Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: jTro/+c7j4Sa4+vvOLjYmGt7bZ3ie3BmUdHrylgsiPA=
Subject key identifier: A5:F3:1A:15:59:78:69:23:DF:E1:33:82:0C:2C:E4:5A:EB:0D:BC:85
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 0199FD34881270735DC0D3A208631CB271F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 04B3
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: zR7yv6RVy5+aLrpE4KahngtsYdopWAXj9vGFbDWbfgU=)
2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:88:12:70:73:5d:c0:d3:a2:08:63:1c:b2:71:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=a5f31a1559786923dfe133820c2ce45aeb0dbc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:ae:c0:34:6f:50:e0:af:79:21:c6:0b:fa:
35:6a:ac:21:3b:3b:c8:dd:35:b4:71:71:2c:c3:4c:
01:5e:ea:88:33:df:d4:67:f7:3b:6a:4c:85:19:7e:
23:9b:be:81:cc:69:fe:9b:33:fd:2f:e7:2c:f6:9f:
72:59:12:3a:ab:c2:c4:be:7c:81:79:6a:67:a5:2b:
04:9a:42:63:05:2d:c2:59:e2:43:6b:d2:b1:5b:f2:
38:01:a3:dd:85:8f:30:87:5c:f0:d4:06:35:3a:43:
77:90:b4:65:c3:e7:b9:a1:cf:b7:44:e1:82:54:51:
e5:e5:bc:b9:62:f0:8b:14:ef:ae:18:46:c6:a0:a8:
fe:77:2a:3c:87:62:73:4b:3b:d3:5f:89:82:a2:db:
b3:65:57:5d:4f:7a:a3:2d:b5:20:83:c1:87:0d:a9:
50:c4:d2:55:a9:76:85:98:1c:a1:74:7d:ba:4e:81:
a9:98:f5:b4:89:13:a4:60:ca:d7:d3:e6:12:94:98:
37:03:a6:5f:31:19:35:82:c8:04:e3:79:3d:4c:ab:
a9:a0:34:f1:9e:ed:60:2c:8f:ac:15:da:f7:c9:8f:
f6:97:24:e4:5d:5c:ac:f2:7b:04:35:60:a0:ad:e5:
c4:11:51:31:c7:a9:99:2b:2a:ef:79:d1:8a:ce:a6:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:1A:15:59:78:69:23:DF:E1:33:82:0C:2C:E4:5A:EB:0D:BC:85
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:06:95:b5:ae:0f:c8:3b:8d:d4:36:20:29:3a:34:fc:95:06:
28:98:cc:b7:f1:2c:af:7f:f7:48:57:9a:e6:ba:b1:aa:8f:af:
fe:81:03:16:15:25:be:ea:c9:a6:7a:b8:4f:38:03:b5:3b:d4:
46:71:37:e2:29:bd:4d:79:74:03:9a:e0:94:4f:56:8e:bd:3c:
07:32:17:d8:11:95:1b:ba:43:52:ca:5d:0b:62:30:38:f1:4f:
3f:70:e1:11:6e:a3:0e:16:b3:eb:49:97:51:59:4d:d4:d8:0d:
26:ba:bb:d7:fb:ee:26:63:06:91:2d:dc:1c:7c:42:e7:fe:16:
44:e1:d7:9e:48:fa:97:c7:8a:cf:47:1d:c4:af:47:a7:ef:09:
c3:96:21:fa:4d:dd:80:33:86:26:0d:20:38:73:aa:bc:23:1a:
50:72:60:6b:0a:b7:c8:5c:bb:c0:52:b9:87:be:f6:79:3b:42:
e4:c8:06:43:b8:90:b5:8b:c8:ed:3b:33:6b:93:af:17:d9:75:
53:32:9d:f4:9c:e7:e4:fe:2c:ca:cb:55:89:43:75:36:21:90:
b2:c7:ae:ac:2c:02:06:9e:ae:a8:c9:bc:77:f5:6c:73:a0:9e:
95:1f:ce:b6:68:84:0e:12:af:1f:ee:b3:fb:c6:c4:c3:45:87:
78:b0:29:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIgScHNdwNOiCGMcsnH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz
ZjQyMDMwHhcNMjUxMDE5MTYwMTQyWhcNMjUxMDIwMTYwMTQyWjAzMTEwLwYDVQQD
EyhhNWYzMWExNTU5Nzg2OTIzZGZlMTMzODIwYzJjZTQ1YWViMGRiYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd2uwDRvUOCveSHGC/o1aqwhOzvI
3TW0cXEsw0wBXuqIM9/UZ/c7akyFGX4jm76BzGn+mzP9L+cs9p9yWRI6q8LEvnyB
eWpnpSsEmkJjBS3CWeJDa9KxW/I4AaPdhY8wh1zw1AY1OkN3kLRlw+e5oc+3ROGC
VFHl5by5YvCLFO+uGEbGoKj+dyo8h2JzSzvTX4mCotuzZVddT3qjLbUgg8GHDalQ
xNJVqXaFmByhdH26ToGpmPW0iROkYMrX0+YSlJg3A6ZfMRk1gsgE43k9TKupoDTx
nu1gLI+sFdr3yY/2lyTkXVys8nsENWCgreXEEVExx6mZKyrvedGKzqZZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXzGhVZeGkj3+Ezggws5FrrDbyFMB8GA1UdIwQY
MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt
MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2
LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwaVta4P
yDuN1DYgKTo0/JUGKJjMt/Esr3/3SFea5rqxqo+v/oEDFhUlvurJpnq4TzgDtTvU
RnE34im9TXl0A5rglE9Wjr08BzIX2BGVG7pDUspdC2IwOPFPP3DhEW6jDhaz60mX
UVlN1NgNJrq71/vuJmMGkS3cHHxC5/4WROHXnkj6l8eKz0cdxK9Hp+8Jw5Yh+k3d
gDOGJg0gOHOqvCMaUHJgawq3yFy7wFK5h772eTtC5MgGQ7iQtYvI7Tsza5OvF9l1
UzKd9Jzn5P4systViUN1NiGQsseurCwCBp6uqMm8d/Vsc6CelR/OtmiEDhKvH+6z
+8bEw0WHeLApIg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:13 2025 by rpki-client