Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: qjyByEjyhBIDsgBNUGTKkFsp36kIBQxoXuIVga1hz6o=
Subject key identifier: 47:73:A6:93:86:95:27:A0:DE:82:47:36:C9:05:BE:62:F8:FC:F7:D2
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 0199FD348DC9AD35CBD98DA78A10908011C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: 2TIj1IdYUz/vjyab1HqBwnYLxo9m5S/MvQjTI1XcIyo=)
2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=)
3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=)
4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8d:c9:ad:35:cb:d9:8d:a7:8a:10:90:80:11:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=4773a693869527a0de824736c905be62f8fcf7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:24:16:b8:4b:ed:ae:b6:43:e5:a8:24:41:
5c:64:32:e5:72:8e:2b:a9:35:fe:65:d3:ed:f6:7f:
ff:87:ff:96:22:62:e7:57:8b:cd:46:c6:3d:f8:c1:
3b:45:78:53:c2:e5:b6:64:5e:2a:b5:a5:83:97:3a:
d7:ab:3e:f4:e6:d6:65:ce:f7:6a:8b:d6:14:e4:80:
df:f8:2d:ae:85:07:b8:2e:72:3d:c3:75:53:64:c3:
b8:1c:e9:3a:52:c6:63:cb:c3:32:bf:ff:48:6e:10:
3c:57:10:b6:b1:ca:05:49:4e:e9:c4:31:dd:bb:e0:
c9:1b:56:a6:40:a4:6f:eb:e6:c6:60:45:08:2b:c1:
bd:51:07:ed:a3:6f:a5:37:1b:f2:81:62:da:84:64:
18:e7:ff:cf:ec:2d:28:cd:48:1a:1a:fe:eb:3a:e1:
45:b2:87:aa:93:2e:f0:63:5a:28:d3:51:80:2c:bc:
87:0b:e5:d4:59:a7:7c:af:0b:db:8d:4b:29:55:b6:
80:c3:9d:40:1d:d8:3d:0a:2d:79:d9:d0:dc:db:e1:
e4:ff:0c:c2:9a:f4:32:46:69:21:17:a2:78:76:b0:
b4:60:f5:84:e8:68:33:1c:34:7b:cd:db:a9:d6:71:
9d:a1:d2:5e:28:d8:17:52:19:0b:13:2b:cb:ab:6c:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:73:A6:93:86:95:27:A0:DE:82:47:36:C9:05:BE:62:F8:FC:F7:D2
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cc:ea:23:27:5b:c5:a1:14:9f:d6:b0:47:3e:1d:39:07:9c:
1c:e3:53:a4:64:ab:f7:d6:22:5d:a2:78:7f:6e:0b:2b:b6:3b:
46:33:c3:07:83:d3:01:89:9a:81:db:a1:7f:67:fb:7e:1e:4e:
38:02:74:cd:35:d5:bc:e6:0f:97:df:28:e0:85:f1:dd:fa:71:
5b:82:d0:55:2f:54:16:e8:7a:3f:1a:e4:c3:76:a3:20:e0:bf:
bc:e3:84:b9:13:b3:e7:16:37:10:01:b7:64:f0:46:33:bd:13:
2c:25:7f:d9:ed:e9:b8:ce:62:83:e5:9e:7a:50:df:91:eb:ee:
0b:14:a3:f8:57:50:39:f7:18:0f:9e:aa:e1:55:ee:ee:dd:10:
5d:ea:78:76:9e:ee:e3:df:15:13:bb:3c:9e:16:05:c4:39:39:
a3:f6:74:64:6b:63:17:77:3b:b0:cf:e0:53:4a:12:b6:37:aa:
e9:bb:dc:47:d5:34:13:08:06:82:f9:06:b5:c1:8f:84:c5:d5:
98:c5:b8:9e:e7:d2:7e:f1:07:07:27:9c:d0:b0:f8:49:f7:e7:
27:fc:03:9b:1b:28:ec:56:fc:e3:c4:cd:35:98:0b:7d:b5:a1:
1f:b8:9d:ec:5e:f7:a0:d7:55:fd:64:c0:cd:22:73:d7:dc:c2:
5c:f3:77:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NI3JrTXL2Y2nihCQgBHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2IyZDVmYjI1Mzg1MmYxODIzYzY1NDM0ZThmMjc2ZDA0
ZTRlMGMwHhcNMjUxMDE5MTYwMTQzWhcNMjUxMDIwMTYwMTQzWjAzMTEwLwYDVQQD
Eyg0NzczYTY5Mzg2OTUyN2EwZGU4MjQ3MzZjOTA1YmU2MmY4ZmNmN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMMkFrhL7a62Q+WoJEFcZDLlco4r
qTX+ZdPt9n//h/+WImLnV4vNRsY9+ME7RXhTwuW2ZF4qtaWDlzrXqz705tZlzvdq
i9YU5IDf+C2uhQe4LnI9w3VTZMO4HOk6UsZjy8Myv/9IbhA8VxC2scoFSU7pxDHd
u+DJG1amQKRv6+bGYEUIK8G9UQfto2+lNxvygWLahGQY5//P7C0ozUgaGv7rOuFF
soeqky7wY1oo01GALLyHC+XUWad8rwvbjUspVbaAw51AHdg9Ci152dDc2+Hk/wzC
mvQyRmkhF6J4drC0YPWE6GgzHDR7zdup1nGdodJeKNgXUhkLEyvLq2wefQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdzppOGlSeg3oJHNskFvmL4/PfSMB8GA1UdIwQY
MBaAFNzLLV+yU4UvGCPGVDTo8nbQTk4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQt
ZTFhOGE2ZjFkNTlhLzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQtZTFhOGE2ZjFkNTlh
LzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMzqIydb
xaEUn9awRz4dOQecHONTpGSr99YiXaJ4f24LK7Y7RjPDB4PTAYmagduhf2f7fh5O
OAJ0zTXVvOYPl98o4IXx3fpxW4LQVS9UFuh6Pxrkw3ajIOC/vOOEuROz5xY3EAG3
ZPBGM70TLCV/2e3puM5ig+WeelDfkevuCxSj+FdQOfcYD56q4VXu7t0QXep4dp7u
498VE7s8nhYFxDk5o/Z0ZGtjF3c7sM/gU0oStjeq6bvcR9U0EwgGgvkGtcGPhMXV
mMW4nufSfvEHByec0LD4SffnJ/wDmxso7Fb848TNNZgLfbWhH7id7F73oNdV/WTA
zSJz19zCXPN3bQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:57 2025 by rpki-client