Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: mW8EKt05IaLEwbvTv3zcA1g4I09ZZw+0jNkaFML9DiQ=
Subject key identifier: E2:BF:23:98:8B:C7:95:F7:39:F2:71:11:71:C6:E8:E9:C8:63:9F:E1
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019A006BFD0362AC290376F63AFD08313DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0D0D
Signing time: Mon 20 Oct 2025 07:01:08 +0000
Manifest this update: Mon 20 Oct 2025 07:01:08 +0000
Manifest next update: Tue 21 Oct 2025 07:01:08 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: 52RYG0PTaZzTQJsdYv++nYXTfvZjxOPL5ZhxBxrgXaI=)
2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:fd:03:62:ac:29:03:76:f6:3a:fd:08:31:3d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Oct 20 07:01:08 2025 GMT
Not After : Oct 21 07:01:08 2025 GMT
Subject: CN=e2bf23988bc795f739f2711171c6e8e9c8639fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:a0:ab:68:87:11:e3:b9:de:54:49:66:bc:
b3:77:7d:55:53:8d:72:9c:9c:dc:83:54:32:19:40:
a0:e4:79:d5:f2:8a:d4:33:34:4f:2f:2c:22:c6:68:
a6:d3:28:de:6d:f6:7e:cc:86:05:87:1f:bf:24:75:
da:f8:49:c9:6d:d9:4c:13:b5:71:c0:e8:49:a2:59:
e4:d1:08:a8:8d:23:1b:86:7d:7a:6b:c5:d7:e2:45:
0b:70:76:0c:9d:4c:92:50:5d:38:d9:22:4e:d7:6f:
a6:03:b0:61:8e:7b:dd:34:d2:d0:55:b5:38:5e:bf:
f8:00:c8:43:38:e9:8d:ea:2c:41:4c:a1:20:f3:9d:
74:02:a0:97:5b:12:8b:c3:25:64:ee:3f:0b:05:b5:
db:4a:18:9f:1b:fb:d5:10:9e:3b:2b:52:c7:38:74:
b3:71:57:15:6b:3a:de:ba:f3:ca:a3:2f:24:dd:0e:
89:45:7d:f0:c7:59:37:50:bc:c2:c0:0a:3a:d0:f5:
29:3a:d0:00:f4:9a:22:84:a1:6b:4c:df:c0:25:05:
b8:fe:c3:2a:eb:23:d1:10:d1:e7:ce:bd:1a:52:d3:
31:2e:de:47:79:3f:1f:5f:c5:d3:86:a7:83:50:18:
da:a2:da:8a:2d:58:1f:a0:bd:50:67:d0:18:8f:b7:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BF:23:98:8B:C7:95:F7:39:F2:71:11:71:C6:E8:E9:C8:63:9F:E1
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:a2:b9:f2:23:ae:9b:fe:53:fd:78:eb:ea:ff:d7:2e:86:
b9:b7:52:d9:88:e8:78:fb:67:1a:ac:4c:02:1d:31:1d:06:c1:
cb:9c:08:c3:f4:1c:28:28:f4:0b:6e:a2:4b:0b:4b:4c:8f:5a:
8e:d6:93:2f:76:d3:5e:b4:f0:70:02:e4:af:fe:58:68:19:4c:
61:6c:d5:7e:f9:11:d4:a2:6f:24:1c:a5:d8:b5:69:ce:0f:b8:
de:9f:a6:6f:40:cf:f4:fe:c1:07:e7:a0:96:82:6b:ec:46:7e:
10:90:7c:b8:85:be:b1:50:45:99:e8:56:c1:92:49:c4:b3:2b:
cb:ee:66:dc:7f:5b:ae:80:07:6c:0b:55:e9:87:67:ee:94:9e:
87:90:6b:0a:68:ab:f2:2a:c5:d9:fe:08:ef:7c:52:ee:7a:e3:
26:d0:82:9d:36:18:06:b6:79:5c:58:9d:5c:b1:08:ba:61:98:
1f:da:c1:04:3f:ab:fa:fb:cf:28:c3:4e:31:15:30:a8:11:2c:
d2:a6:fc:53:ae:ee:2b:22:fa:25:97:65:0f:b6:8b:4b:df:16:
d1:f9:66:32:af:4a:8f:a0:ca:f5:72:f7:a1:78:a1:83:78:fc:
de:11:60:34:df:e8:22:ad:4f:e5:38:3b:d4:09:f4:a8:e7:44:
f8:97:a3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAa/0DYqwpA3b2Ov0IMT2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjUxMDIwMDcwMTA4WhcNMjUxMDIxMDcwMTA4WjAzMTEwLwYDVQQD
EyhlMmJmMjM5ODhiYzc5NWY3MzlmMjcxMTE3MWM2ZThlOWM4NjM5ZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVegq2iHEeO53lRJZryzd31VU41y
nJzcg1QyGUCg5HnV8orUMzRPLywixmim0yjebfZ+zIYFhx+/JHXa+EnJbdlME7Vx
wOhJolnk0QiojSMbhn16a8XX4kULcHYMnUySUF042SJO12+mA7BhjnvdNNLQVbU4
Xr/4AMhDOOmN6ixBTKEg8510AqCXWxKLwyVk7j8LBbXbShifG/vVEJ47K1LHOHSz
cVcVazreuvPKoy8k3Q6JRX3wx1k3ULzCwAo60PUpOtAA9JoihKFrTN/AJQW4/sMq
6yPRENHnzr0aUtMxLt5HeT8fX8XThqeDUBjaotqKLVgfoL1QZ9AYj7dXYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK/I5iLx5X3OfJxEXHG6OnIY5/hMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid+iufIj
rpv+U/146+r/1y6GubdS2YjoePtnGqxMAh0xHQbBy5wIw/QcKCj0C26iSwtLTI9a
jtaTL3bTXrTwcALkr/5YaBlMYWzVfvkR1KJvJByl2LVpzg+43p+mb0DP9P7BB+eg
loJr7EZ+EJB8uIW+sVBFmehWwZJJxLMry+5m3H9broAHbAtV6Ydn7pSeh5BrCmir
8irF2f4I73xS7nrjJtCCnTYYBrZ5XFidXLEIumGYH9rBBD+r+vvPKMNOMRUwqBEs
0qb8U67uKyL6JZdlD7aLS98W0flmMq9Kj6DK9XL3oXihg3j83hFgNN/oIq1P5Tg7
1An0qOdE+Jej2w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:35 2025 by rpki-client