Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier: 4ywY82pk7AwLtSCLR4l1SefHKgY1f3/duTxnAHz6644=
Subject key identifier: C7:10:91:25:67:3A:18:B2:CB:44:07:19:B8:49:77:62:F4:FD:88:39
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial: 0199FE7E2186438428A0E6AA2F76D3F94424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number: 01A9
Signing time: Sun 19 Oct 2025 22:01:42 +0000
Manifest this update: Sun 19 Oct 2025 22:01:42 +0000
Manifest next update: Mon 20 Oct 2025 22:01:42 +0000
Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: jHq4Ap8M6aEyXSKTqZOvr5U2ncTJHearHDX6Wer3Wp0=)
2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:21:86:43:84:28:a0:e6:aa:2f:76:d3:f9:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Validity
Not Before: Oct 19 22:01:42 2025 GMT
Not After : Oct 20 22:01:42 2025 GMT
Subject: CN=c7109125673a18b2cb440719b8497762f4fd8839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:9f:d0:dd:75:9b:5b:53:c0:b1:6e:5e:d1:
9d:86:57:da:5a:ee:68:a1:63:03:51:41:d5:81:80:
51:e7:f1:11:83:af:86:78:62:42:dd:75:92:a7:a6:
c0:9e:9d:f9:4b:0a:31:ad:15:55:f3:95:82:0e:ae:
c4:7f:3f:f3:f8:f2:40:9f:03:46:36:e3:63:76:20:
e2:2e:11:22:5b:8e:42:6f:16:09:42:a7:f3:ee:78:
c1:d1:6c:e0:45:7c:13:bb:c4:24:d4:10:6f:f9:60:
6f:67:e5:12:2f:c1:ef:e5:f3:58:8f:b6:94:e7:4b:
6d:40:d2:1a:35:f8:44:cc:8a:ea:e3:21:60:ba:db:
d0:66:f9:83:56:2a:71:56:60:aa:88:f8:f4:67:c8:
f0:df:83:7e:6e:45:a1:60:1f:03:cd:10:d4:19:12:
8c:68:b9:f8:a6:3c:14:91:fb:2e:58:8d:21:d8:0e:
98:6e:37:c1:60:b9:df:fc:1d:7a:c4:c1:09:a3:e7:
9a:21:07:01:79:11:16:90:05:44:23:9f:b3:6d:93:
89:62:7e:cb:f6:6c:8f:e8:c3:08:74:98:a5:a9:eb:
72:a0:03:fb:10:f0:00:15:cd:f0:60:ce:12:43:64:
c8:fb:a1:f9:94:83:82:34:10:f8:b5:9b:15:03:a6:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:91:25:67:3A:18:B2:CB:44:07:19:B8:49:77:62:F4:FD:88:39
X509v3 Authority Key Identifier:
keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:38:ce:bb:44:6a:d0:75:e0:8c:74:9e:a9:64:9d:16:fb:
d5:70:d8:df:2f:33:67:ae:f8:a0:d2:26:33:b2:cc:96:dc:64:
c2:29:a0:a0:2c:00:32:3f:4f:64:05:51:4b:c4:9d:49:f2:3e:
01:f4:83:96:f4:64:7d:78:4c:70:de:d0:d4:88:2d:cb:57:8d:
a9:43:36:1c:4c:2c:42:a4:63:40:97:2b:13:7a:d5:a4:d2:28:
82:30:ed:ee:21:de:22:e7:b8:73:a8:2b:f1:6d:d4:21:2d:2f:
2e:18:15:bc:1d:1c:e2:9e:fb:8f:cd:dc:91:bf:61:6a:c6:27:
30:1e:25:4e:27:28:11:46:fc:fd:3a:6e:7b:df:6f:e6:24:b1:
7c:43:73:6d:97:37:7e:2d:84:cf:23:31:5d:f5:b0:db:fa:e5:
6f:9f:84:1e:c4:20:85:72:5a:a7:b8:09:d2:1c:6f:bb:45:fd:
a8:af:ab:77:22:2d:e8:81:96:96:4b:0f:00:07:20:16:ad:96:
6e:94:fc:32:66:bc:25:90:46:b9:98:fd:ef:82:dd:14:62:0f:
af:56:80:11:f0:47:94:4f:f3:ba:b8:06:2b:af:6c:ea:f6:c4:
20:2f:fa:59:a5:12:55:dc:15:53:4b:0a:13:9b:99:11:d1:ca:
cf:25:81:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fiGGQ4QooOaqL3bT+UQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMDA2ZWQ4NzFhNWNlMDBkMmJiZjk2OGJjMDk0MGVlNTg2
YTNjZWIwHhcNMjUxMDE5MjIwMTQyWhcNMjUxMDIwMjIwMTQyWjAzMTEwLwYDVQQD
EyhjNzEwOTEyNTY3M2ExOGIyY2I0NDA3MTliODQ5Nzc2MmY0ZmQ4ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTef0N11m1tTwLFuXtGdhlfaWu5o
oWMDUUHVgYBR5/ERg6+GeGJC3XWSp6bAnp35SwoxrRVV85WCDq7Efz/z+PJAnwNG
NuNjdiDiLhEiW45CbxYJQqfz7njB0WzgRXwTu8Qk1BBv+WBvZ+USL8Hv5fNYj7aU
50ttQNIaNfhEzIrq4yFgutvQZvmDVipxVmCqiPj0Z8jw34N+bkWhYB8DzRDUGRKM
aLn4pjwUkfsuWI0h2A6YbjfBYLnf/B16xMEJo+eaIQcBeREWkAVEI5+zbZOJYn7L
9myP6MMIdJilqetyoAP7EPAAFc3wYM4SQ2TI+6H5lIOCNBD4tZsVA6aRpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcQkSVnOhiyy0QHGbhJd2L0/Yg5MB8GA1UdIwQY
MBaAFN8Abthxpc4A0rv5aLwJQO5YajzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYt
OTViOWUzNjJmMDc3LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYtOTViOWUzNjJmMDc3
LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnE4zrtE
atB14Ix0nqlknRb71XDY3y8zZ674oNImM7LMltxkwimgoCwAMj9PZAVRS8SdSfI+
AfSDlvRkfXhMcN7Q1Igty1eNqUM2HEwsQqRjQJcrE3rVpNIogjDt7iHeIue4c6gr
8W3UIS0vLhgVvB0c4p77j83ckb9hasYnMB4lTicoEUb8/Tpue99v5iSxfENzbZc3
fi2EzyMxXfWw2/rlb5+EHsQghXJap7gJ0hxvu0X9qK+rdyIt6IGWlksPAAcgFq2W
bpT8Mma8JZBGuZj974LdFGIPr1aAEfBHlE/zurgGK69s6vbEIC/6WaUSVdwVU0sK
E5uZEdHKzyWB8A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:07 2025 by rpki-client