:5c:54:9f:ef:7f:03:3c:
d4:1a:ab:b8:7d:b1:a3:35:d5:b3:45:dd:e7:43:30:
a2:a8:0b:2e:90:25:8f:9c:f8:61:c2:ee:88:c9:7c:
75:15:9e:80:ce:02:2c:c3:20:27:7e:fb:f5:7c:af:
f2:bf:76:c3:98:9d:59:01:5c:9c:32:ad:30:b4:94:
25:7a:bd:75:41:ce:3f:79:29:20:51:33:a9:4b:94:
be:ad:9f:f0:70:a0:7e:4d:4f:d0:19:ec:eb:8b:af:
02:5a:82:e7:5f:65:5a:90:20:5d:49:90:87:ee:66:
c7:17:30:30:8e:98:90:c5:a8:43:3e:5d:19:a2:0d:
81:8e:aa:c0:53:14:75:77:80:8d:ff:9a:63:a4:df:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:54:A6:1B:A0:DA:DF:91:F4:27:17:E0:C8:68:4B:35:DF:C4:DD
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:15:d6:1a:bb:fc:55:e9:2b:02:c7:30:d3:22:35:3d:2f:
bf:5a:a9:cd:45:2e:22:8f:82:78:30:dc:da:5a:ba:0a:c9:2e:
3d:78:32:aa:c1:d2:bb:f2:82:46:30:52:39:b3:11:c7:1b:97:
94:78:6d:b5:d3:9b:ea:97:49:4e:ac:47:59:74:65:ed:c3:6f:
58:75:ea:bc:a9:8d:8a:1a:80:d7:eb:6b:72:e2:b6:b0:ee:c5:
a1:bc:4c:d8:2a:ed:64:63:ac:d4:a9:2c:92:84:ec:d6:b5:c6:
9d:ce:2b:37:76:83:22:37:57:47:83:1a:33:ad:7e:07:03:aa:
39:6d:3a:1d:ec:03:ec:ae:0f:42:ae:ab:c3:30:d6:44:fd:87:
09:e5:1b:c8:04:2d:50:49:94:0a:2d:e2:dd:4e:26:0e:e1:46:
63:bc:d6:4b:4e:1d:30:a9:0b:25:2e:1b:05:87:55:f7:7f:d1:
e5:cf:2f:59:c0:10:87:63:2c:1c:42:67:2e:79:1d:15:ec:6d:
e6:58:b1:75:6c:ea:42:4c:25:21:a6:ea:fb:b1:49:76:7a:f4:
06:d7:df:18:0d:32:52:02:2d:86:eb:db:14:75:27:32:3b:af:
62:74:5d:51:b1:8e:50:ac:d0:9d:6a:85:83:28:02:bd:2e:fa:
3e:47:99:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763b52aHZ9uVyW0xQH4kJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjUxMDE5MTAwMjE2WhcNMjUxMDIwMTAwMjE2WjAzMTEwLwYDVQQD
EyhjYWZkNTRhNjFiYTBkYWRmOTFmNDI3MTdlMGM4Njg0YjM1ZGZjNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM0eT1B20ef2n8ieIFTnVqEAO+6W
yplOEof1LGZJEDNUkjFHE8gD9RsV3DoVOY0TUEdArqAC11QwIeIjLmRQU+RPPTJP
UlkNaHYBB7jd4k2BV7Mx2LZcFDvh1lvBpLxi8y97IfG9kARw+lm1q5otWFxUn+9/
AzzUGqu4fbGjNdWzRd3nQzCiqAsukCWPnPhhwu6IyXx1FZ6AzgIswyAnfvv1fK/y
v3bDmJ1ZAVycMq0wtJQler11Qc4/eSkgUTOpS5S+rZ/wcKB+TU/QGezri68CWoLn
X2VakCBdSZCH7mbHFzAwjpiQxahDPl0Zog2BjqrAUxR1d4CN/5pjpN/+GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr9VKYboNrfkfQnF+DIaEs138TdMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkkV1hq7
/FXpKwLHMNMiNT0vv1qpzUUuIo+CeDDc2lq6CskuPXgyqsHSu/KCRjBSObMRxxuX
lHhttdOb6pdJTqxHWXRl7cNvWHXqvKmNihqA1+trcuK2sO7FobxM2CrtZGOs1Kks
koTs1rXGnc4rN3aDIjdXR4MaM61+BwOqOW06HewD7K4PQq6rwzDWRP2HCeUbyAQt
UEmUCi3i3U4mDuFGY7zWS04dMKkLJS4bBYdV93/R5c8vWcAQh2MsHEJnLnkdFext
5lixdWzqQkwlIabq+7FJdnr0BtffGA0yUgIthuvbFHUnMjuvYnRdUbGOUKzQnWqF
gygCvS76PkeZSw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:16 2025 by rpki-client