Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: bfIA9WpGW0jjTU27/EfKUeb/+8yLNwJOUtJYVnIxIpg=
Subject key identifier: 4B:A4:C6:47:3C:1E:82:55:9E:9B:EB:DB:3C:70:6A:EC:72:1F:CC:CF
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 0199FDD988B574314A4DA2C8DED6A3BB59DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 1040
Signing time: Sun 19 Oct 2025 19:01:55 +0000
Manifest this update: Sun 19 Oct 2025 19:01:55 +0000
Manifest next update: Mon 20 Oct 2025 19:01:55 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: nxdXBmmBSyWqdWO26L8W7Go0tE3v3ovrMlQkPYCPs7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:88:b5:74:31:4a:4d:a2:c8:de:d6:a3:bb:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Oct 19 19:01:55 2025 GMT
Not After : Oct 20 19:01:55 2025 GMT
Subject: CN=4ba4c6473c1e82559e9bebdb3c706aec721fcccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:8a:80:5e:bd:03:2f:7a:b8:ef:53:7f:a8:
91:36:ae:6c:1a:aa:9f:66:f2:75:8f:e4:29:de:6d:
96:f3:94:5d:72:5b:bd:2e:c2:6b:36:12:7d:19:e7:
2d:a8:08:c4:3e:55:09:8b:01:54:9d:85:c8:1a:62:
17:62:43:7c:ff:57:3b:4e:d6:1d:79:2f:35:fd:f9:
8e:db:29:41:8d:a5:fe:8d:e3:41:95:98:99:4c:07:
dd:ed:b6:fa:3b:1f:cd:47:77:e1:67:bb:2a:c7:a0:
e3:f5:26:81:f6:4c:8a:53:93:9f:06:81:52:63:8d:
b0:a7:9c:d3:a7:a7:74:15:d9:ab:f7:f6:d5:f2:b2:
32:f3:e3:86:2b:8c:a3:d8:61:93:45:57:ae:46:59:
35:c1:14:96:6b:41:a7:cc:95:82:3c:72:8b:a5:98:
c4:b1:1b:9b:e1:95:5b:27:78:a2:55:a1:8b:2c:b1:
45:87:a2:20:00:d6:5c:c0:2f:3d:12:d1:02:3a:b0:
b8:61:c5:fd:8e:61:a0:8d:03:63:2e:58:fc:60:f5:
43:65:a2:e6:f0:43:81:81:14:17:01:f3:93:7f:74:
1a:55:0f:99:38:14:c6:32:7f:7a:7e:60:93:a6:ca:
ef:86:bb:e7:1b:ee:43:b9:cd:a7:a9:90:36:e4:1f:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:C6:47:3C:1E:82:55:9E:9B:EB:DB:3C:70:6A:EC:72:1F:CC:CF
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7e:fd:e8:d7:fd:d2:81:71:c9:79:9e:6f:bc:79:98:71:fc:
34:3c:53:9a:e1:83:dd:d3:26:df:ab:e0:3d:2b:f6:20:1c:a7:
1e:e0:46:61:61:e0:44:c7:0e:de:34:6b:1d:0f:3f:5d:c0:d1:
fb:d4:5d:d7:0e:74:28:fa:b2:d7:18:da:1d:09:17:88:c5:47:
87:3e:42:14:3c:c1:8e:63:a1:6f:77:2f:89:d9:29:a3:51:d6:
a8:00:14:cb:2d:ac:44:0f:b2:a2:64:09:56:45:8b:cf:44:c1:
64:02:15:2e:23:57:1c:f2:a2:d7:3a:0b:70:af:b2:03:09:31:
61:4f:50:ec:65:86:db:aa:82:9e:12:26:05:10:a5:9e:68:a8:
75:e0:c0:11:59:03:26:ec:90:68:0f:16:90:11:c4:39:16:64:
92:df:5e:cc:a1:ae:51:c9:46:e1:19:b5:9b:60:b7:4a:a4:d0:
38:f4:13:23:12:6b:29:63:45:09:a4:dc:a1:de:e4:fe:c1:49:
71:a6:cf:df:8e:be:51:79:1e:24:be:4a:21:fc:5b:56:42:5d:
80:9a:c2:a3:b4:86:37:1a:de:2f:95:37:86:3d:f0:e9:75:c7:
0f:5f:88:b8:ed:f3:6c:77:1b:6b:b7:08:b5:ef:84:c7:13:5c:
7a:1b:dd:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Yi1dDFKTaLI3taju1neMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTIyZDE3MmMxM2IxNTI5MWU0MWY5NDU2ODE1MjU4MjZm
ZWY4OTIwHhcNMjUxMDE5MTkwMTU1WhcNMjUxMDIwMTkwMTU1WjAzMTEwLwYDVQQD
Eyg0YmE0YzY0NzNjMWU4MjU1OWU5YmViZGIzYzcwNmFlYzcyMWZjY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTqKgF69Ay96uO9Tf6iRNq5sGqqf
ZvJ1j+Qp3m2W85Rdclu9LsJrNhJ9GectqAjEPlUJiwFUnYXIGmIXYkN8/1c7TtYd
eS81/fmO2ylBjaX+jeNBlZiZTAfd7bb6Ox/NR3fhZ7sqx6Dj9SaB9kyKU5OfBoFS
Y42wp5zTp6d0Fdmr9/bV8rIy8+OGK4yj2GGTRVeuRlk1wRSWa0GnzJWCPHKLpZjE
sRub4ZVbJ3iiVaGLLLFFh6IgANZcwC89EtECOrC4YcX9jmGgjQNjLlj8YPVDZaLm
8EOBgRQXAfOTf3QaVQ+ZOBTGMn96fmCTpsrvhrvnG+5Duc2nqZA25B/O/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEukxkc8HoJVnpvr2zxwauxyH8zPMB8GA1UdIwQY
MBaAFN4SLRcsE7FSkeQflFaBUlgm/viSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMt
MzY1YzRiNWMyNGVkLzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMtMzY1YzRiNWMyNGVk
LzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoX796Nf9
0oFxyXmeb7x5mHH8NDxTmuGD3dMm36vgPSv2IBynHuBGYWHgRMcO3jRrHQ8/XcDR
+9Rd1w50KPqy1xjaHQkXiMVHhz5CFDzBjmOhb3cvidkpo1HWqAAUyy2sRA+yomQJ
VkWLz0TBZAIVLiNXHPKi1zoLcK+yAwkxYU9Q7GWG26qCnhImBRClnmiodeDAEVkD
JuyQaA8WkBHEORZkkt9ezKGuUclG4Rm1m2C3SqTQOPQTIxJrKWNFCaTcod7k/sFJ
cabP346+UXkeJL5KIfxbVkJdgJrCo7SGNxreL5U3hj3w6XXHD1+IuO3zbHcba7cI
te+ExxNcehvdKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:47 2025 by rpki-client