Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: IdMcncd9JiDvjksPsUyojq0jlVKe6duCU+AKKdeWkq0=
Subject key identifier: 6A:71:0C:58:7E:8C:B4:D7:93:81:28:AB:08:DB:6F:54:7C:B1:F7:59
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 0199FF22DC1DEB840179C699D6B141886B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 01:01:38 +0000
Manifest this update: Mon 20 Oct 2025 01:01:38 +0000
Manifest next update: Tue 21 Oct 2025 01:01:38 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: NZ/ZanSJhNk5ysWljINeZSQra5uMadhg6cC5Sb89Ir0=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:dc:1d:eb:84:01:79:c6:99:d6:b1:41:88:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Oct 20 01:01:38 2025 GMT
Not After : Oct 21 01:01:38 2025 GMT
Subject: CN=6a710c587e8cb4d7938128ab08db6f547cb1f759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:5b:4b:78:4d:06:a3:36:8d:52:35:19:45:
7b:cc:03:40:67:88:f0:4f:2b:79:10:e9:81:45:73:
bc:d0:5c:01:23:28:73:59:d2:11:a0:62:2d:e3:8e:
ad:67:c4:e7:b9:12:14:25:1e:70:b1:58:bc:a8:5b:
8f:b1:3e:42:bc:8e:b2:47:b6:01:96:87:7e:24:f1:
0c:72:46:36:16:2a:3d:85:1a:9c:b9:e1:85:70:9a:
2d:4b:59:26:33:e0:28:0a:05:76:90:34:e9:48:64:
0b:ae:5c:b2:58:66:e5:c6:a2:2b:fe:45:26:d1:dc:
25:55:13:15:c2:cb:f0:0b:1c:18:b1:ed:a8:35:ac:
f2:6a:81:43:4a:03:6d:80:46:ec:17:63:73:f3:10:
fe:13:7d:69:bc:64:40:ff:f4:95:12:f6:6d:2d:ff:
90:ff:75:f0:58:aa:26:f9:8a:b1:a5:1b:5e:30:5b:
b6:01:8c:dc:c1:c0:57:04:fd:44:ff:d4:e4:ec:d9:
99:b4:c2:bf:fb:2b:97:be:6b:24:d1:cd:dd:0c:40:
c8:f4:45:f9:bd:e9:0c:8f:9e:0a:a4:0a:a1:f7:6c:
d8:68:34:8d:d0:d0:44:c4:28:2b:64:c0:1b:03:79:
36:34:c1:1e:97:a8:d5:b9:68:41:26:9b:47:f3:e2:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:0C:58:7E:8C:B4:D7:93:81:28:AB:08:DB:6F:54:7C:B1:F7:59
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5d:ef:9d:47:83:88:8f:6a:d8:29:c3:bd:04:b4:ef:c5:4e:
68:29:c5:de:02:01:48:32:24:8b:46:6a:e2:88:d0:b1:36:86:
6f:de:95:14:af:6f:b1:95:f7:f0:50:85:a9:05:d4:2d:1e:b8:
78:e5:73:27:15:d5:53:a7:44:c6:0f:92:05:d8:24:11:05:a1:
20:d1:e7:51:b8:0d:63:34:9b:71:3e:0d:22:ae:84:cf:ee:07:
7c:e4:14:33:62:f8:99:c3:f2:32:3c:32:7f:13:80:20:f2:83:
8d:65:e3:d8:69:43:e4:35:a7:47:cf:f1:53:c1:b0:1b:4b:de:
bd:96:d6:c2:e4:3f:3e:16:0d:5b:70:bb:98:8a:32:72:0b:0d:
9f:e5:b4:49:28:c5:59:72:18:23:de:82:a3:04:17:0f:ce:d2:
12:6d:b8:3e:7f:02:8b:fd:07:e6:07:60:9b:8d:ff:f1:67:84:
1e:ae:d0:91:d5:d9:f6:73:d7:59:7b:96:95:7b:ef:60:38:93:
95:d5:f7:b9:db:7c:f7:69:20:6e:70:3b:ce:ab:35:30:0c:d1:
18:2c:de:4e:10:67:27:50:56:6f:f1:15:5b:9c:49:7c:f8:78:
3e:7b:b0:32:01:55:8d:9b:c8:01:61:1f:e9:80:c9:ed:9f:68:
3f:11:7c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Itwd64QBecaZ1rFBiGsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjUxMDIwMDEwMTM4WhcNMjUxMDIxMDEwMTM4WjAzMTEwLwYDVQQD
Eyg2YTcxMGM1ODdlOGNiNGQ3OTM4MTI4YWIwOGRiNmY1NDdjYjFmNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1NbS3hNBqM2jVI1GUV7zANAZ4jw
Tyt5EOmBRXO80FwBIyhzWdIRoGIt446tZ8TnuRIUJR5wsVi8qFuPsT5CvI6yR7YB
lod+JPEMckY2Fio9hRqcueGFcJotS1kmM+AoCgV2kDTpSGQLrlyyWGblxqIr/kUm
0dwlVRMVwsvwCxwYse2oNazyaoFDSgNtgEbsF2Nz8xD+E31pvGRA//SVEvZtLf+Q
/3XwWKom+YqxpRteMFu2AYzcwcBXBP1E/9Tk7NmZtMK/+yuXvmsk0c3dDEDI9EX5
vekMj54KpAqh92zYaDSN0NBExCgrZMAbA3k2NMEel6jVuWhBJptH8+Iq0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpxDFh+jLTXk4Eoqwjbb1R8sfdZMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV3vnUeD
iI9q2CnDvQS078VOaCnF3gIBSDIki0Zq4ojQsTaGb96VFK9vsZX38FCFqQXULR64
eOVzJxXVU6dExg+SBdgkEQWhINHnUbgNYzSbcT4NIq6Ez+4HfOQUM2L4mcPyMjwy
fxOAIPKDjWXj2GlD5DWnR8/xU8GwG0vevZbWwuQ/PhYNW3C7mIoycgsNn+W0SSjF
WXIYI96CowQXD87SEm24Pn8Ci/0H5gdgm43/8WeEHq7QkdXZ9nPXWXuWlXvvYDiT
ldX3udt892kgbnA7zqs1MAzRGCzeThBnJ1BWb/EVW5xJfPh4PnuwMgFVjZvIAWEf
6YDJ7Z9oPxF8LA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:43 2025 by rpki-client