Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: nkFDb3nZipLLTxfYa2ogTB2soPyIXoccYtOAhsCFSM4=
Subject key identifier: 12:E7:CA:43:5B:ED:8A:42:B0:6F:90:8C:6F:6B:D4:F9:10:EA:24:3F
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 0199FCFD53CFDEDCCC3341AA4B22846B2EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 0107
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: mhtOWeXhFQduYoewhGCrRmxb3ZXc6wbXTz5H1RLHUPA=)
2: Q4iWZ496HCNmYZBIWBOYyxR29Uc.roa (hash: 7wrmL3IIhgsOUmrN36LQ1NncM+5WHq2SxfG9P1s/Hs8=)
3: elJZVsJM-cu186hJqa3wLJ-HvIY.roa (hash: ARy/RhAUZB3gjAcZcQ/EM7MONeLO821NzwpDjV1Ze2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:53:cf:de:dc:cc:33:41:aa:4b:22:84:6b:2e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=12e7ca435bed8a42b06f908c6f6bd4f910ea243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:b2:7d:6d:7e:5e:04:39:d1:de:eb:17:5d:
21:63:1c:55:bd:19:90:7a:aa:a3:16:4f:73:7c:bc:
fd:ad:f0:fa:29:dc:23:7a:48:6a:d4:26:36:8f:fe:
66:25:2e:10:a7:15:71:2b:31:30:39:81:39:04:8f:
8c:0a:41:f4:d6:83:86:46:37:d2:23:41:f0:79:7c:
b9:ac:95:9b:e4:fb:a6:16:49:5b:18:2c:64:af:0e:
d6:88:86:15:6a:03:28:00:1a:ad:9e:40:87:ad:08:
6f:c3:3a:af:00:9a:d2:f7:83:0b:c9:8b:d2:af:12:
3f:01:25:e0:7c:e4:2b:7f:5f:49:f4:dc:63:33:13:
27:ee:2c:2a:14:23:e4:68:fe:14:0e:11:d7:10:6e:
d0:ac:e0:dd:4f:49:54:d2:dc:c9:5f:da:66:54:56:
82:30:73:a2:cb:cb:2f:58:76:fd:4d:0e:d2:07:d7:
ff:58:f9:34:bc:91:0e:71:ec:37:41:7c:36:b1:db:
04:29:68:3a:7a:e2:c0:86:57:c0:9f:90:cb:0c:3f:
66:58:e1:db:8e:53:1f:b9:ab:97:c6:34:0d:ec:bb:
10:1c:4c:f1:0f:be:7a:6b:c5:08:e7:f8:37:e2:73:
cc:e2:d2:41:45:b1:2c:8c:fe:e3:7b:42:f1:7e:b0:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E7:CA:43:5B:ED:8A:42:B0:6F:90:8C:6F:6B:D4:F9:10:EA:24:3F
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:71:c3:d4:b4:8f:38:ab:ea:c7:a9:44:f5:ec:d1:99:3c:0e:
0e:62:52:44:bd:7c:95:8c:03:5a:63:00:13:6b:4d:7d:d6:cb:
ce:50:67:85:da:54:71:83:e1:79:27:ac:c7:65:9a:7b:fb:09:
68:65:7b:96:27:b0:d2:11:10:b9:1a:6b:d5:ac:41:12:9a:1c:
e4:3e:7c:b9:9e:f4:cc:d2:98:a4:03:c3:b4:42:67:8c:38:62:
8f:ad:0b:59:2f:a9:62:a9:3a:a5:12:02:4e:c4:b0:ad:ed:5b:
bc:f4:4b:bd:d9:f7:0c:80:fe:68:25:83:e9:a3:d0:2b:3f:cf:
26:d6:ff:7b:fd:14:87:ca:be:30:31:e7:09:11:d6:97:18:22:
58:9a:9a:95:18:44:11:28:55:c1:8a:41:45:0e:16:9a:f8:21:
fb:8b:ed:c7:9f:64:81:ba:ea:56:5f:20:01:b4:11:3f:14:69:
9d:9a:88:50:55:d6:df:ca:94:c0:26:8b:2d:76:34:b2:42:1c:
33:2c:3c:10:00:c3:3d:24:67:00:3f:bd:3e:c9:31:f6:44:39:
54:03:37:99:4d:0c:1b:ec:9c:91:99:c6:e6:91:f6:e0:2c:db:
11:5f:0c:67:4a:55:a1:c8:42:72:c3:7b:1a:b1:1c:30:e4:6e:
ae:81:f5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VPP3tzMM0GqSyKEay72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTRhNTA3YWQxNTg2NWEwYjJlZWMwOWViYjRlNzU0NTdm
NDAxOGIwHhcNMjUxMDE5MTUwMTI0WhcNMjUxMDIwMTUwMTI0WjAzMTEwLwYDVQQD
EygxMmU3Y2E0MzViZWQ4YTQyYjA2ZjkwOGM2ZjZiZDRmOTEwZWEyNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfayfW1+XgQ50d7rF10hYxxVvRmQ
eqqjFk9zfLz9rfD6Kdwjekhq1CY2j/5mJS4QpxVxKzEwOYE5BI+MCkH01oOGRjfS
I0HweXy5rJWb5PumFklbGCxkrw7WiIYVagMoABqtnkCHrQhvwzqvAJrS94MLyYvS
rxI/ASXgfOQrf19J9NxjMxMn7iwqFCPkaP4UDhHXEG7QrODdT0lU0tzJX9pmVFaC
MHOiy8svWHb9TQ7SB9f/WPk0vJEOcew3QXw2sdsEKWg6euLAhlfAn5DLDD9mWOHb
jlMfuauXxjQN7LsQHEzxD756a8UI5/g34nPM4tJBRbEsjP7je0LxfrCWcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLnykNb7YpCsG+QjG9r1PkQ6iQ/MB8GA1UdIwQY
MBaAFN6kpQetFYZaCy7sCeu051RX9AGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUt
OTIyZTIyNDQ1OWZiLzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUtOTIyZTIyNDQ1OWZi
LzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHHD1LSP
OKvqx6lE9ezRmTwODmJSRL18lYwDWmMAE2tNfdbLzlBnhdpUcYPheSesx2Wae/sJ
aGV7liew0hEQuRpr1axBEpoc5D58uZ70zNKYpAPDtEJnjDhij60LWS+pYqk6pRIC
TsSwre1bvPRLvdn3DID+aCWD6aPQKz/PJtb/e/0Uh8q+MDHnCRHWlxgiWJqalRhE
EShVwYpBRQ4Wmvgh+4vtx59kgbrqVl8gAbQRPxRpnZqIUFXW38qUwCaLLXY0skIc
Myw8EADDPSRnAD+9Pskx9kQ5VAM3mU0MG+yckZnG5pH24CzbEV8MZ0pVochCcsN7
GrEcMORuroH1iw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:35 2025 by rpki-client