Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: gwXrfGogiCAGG78EC3dXBVmDdrljlgTx2m9VvflJbRs=
Subject key identifier: 39:FF:AB:C4:A9:47:63:77:82:F3:3C:C8:6E:B6:43:3A:56:F8:AF:3D
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 0199FB0F19DB27BFB2B445F97D0CB2440657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 05D0
Signing time: Sun 19 Oct 2025 06:01:34 +0000
Manifest this update: Sun 19 Oct 2025 06:01:34 +0000
Manifest next update: Mon 20 Oct 2025 06:01:34 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: ZgQhnakjTZwwkxHxib5W3WDbT3o04kZL8NhFnBPje68=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:19:db:27:bf:b2:b4:45:f9:7d:0c:b2:44:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Oct 19 06:01:34 2025 GMT
Not After : Oct 20 06:01:34 2025 GMT
Subject: CN=39ffabc4a947637782f33cc86eb6433a56f8af3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:34:0e:12:7e:c4:b9:01:c2:81:22:87:ce:
06:47:b7:cf:8f:09:de:6e:1e:6d:d9:23:bc:67:77:
5a:a0:07:42:70:c9:e1:0d:11:dc:2b:5a:c0:4d:ce:
31:1b:37:22:52:b0:81:aa:6f:74:71:36:e3:44:56:
18:dd:f2:72:45:45:88:20:44:a4:a2:31:37:7d:6f:
ba:65:81:59:18:3a:99:08:08:16:29:16:8d:cd:91:
ff:00:e4:32:45:17:46:1f:ac:f4:1a:5e:b3:bc:28:
e9:30:bd:d4:5b:30:bf:37:e2:1e:85:67:d3:0b:be:
a6:3f:02:2a:6f:3b:7e:98:e7:66:0c:04:cd:5a:18:
94:30:e7:fc:85:3a:5c:da:26:0e:80:33:bd:d4:83:
56:49:8a:03:a2:de:78:b6:24:24:48:0a:e5:3d:91:
8d:78:7b:dd:84:c4:92:b5:e3:f6:12:ba:4f:31:b8:
57:4f:6e:ce:10:bc:f5:a8:b1:de:9c:68:1b:0c:68:
a0:ef:9a:6a:e5:76:30:94:85:aa:69:31:db:1f:5b:
19:82:24:f1:a8:f8:5e:7d:61:d5:67:1f:16:3c:2c:
e8:bd:9a:e6:e8:85:c9:e8:62:c2:3c:92:a4:72:45:
fb:8a:1c:72:71:33:ce:ad:16:4a:43:cf:38:7d:8e:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FF:AB:C4:A9:47:63:77:82:F3:3C:C8:6E:B6:43:3A:56:F8:AF:3D
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:92:65:f1:ba:72:b7:8f:b0:a3:95:a4:f3:e7:e1:ac:d0:66:
43:76:a2:4b:c9:1a:af:02:5d:70:ad:65:83:77:b6:a3:39:a5:
ce:fd:81:fc:c0:6c:f7:f4:84:07:39:df:e3:2d:f0:fb:7d:70:
19:af:d0:28:8b:b6:b0:c9:cf:ff:a0:64:ab:08:fc:85:80:93:
ed:4c:65:27:24:e4:a1:bc:78:b3:6d:fe:25:85:3d:c0:6a:a3:
fd:95:43:cb:5d:d2:c1:57:7e:bf:ac:79:6f:1b:b2:49:2f:69:
dc:7a:2f:53:3c:f0:e3:b5:e0:10:df:35:20:8c:0b:32:05:e7:
2c:d7:55:18:9b:27:69:5f:cf:70:df:37:07:59:58:16:0b:51:
fa:07:21:9a:70:cb:b0:ec:5a:ef:5f:f2:64:37:73:e0:5f:c4:
d8:70:01:70:8e:23:5a:80:85:65:aa:9d:87:34:27:6a:a3:c2:
e9:77:98:e3:b7:bd:5e:8e:e9:8b:76:7f:48:3e:1e:b8:69:a2:
b3:02:f7:7e:a2:19:b5:26:b0:75:d4:d0:5d:39:f4:c7:dc:0b:
ec:a7:00:e0:28:9f:01:6f:e6:f5:21:dc:bd:4c:b9:e5:85:df:
ba:48:70:dc:0b:b3:86:65:fe:9d:7e:d5:74:a1:36:1f:e2:a8:
80:04:2a:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DxnbJ7+ytEX5fQyyRAZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw
OGY2M2YwHhcNMjUxMDE5MDYwMTM0WhcNMjUxMDIwMDYwMTM0WjAzMTEwLwYDVQQD
EygzOWZmYWJjNGE5NDc2Mzc3ODJmMzNjYzg2ZWI2NDMzYTU2ZjhhZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupA0DhJ+xLkBwoEih84GR7fPjwne
bh5t2SO8Z3daoAdCcMnhDRHcK1rATc4xGzciUrCBqm90cTbjRFYY3fJyRUWIIESk
ojE3fW+6ZYFZGDqZCAgWKRaNzZH/AOQyRRdGH6z0Gl6zvCjpML3UWzC/N+IehWfT
C76mPwIqbzt+mOdmDATNWhiUMOf8hTpc2iYOgDO91INWSYoDot54tiQkSArlPZGN
eHvdhMSSteP2ErpPMbhXT27OELz1qLHenGgbDGig75pq5XYwlIWqaTHbH1sZgiTx
qPhefWHVZx8WPCzovZrm6IXJ6GLCPJKkckX7ihxycTPOrRZKQ884fY4U2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn/q8SpR2N3gvM8yG62QzpW+K89MB8GA1UdIwQY
MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt
YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk
LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJJl8bpy
t4+wo5Wk8+fhrNBmQ3aiS8karwJdcK1lg3e2ozmlzv2B/MBs9/SEBznf4y3w+31w
Ga/QKIu2sMnP/6Bkqwj8hYCT7UxlJyTkobx4s23+JYU9wGqj/ZVDy13SwVd+v6x5
bxuySS9p3HovUzzw47XgEN81IIwLMgXnLNdVGJsnaV/PcN83B1lYFgtR+gchmnDL
sOxa71/yZDdz4F/E2HABcI4jWoCFZaqdhzQnaqPC6XeY47e9Xo7pi3Z/SD4euGmi
swL3fqIZtSawddTQXTn0x9wL7KcA4CifAW/m9SHcvUy55YXfukhw3AuzhmX+nX7V
dKE2H+KogAQq7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:46 2025 by rpki-client