Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: cLyrOMg23qhjcgHkfNHZZkaSUK6eKPGVPiQ+ix+1OOs=
Subject key identifier: 85:22:06:E7:2B:4D:B4:F5:71:6F:81:C0:A4:AE:1F:E8:3A:56:4F:90
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 0199FCC69D7D3BF9636031F193E0804911D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 0890
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: UFxg1W09ze/SZYNZ6vxcOtIX0M2zL1TqOjkP4lSBNP8=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9d:7d:3b:f9:63:60:31:f1:93:e0:80:49:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=852206e72b4db4f5716f81c0a4ae1fe83a564f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:87:74:98:6c:2a:37:d6:1b:d1:4e:8b:5c:
1e:39:8c:d3:2c:df:6d:91:5d:71:54:61:8e:4a:28:
94:06:22:f1:c6:5e:c5:db:13:75:26:69:a8:c6:09:
33:79:90:b3:cf:cb:89:1d:1c:27:62:93:10:26:53:
46:1a:9f:dc:c9:32:09:a1:21:7f:54:f8:eb:b6:dc:
aa:16:17:e7:5e:4d:f6:34:5d:bc:fa:6d:29:91:cd:
c9:71:12:b9:3e:4a:bb:82:1a:40:1e:4d:f6:07:3f:
14:1e:1d:d4:9b:14:d7:bc:b2:fb:20:6e:65:8b:07:
bb:3b:e0:ec:45:d2:9d:9c:af:7a:f9:25:3e:73:76:
c7:3b:3e:3e:65:0e:c6:95:d1:67:46:16:3b:f5:f8:
8a:4e:89:bb:62:21:5c:17:fd:e5:2a:57:e8:83:ee:
2b:fc:61:e5:7c:7e:c9:1c:1b:18:78:78:d9:27:a1:
c6:22:6f:9e:b9:3c:53:13:e3:23:ec:e1:21:f6:c6:
73:2c:df:8c:2c:56:33:e1:9d:f6:63:ab:58:f1:4d:
21:85:20:17:75:f2:b4:39:60:e7:f0:bd:c2:a3:40:
70:8e:4c:07:cb:07:0a:95:f1:19:2e:ee:bc:18:0b:
58:ff:f4:18:9f:6f:0b:31:49:b9:5f:00:44:48:a2:
80:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:06:E7:2B:4D:B4:F5:71:6F:81:C0:A4:AE:1F:E8:3A:56:4F:90
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e5:b4:c4:be:9e:dc:49:4b:67:05:78:84:1f:cd:2d:b8:c3:
f2:d2:8b:a8:4a:f6:02:96:41:87:a2:53:73:0c:18:62:d2:d9:
2c:61:28:ca:a0:f9:51:46:70:ea:dc:0c:4e:4b:30:d8:ca:68:
a6:9d:60:34:55:78:5e:7b:0c:a8:ab:68:8e:46:01:38:a5:d6:
75:70:4f:b3:e6:c5:61:88:9f:b0:e3:c9:c0:48:54:ba:3c:99:
58:87:aa:56:f4:f6:d5:14:a6:c8:c6:a8:7a:33:24:de:a7:15:
bc:b8:ee:b0:62:d3:f1:3c:e9:ea:39:0f:8a:dc:77:ce:81:07:
2a:d7:ee:eb:0d:07:85:db:d0:94:7b:ea:89:32:87:7f:f4:41:
ac:60:1a:78:cb:ab:eb:9c:96:73:5a:f1:60:a0:22:00:91:0e:
8a:d4:b9:cc:f9:35:13:bb:81:91:60:3c:42:54:e5:0b:f6:95:
72:d2:11:31:95:90:2c:fa:3d:4f:b0:24:bc:0b:1e:4b:72:0d:
6b:09:a0:ba:f6:62:01:d3:1e:96:ae:7c:86:cd:de:6d:58:99:
dc:8b:28:54:99:36:b6:d5:b7:bc:e3:cd:a7:8d:7f:36:b1:e7:
68:10:b3:9b:b2:6b:92:aa:18:25:96:82:bf:76:39:9a:da:f8:
e7:3e:ac:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xp19O/ljYDHxk+CASRHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0
YjYxYTgwHhcNMjUxMDE5MTQwMTM4WhcNMjUxMDIwMTQwMTM4WjAzMTEwLwYDVQQD
Eyg4NTIyMDZlNzJiNGRiNGY1NzE2ZjgxYzBhNGFlMWZlODNhNTY0ZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbSHdJhsKjfWG9FOi1weOYzTLN9t
kV1xVGGOSiiUBiLxxl7F2xN1JmmoxgkzeZCzz8uJHRwnYpMQJlNGGp/cyTIJoSF/
VPjrttyqFhfnXk32NF28+m0pkc3JcRK5Pkq7ghpAHk32Bz8UHh3UmxTXvLL7IG5l
iwe7O+DsRdKdnK96+SU+c3bHOz4+ZQ7GldFnRhY79fiKTom7YiFcF/3lKlfog+4r
/GHlfH7JHBsYeHjZJ6HGIm+euTxTE+Mj7OEh9sZzLN+MLFYz4Z32Y6tY8U0hhSAX
dfK0OWDn8L3Co0BwjkwHywcKlfEZLu68GAtY//QYn28LMUm5XwBESKKA1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUiBucrTbT1cW+BwKSuH+g6Vk+QMB8GA1UdIwQY
MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt
OGQzNGY1NTc4MjJhLzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh
LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuW0xL6e
3ElLZwV4hB/NLbjD8tKLqEr2ApZBh6JTcwwYYtLZLGEoyqD5UUZw6twMTksw2Mpo
pp1gNFV4XnsMqKtojkYBOKXWdXBPs+bFYYifsOPJwEhUujyZWIeqVvT21RSmyMao
ejMk3qcVvLjusGLT8Tzp6jkPitx3zoEHKtfu6w0HhdvQlHvqiTKHf/RBrGAaeMur
65yWc1rxYKAiAJEOitS5zPk1E7uBkWA8QlTlC/aVctIRMZWQLPo9T7AkvAseS3IN
awmguvZiAdMelq58hs3ebViZ3IsoVJk2ttW3vOPNp41/NrHnaBCzm7JrkqoYJZaC
v3Y5mtr45z6swQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:24 2025 by rpki-client