Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
File: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft (raw, json)
Hash identifier: xL0wr7eSJ7+2q7DILtv29pMZ9lkkEZONppmEy8qe2eQ=
Subject key identifier: 99:E6:7E:F8:9A:FA:43:CE:A8:10:A9:19:4D:07:DC:32:2F:64:BE:D7
Authority key identifier: DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
Certificate issuer: /CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Certificate serial: 0199FC8F57A8540991FB51A7AE806850F521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
Manifest number: 0217
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl (hash: NKt+0OqxOK8GcsxOUhu1sThth8zHIQImrdkT8pV5kRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:57:a8:54:09:91:fb:51:a7:ae:80:68:50:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=99e67ef89afa43cea810a9194d07dc322f64bed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:fc:77:af:4f:f4:fc:ad:ad:08:61:35:48:
24:0d:ef:5f:21:ac:c0:bd:74:15:7e:10:a3:0b:38:
f0:b6:c6:a5:bd:e4:29:a3:e3:c0:a9:89:74:db:19:
8d:50:fa:5b:01:0f:20:c8:c4:83:11:2c:7a:27:dd:
c3:04:57:3e:9d:da:1b:6a:47:47:57:4c:26:09:31:
38:63:4e:93:15:50:b9:1e:f1:1c:51:c7:78:6f:d1:
b2:bb:7b:e4:68:40:58:77:91:8c:74:78:d8:26:2b:
b4:5a:af:4e:ba:15:aa:07:5a:49:53:e2:76:56:cb:
95:89:0a:d9:f7:ad:c6:34:80:e3:84:3c:64:ff:59:
87:f3:c0:8d:47:27:d6:15:ee:94:4f:28:7c:aa:6e:
a8:f5:ff:65:47:0f:7f:6e:8a:b5:dc:4c:67:dd:cf:
d6:b8:12:65:98:a9:fa:de:ea:fe:5a:48:1c:ba:05:
10:6e:90:19:5e:e9:ea:30:d9:93:23:18:26:b1:14:
b1:cc:c6:3e:17:5b:93:e7:35:54:ba:d5:95:76:3c:
5a:6c:d1:d5:1d:f2:36:bf:20:8e:d0:0c:90:06:6c:
d2:57:f9:93:6e:91:f3:25:8a:b2:ce:d9:4a:af:de:
63:76:ee:ac:20:a1:59:cc:7f:81:f5:b2:69:a1:c1:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:7E:F8:9A:FA:43:CE:A8:10:A9:19:4D:07:DC:32:2F:64:BE:D7
X509v3 Authority Key Identifier:
keyid:DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:aa:94:ba:8f:ec:a8:6a:54:6f:36:af:6c:7f:fc:80:a3:66:
87:78:cf:a2:bb:c8:d7:63:dc:45:1b:76:08:d0:75:a5:59:38:
ee:84:34:38:11:be:4a:8c:10:ac:14:f2:01:94:28:f3:90:d8:
a2:94:d2:93:5a:86:a9:6a:d7:e3:a0:40:9f:a6:c5:3b:cd:48:
51:1e:a7:c1:78:16:10:7b:e5:36:71:63:fd:93:81:8b:f5:d7:
6c:3d:35:88:f0:4b:2b:e9:f5:43:af:de:6c:e5:79:f8:32:16:
d1:77:05:90:47:30:0b:aa:23:82:28:d3:b6:0c:6b:df:61:86:
34:fb:c6:de:22:bf:e7:67:b2:91:41:34:4f:c0:f2:65:3c:77:
f5:2a:01:63:c4:d8:26:94:2c:50:13:d3:22:dc:49:41:88:42:
17:aa:fe:bb:c1:a5:a3:7a:ef:47:90:88:0f:78:32:41:b8:c1:
31:c8:80:2e:ae:a7:ff:95:bd:50:da:01:4a:c5:fb:7a:ae:37:
86:42:cb:7d:79:03:b5:f9:05:4e:92:10:90:5a:0f:0a:74:7b:
d8:31:11:5a:f7:aa:e0:69:7d:89:2b:d9:56:35:f4:ea:38:e3:
da:44:4a:34:2d:1e:ed:84:27:65:55:bf:7f:31:f5:56:26:c7:
6f:a0:47:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1eoVAmR+1GnroBoUPUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTVkODFmMGE3ZjNkZDM0NDUxODQwYWUzMWNhZmY2Njdj
ZWVhZjYwHhcNMjUxMDE5MTMwMTE2WhcNMjUxMDIwMTMwMTE2WjAzMTEwLwYDVQQD
Eyg5OWU2N2VmODlhZmE0M2NlYTgxMGE5MTk0ZDA3ZGMzMjJmNjRiZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2En8d69P9PytrQhhNUgkDe9fIazA
vXQVfhCjCzjwtsalveQpo+PAqYl02xmNUPpbAQ8gyMSDESx6J93DBFc+ndobakdH
V0wmCTE4Y06TFVC5HvEcUcd4b9Gyu3vkaEBYd5GMdHjYJiu0Wq9OuhWqB1pJU+J2
VsuViQrZ963GNIDjhDxk/1mH88CNRyfWFe6UTyh8qm6o9f9lRw9/boq13Exn3c/W
uBJlmKn63ur+WkgcugUQbpAZXunqMNmTIxgmsRSxzMY+F1uT5zVUutWVdjxabNHV
HfI2vyCO0AyQBmzSV/mTbpHzJYqyztlKr95jdu6sIKFZzH+B9bJpocGVLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnmfvia+kPOqBCpGU0H3DIvZL7XMB8GA1UdIwQY
MBaAFN4V2B8Kfz3TRFGECuMcr/Znzur2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84NzY4Y2ItYjQ4YS00NzhiLTk4N2Et
OWNjNzg0NjkzNjY5LzEvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84NzY4Y2ItYjQ4YS00NzhiLTk4N2EtOWNjNzg0NjkzNjY5
LzEvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKqUuo/s
qGpUbzavbH/8gKNmh3jPorvI12PcRRt2CNB1pVk47oQ0OBG+SowQrBTyAZQo85DY
opTSk1qGqWrX46BAn6bFO81IUR6nwXgWEHvlNnFj/ZOBi/XXbD01iPBLK+n1Q6/e
bOV5+DIW0XcFkEcwC6ojgijTtgxr32GGNPvG3iK/52eykUE0T8DyZTx39SoBY8TY
JpQsUBPTItxJQYhCF6r+u8Glo3rvR5CID3gyQbjBMciALq6n/5W9UNoBSsX7eq43
hkLLfXkDtfkFTpIQkFoPCnR72DERWveq4Gl9iSvZVjX06jjj2kRKNC0e7YQnZVW/
fzH1VibHb6BH/A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:17 2025 by rpki-client