Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: +o0j/PUIp3nfEvZBM9DDRQB9D+nrPjjrJzT5KZjXTUE=
Subject key identifier: 79:EC:C0:42:E7:CD:38:85:09:9A:F9:24:BA:DE:8D:B3:55:80:35:51
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 0199FCFD8BEFB99A482FDFCE70A01E86E266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1023
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: 2jsrcYCBuaO7mjF4QTTBp1lGiFqBDXo6Lrzaizeq+tc=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8b:ef:b9:9a:48:2f:df:ce:70:a0:1e:86:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=79ecc042e7cd3885099af924bade8db355803551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:b3:c1:a6:2c:b8:20:d0:54:01:09:d1:88:
38:64:e7:0e:20:f7:2b:56:ab:e6:38:95:2c:52:f0:
02:74:04:f9:d0:3c:31:45:ee:e2:83:d9:d7:43:f1:
e4:65:20:89:79:74:21:23:69:45:e8:57:9f:e3:e1:
96:2a:cf:e2:8c:22:47:a0:bd:ca:43:46:56:74:9c:
a5:49:4b:6f:b6:d9:54:58:88:ea:10:3b:26:75:4f:
7c:4a:6a:35:79:09:c8:9b:90:fb:fc:d9:52:50:cd:
0d:a8:75:66:05:a2:3a:4d:cc:9c:2c:76:c0:a2:6d:
09:20:5f:22:89:da:21:30:33:2b:f3:c3:74:de:41:
96:21:ed:83:60:6b:04:de:b6:c1:ec:05:ac:e5:dc:
40:d3:20:63:7c:ef:d6:5c:53:00:a9:3a:f3:97:e9:
6a:15:0a:81:7d:d9:3f:f4:46:63:c9:73:1d:fa:21:
91:4e:ad:43:ea:b9:6f:f1:00:65:a0:17:af:61:a6:
3c:c3:b3:6c:c7:41:4c:7a:50:a7:5d:34:76:95:f6:
e5:95:8a:88:fc:2a:9e:07:e4:fb:d7:8e:60:e2:47:
2e:ab:1c:d4:31:12:b7:7c:31:2a:90:dc:e0:1b:84:
bc:7d:85:27:f5:af:2a:82:8e:74:b6:d5:72:80:00:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:C0:42:E7:CD:38:85:09:9A:F9:24:BA:DE:8D:B3:55:80:35:51
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:03:66:94:61:8d:16:d8:18:ab:77:b3:ea:3a:de:3f:2b:
01:83:87:9c:9d:fe:0b:ea:0c:16:12:b3:e6:8b:d0:30:eb:a9:
db:34:35:4c:7c:05:d8:bc:ea:1e:c6:e3:be:ee:3d:95:8a:6c:
a0:96:7d:24:26:43:94:12:28:2e:f0:51:57:b7:df:6c:52:0e:
e5:ad:9b:28:ad:d8:f8:62:7c:ef:71:0b:fd:17:9d:3e:6a:f8:
42:05:14:e7:1d:b5:e6:26:a2:d5:c1:a3:b8:0d:15:2e:13:42:
9c:38:da:38:21:fe:f7:84:0e:d5:20:5c:d3:a7:29:7a:4f:95:
6f:7c:77:fe:27:f4:45:d0:44:14:90:5d:fc:bd:28:66:ec:2b:
96:da:88:a8:e5:12:a6:43:36:e7:51:75:5c:e7:45:80:da:5c:
8b:7b:60:1d:13:25:33:26:2d:a7:30:aa:76:d5:de:02:38:3f:
ed:73:9d:57:8b:86:40:33:27:04:27:f4:f5:f7:7b:de:d3:fb:
b3:fc:ef:6e:b0:e0:a7:fe:d2:11:81:94:90:01:c2:a8:a6:61:
a1:db:64:1f:d2:cf:ca:80:55:40:92:f4:01:2c:23:64:eb:6a:
f6:6f:9a:be:bd:3d:2a:ce:de:85:7a:aa:f4:9e:7e:96:de:47:
36:bd:e8:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/YvvuZpIL9/OcKAehuJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj
NTczMmEwHhcNMjUxMDE5MTUwMTM4WhcNMjUxMDIwMTUwMTM4WjAzMTEwLwYDVQQD
Eyg3OWVjYzA0MmU3Y2QzODg1MDk5YWY5MjRiYWRlOGRiMzU1ODAzNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iSzwaYsuCDQVAEJ0Yg4ZOcOIPcr
VqvmOJUsUvACdAT50DwxRe7ig9nXQ/HkZSCJeXQhI2lF6Fef4+GWKs/ijCJHoL3K
Q0ZWdJylSUtvttlUWIjqEDsmdU98Smo1eQnIm5D7/NlSUM0NqHVmBaI6TcycLHbA
om0JIF8iidohMDMr88N03kGWIe2DYGsE3rbB7AWs5dxA0yBjfO/WXFMAqTrzl+lq
FQqBfdk/9EZjyXMd+iGRTq1D6rlv8QBloBevYaY8w7Nsx0FMelCnXTR2lfbllYqI
/CqeB+T7145g4kcuqxzUMRK3fDEqkNzgG4S8fYUn9a8qgo50ttVygAD3SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnswELnzTiFCZr5JLrejbNVgDVRMB8GA1UdIwQY
MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt
M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5
LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM98DZpRh
jRbYGKt3s+o63j8rAYOHnJ3+C+oMFhKz5ovQMOup2zQ1THwF2LzqHsbjvu49lYps
oJZ9JCZDlBIoLvBRV7ffbFIO5a2bKK3Y+GJ873EL/RedPmr4QgUU5x215iai1cGj
uA0VLhNCnDjaOCH+94QO1SBc06cpek+Vb3x3/if0RdBEFJBd/L0oZuwrltqIqOUS
pkM251F1XOdFgNpci3tgHRMlMyYtpzCqdtXeAjg/7XOdV4uGQDMnBCf09fd73tP7
s/zvbrDgp/7SEYGUkAHCqKZhodtkH9LPyoBVQJL0ASwjZOtq9m+avr09Ks7ehXqq
9J5+lt5HNr3ooQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:46 2025 by rpki-client