Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: HDYHeoTW+6U3zpgJXkCbfVEEzoYRGzeirHYwXacBM0Q=
Subject key identifier: 5C:0B:DE:2C:91:4C:5A:D6:E4:EC:BD:7F:3E:38:3C:58:66:19:91:22
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 0199FC58C33F1BD7686F466632C54E496084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 13F0
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: SnoqrNHuZHNXwTrC6KJGzY+jQCvllkJVx3nIoi2MQhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c3:3f:1b:d7:68:6f:46:66:32:c5:4e:49:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=5c0bde2c914c5ad6e4ecbd7f3e383c5866199122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:33:36:b4:be:62:2b:40:99:b5:85:f6:a7:
94:d1:fe:e2:40:4d:bf:4c:87:8b:d7:17:df:c2:6a:
8f:63:c3:b9:a5:59:49:cb:4d:c1:a7:87:25:3d:ad:
3f:8a:a8:8e:94:59:31:1e:05:c6:ac:3c:d6:de:0c:
44:a2:9d:02:1b:4a:20:77:8d:01:cd:9d:d6:bf:18:
6b:f9:bb:f3:e0:70:5e:f1:18:1b:93:f8:59:6b:30:
a9:dc:a3:05:af:a4:cf:e9:cf:71:af:d7:9e:3c:7e:
88:cb:81:d6:96:e1:fa:3f:0f:ab:3c:03:8e:40:f8:
96:d7:ca:9a:55:18:5c:df:f9:c4:c8:9a:9e:6e:99:
1f:f0:c1:1f:66:80:e8:39:fc:6b:4b:3b:27:d2:18:
94:c1:1f:a1:fc:b9:46:89:fd:ad:a3:97:dd:9a:6f:
b1:a6:69:5c:37:d7:7e:95:0c:51:ee:bc:2a:c3:19:
ac:68:4d:86:dd:4c:b0:64:5c:75:5a:11:22:5d:9c:
c8:8b:38:20:e8:18:c9:d1:53:32:2b:8f:8e:7c:b5:
5e:ef:31:3e:89:6b:30:4a:6e:85:0f:65:fd:90:1e:
c5:6f:b6:fc:01:8f:4a:32:26:e8:a2:16:0d:97:d4:
19:b3:68:c4:d0:a3:ea:5d:1d:d5:ab:2e:3b:56:74:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:DE:2C:91:4C:5A:D6:E4:EC:BD:7F:3E:38:3C:58:66:19:91:22
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:32:47:9a:88:40:ee:db:4d:fd:67:e9:81:da:de:97:0d:3c:
2e:e8:a6:9c:82:90:aa:46:ea:3c:84:e3:5b:51:0b:e5:7b:92:
91:83:80:1e:fc:bc:e6:6d:bf:ee:ed:45:3c:5c:94:1d:fc:57:
5a:d8:30:1d:a7:b6:61:6c:3e:d3:1b:8f:48:2d:c7:13:ab:22:
4a:21:57:cb:15:d9:31:89:d7:ea:44:8f:74:9c:9f:68:e3:04:
7e:8e:cc:96:17:8e:28:01:d6:06:48:cd:e0:b8:31:3f:ea:9d:
90:f9:91:e1:2c:fd:60:4d:44:14:67:57:ff:5e:08:60:e7:07:
f0:47:96:89:a7:38:14:cf:8d:ae:45:66:8a:97:ed:49:c3:7e:
24:bd:c7:55:2a:b3:48:e3:c8:d6:36:63:7c:66:28:e3:88:86:
7b:42:5f:f0:ad:23:5e:e3:85:5c:12:94:fb:64:d8:02:d1:06:
bf:27:d4:83:a1:d4:b8:d5:a4:32:b3:6f:ee:07:5d:f5:c8:35:
ae:fc:b2:1a:8c:5e:3b:f4:a1:b6:a6:8e:48:12:6d:0f:48:f7:
07:dd:e4:1d:31:ac:68:0f:3e:92:b4:63:ab:14:a4:a7:a2:82:
0d:55:c0:69:4a:79:3a:e1:66:e6:a7:8b:e0:01:99:91:03:a6:
91:ca:d7:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WMM/G9dob0ZmMsVOSWCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMmYwODc1NmY1NGVjZDcyODBkMWVhY2NmODc4YWViM2Yy
OGFjNGYwHhcNMjUxMDE5MTIwMTM5WhcNMjUxMDIwMTIwMTM5WjAzMTEwLwYDVQQD
Eyg1YzBiZGUyYzkxNGM1YWQ2ZTRlY2JkN2YzZTM4M2M1ODY2MTk5MTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8AzNrS+YitAmbWF9qeU0f7iQE2/
TIeL1xffwmqPY8O5pVlJy03Bp4clPa0/iqiOlFkxHgXGrDzW3gxEop0CG0ogd40B
zZ3Wvxhr+bvz4HBe8Rgbk/hZazCp3KMFr6TP6c9xr9eePH6Iy4HWluH6Pw+rPAOO
QPiW18qaVRhc3/nEyJqebpkf8MEfZoDoOfxrSzsn0hiUwR+h/LlGif2to5fdmm+x
pmlcN9d+lQxR7rwqwxmsaE2G3UywZFx1WhEiXZzIizgg6BjJ0VMyK4+OfLVe7zE+
iWswSm6FD2X9kB7Fb7b8AY9KMiboohYNl9QZs2jE0KPqXR3Vqy47VnSJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwL3iyRTFrW5Oy9fz44PFhmGZEiMB8GA1UdIwQY
MBaAFNwvCHVvVOzXKA0erM+Hius/KKxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODct
Y2M2YmM5NDUzOGZhLzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODctY2M2YmM5NDUzOGZh
LzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzJHmohA
7ttN/Wfpgdrelw08LuimnIKQqkbqPITjW1EL5XuSkYOAHvy85m2/7u1FPFyUHfxX
WtgwHae2YWw+0xuPSC3HE6siSiFXyxXZMYnX6kSPdJyfaOMEfo7MlheOKAHWBkjN
4LgxP+qdkPmR4Sz9YE1EFGdX/14IYOcH8EeWiac4FM+NrkVmipftScN+JL3HVSqz
SOPI1jZjfGYo44iGe0Jf8K0jXuOFXBKU+2TYAtEGvyfUg6HUuNWkMrNv7gdd9cg1
rvyyGoxeO/ShtqaOSBJtD0j3B93kHTGsaA8+krRjqxSkp6KCDVXAaUp5OuFm5qeL
4AGZkQOmkcrXjw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:59 2025 by rpki-client