Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: YYXloAaYZPyC66FidQTWpxNJ01RNCLk5+t9x+eF2pig=
Subject key identifier: 67:A6:7A:EF:32:F0:46:C0:F9:77:19:CC:C3:15:58:E0:72:B1:38:14
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 0199FCC6CA616C377C73BE96E1CA7278CED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 14:01:50 +0000
Manifest this update: Sun 19 Oct 2025 14:01:50 +0000
Manifest next update: Mon 20 Oct 2025 14:01:50 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: c8/bygfD/DGfGeJt+dLeGAfqkBd/q5uDSXE+3G6v9jA=)
2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ca:61:6c:37:7c:73:be:96:e1:ca:72:78:ce:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Oct 19 14:01:50 2025 GMT
Not After : Oct 20 14:01:50 2025 GMT
Subject: CN=67a67aef32f046c0f97719ccc31558e072b13814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:c9:12:58:1b:c5:96:37:c0:28:6e:64:05:
03:f0:cd:a4:70:5c:4b:2c:b3:af:40:3e:91:61:f6:
78:ab:83:54:96:6c:fb:c4:0e:e7:12:27:cd:44:66:
c5:a1:30:df:59:c2:10:d9:52:10:bb:92:68:d3:7d:
c4:ac:03:99:c9:87:2c:d0:b0:f1:64:40:8c:14:8b:
38:ec:6d:d9:48:4e:60:7d:82:24:3b:a4:fa:fe:7c:
86:97:1a:97:32:b7:f2:65:4c:de:a0:0c:87:d4:6f:
a8:01:ec:95:70:d8:5d:cf:63:e3:8c:30:2d:ff:02:
ea:85:36:fa:1c:ac:d2:8e:96:be:7d:8d:c4:5d:08:
b5:96:07:ef:81:d4:80:a4:b6:f3:5d:5b:5c:bb:c6:
ee:b6:f4:20:5e:bd:e9:58:6f:5b:5a:de:b9:ec:cf:
1b:e0:47:08:1b:f7:63:61:58:df:75:7b:ea:e9:2c:
00:2e:01:fc:9e:50:7a:5d:36:90:71:b0:c1:f3:d8:
d3:83:27:82:12:ca:9f:ab:76:d3:be:3a:b4:27:6f:
04:d1:29:b9:f8:31:82:9c:ef:73:2a:60:16:f8:df:
db:2b:8d:6b:e7:14:ca:89:f4:28:56:c4:d5:33:22:
0a:1c:86:d8:08:8e:4d:ee:4f:45:2b:66:f5:52:ce:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A6:7A:EF:32:F0:46:C0:F9:77:19:CC:C3:15:58:E0:72:B1:38:14
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:54:eb:45:f0:72:65:0c:cb:41:ad:88:d7:65:9e:10:00:46:
4a:6c:a4:a1:52:be:20:d5:0c:6d:98:87:c3:4a:1c:a9:8b:74:
6c:83:44:8e:ac:0f:dd:4f:e1:ca:ef:d7:c8:e4:45:4d:c1:4c:
86:f4:8c:15:b1:86:0b:e7:5f:03:4c:55:ae:59:21:41:1d:5b:
96:d1:f9:2c:a6:71:28:0a:f8:53:26:12:c6:7e:fa:e7:c6:44:
32:c5:74:4e:f4:81:89:15:5c:bc:02:67:7a:3a:84:fa:27:3a:
21:0d:e3:53:a1:4e:11:db:c5:b5:45:0c:ac:9f:25:60:25:16:
4f:e7:6e:8e:a5:7c:68:db:74:d9:7f:08:e5:73:b3:71:de:81:
e5:1e:ea:23:c4:14:1c:96:da:c1:5a:25:ab:be:d6:9f:74:ef:
a7:0d:0f:db:ce:db:76:ed:92:be:22:e1:20:4e:c5:25:6c:bc:
9c:fc:1a:ff:76:1f:86:43:f2:a7:c4:5f:74:50:73:14:b8:88:
3f:0b:4e:12:c3:83:a5:78:84:5c:72:d2:31:f6:e9:cf:2b:d8:
7a:31:6c:50:40:c7:b2:88:08:0e:6c:38:50:49:23:50:a2:9b:
5c:6b:20:d0:de:69:4b:de:48:11:34:61:03:56:36:e8:8a:64:
33:17:16:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xsphbDd8c76W4cpyeM7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh
MzljNzEwHhcNMjUxMDE5MTQwMTUwWhcNMjUxMDIwMTQwMTUwWjAzMTEwLwYDVQQD
Eyg2N2E2N2FlZjMyZjA0NmMwZjk3NzE5Y2NjMzE1NThlMDcyYjEzODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt/JElgbxZY3wChuZAUD8M2kcFxL
LLOvQD6RYfZ4q4NUlmz7xA7nEifNRGbFoTDfWcIQ2VIQu5Jo033ErAOZyYcs0LDx
ZECMFIs47G3ZSE5gfYIkO6T6/nyGlxqXMrfyZUzeoAyH1G+oAeyVcNhdz2PjjDAt
/wLqhTb6HKzSjpa+fY3EXQi1lgfvgdSApLbzXVtcu8butvQgXr3pWG9bWt657M8b
4EcIG/djYVjfdXvq6SwALgH8nlB6XTaQcbDB89jTgyeCEsqfq3bTvjq0J28E0Sm5
+DGCnO9zKmAW+N/bK41r5xTKifQoVsTVMyIKHIbYCI5N7k9FK2b1Us7mPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGemeu8y8EbA+XcZzMMVWOBysTgUMB8GA1UdIwQY
MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt
NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0
LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFTrRfBy
ZQzLQa2I12WeEABGSmykoVK+INUMbZiHw0ocqYt0bINEjqwP3U/hyu/XyORFTcFM
hvSMFbGGC+dfA0xVrlkhQR1bltH5LKZxKAr4UyYSxn7658ZEMsV0TvSBiRVcvAJn
ejqE+ic6IQ3jU6FOEdvFtUUMrJ8lYCUWT+dujqV8aNt02X8I5XOzcd6B5R7qI8QU
HJbawVolq77Wn3Tvpw0P287bdu2SviLhIE7FJWy8nPwa/3YfhkPyp8RfdFBzFLiI
PwtOEsODpXiEXHLSMfbpzyvYejFsUEDHsogIDmw4UEkjUKKbXGsg0N5pS95IETRh
A1Y26IpkMxcWzA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:24 2025 by rpki-client