Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: IO0ifU2mMooCtQ2UotPOpp5m7amgtNn/+300LHVdcsY=
Subject key identifier: F8:71:3C:05:ED:40:D2:0B:78:8D:EB:8F:54:04:D6:C6:D0:82:CC:6A
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 0199FC8F48E9CE92308D92569019403BC234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 14A3
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: riVDLlle075KY2M4sqYebTH+zZDQIAsgLk3FYCLKR1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:48:e9:ce:92:30:8d:92:56:90:19:40:3b:c2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=f8713c05ed40d20b788deb8f5404d6c6d082cc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:44:ad:b9:db:80:06:71:69:25:0b:c8:95:
78:68:2e:24:bb:22:e6:32:4f:ca:3c:1a:84:3f:b0:
61:cc:b1:2d:2e:d0:73:27:4f:99:f3:e1:f6:19:32:
78:5b:27:76:32:3e:ef:87:89:7a:94:7a:3f:46:ed:
ec:e0:65:4d:32:f6:fd:2d:cf:35:e0:c9:4a:7c:5e:
d7:27:41:5a:a5:5b:e3:42:40:14:35:bd:ff:aa:6f:
0c:87:8f:03:94:6e:d4:a5:82:37:a7:1f:4e:0e:a4:
45:01:a3:60:6a:ce:e7:88:86:fb:48:7d:64:3d:00:
c5:92:2b:c1:e6:32:c1:1e:30:80:72:21:09:2d:3e:
51:71:e4:7d:31:5b:d0:7a:df:90:1d:0d:e4:48:be:
d6:21:84:d8:d3:c9:1d:ba:9b:ac:e6:a5:e6:60:9b:
61:a3:fa:f6:ae:3d:bd:42:75:d5:ab:9a:1e:c4:33:
ad:bf:90:0f:10:53:39:fc:ab:85:ad:ca:e4:e6:33:
8b:13:6b:77:67:3e:cb:de:49:79:ca:b2:71:51:03:
df:9a:67:e0:e2:0b:03:d8:de:ae:05:19:52:6e:b2:
f3:de:b2:99:c6:c9:0c:fc:9e:96:8a:31:d7:49:fa:
c0:c6:34:0f:3f:44:a5:e1:8c:b9:44:37:4e:af:1d:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:3C:05:ED:40:D2:0B:78:8D:EB:8F:54:04:D6:C6:D0:82:CC:6A
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:62:6c:f3:af:e1:5e:d5:c2:77:0c:ad:e9:70:ff:00:3a:4a:
3c:98:14:85:74:cb:ea:03:d7:32:5b:5e:84:e4:cf:b6:4e:32:
88:a2:b0:55:97:95:90:cf:1c:e1:46:ac:85:56:90:8c:bd:06:
06:f9:12:bf:58:f4:81:bc:33:bb:69:5a:38:6d:0c:87:1a:5b:
01:a1:29:6c:92:55:dc:cb:78:19:49:8b:44:6e:90:2c:55:34:
5d:bb:4f:14:f0:0e:8d:ac:df:bd:a6:08:0d:c7:29:fe:12:2d:
5b:2e:d9:e7:c1:e8:a4:dd:a2:ca:1c:25:d0:e3:81:d1:72:f9:
a3:63:a9:8e:b4:ff:8d:22:ec:ef:3a:ba:17:1a:d5:13:28:81:
43:40:be:d7:50:12:f0:00:57:46:e6:16:65:ee:b1:57:4c:29:
5a:04:18:9f:57:fe:43:ce:e0:c2:dc:8e:61:56:3b:70:bd:dd:
b3:fe:d4:98:6b:69:22:95:a0:cf:8d:9c:26:e9:ab:31:4d:a7:
15:c6:c1:d3:2c:a2:6b:28:f1:d1:ed:99:da:7f:9a:47:7e:bc:
7c:07:c3:7e:fe:0b:8c:0c:b7:87:3b:5b:8e:54:91:cc:70:18:
c7:eb:85:b2:d7:23:41:a7:6d:62:06:40:0d:c6:70:a5:04:14:
90:7a:13:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0jpzpIwjZJWkBlAO8I0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz
MTI3YzYwHhcNMjUxMDE5MTMwMTEyWhcNMjUxMDIwMTMwMTEyWjAzMTEwLwYDVQQD
EyhmODcxM2MwNWVkNDBkMjBiNzg4ZGViOGY1NDA0ZDZjNmQwODJjYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfJErbnbgAZxaSULyJV4aC4kuyLm
Mk/KPBqEP7BhzLEtLtBzJ0+Z8+H2GTJ4Wyd2Mj7vh4l6lHo/Ru3s4GVNMvb9Lc81
4MlKfF7XJ0FapVvjQkAUNb3/qm8Mh48DlG7UpYI3px9ODqRFAaNgas7niIb7SH1k
PQDFkivB5jLBHjCAciEJLT5RceR9MVvQet+QHQ3kSL7WIYTY08kdupus5qXmYJth
o/r2rj29QnXVq5oexDOtv5APEFM5/KuFrcrk5jOLE2t3Zz7L3kl5yrJxUQPfmmfg
4gsD2N6uBRlSbrLz3rKZxskM/J6WijHXSfrAxjQPP0Sl4Yy5RDdOrx1RUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhxPAXtQNILeI3rj1QE1sbQgsxqMB8GA1UdIwQY
MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt
OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy
LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmJs86/h
XtXCdwyt6XD/ADpKPJgUhXTL6gPXMltehOTPtk4yiKKwVZeVkM8c4UashVaQjL0G
BvkSv1j0gbwzu2laOG0MhxpbAaEpbJJV3Mt4GUmLRG6QLFU0XbtPFPAOjazfvaYI
Dccp/hItWy7Z58HopN2iyhwl0OOB0XL5o2OpjrT/jSLs7zq6FxrVEyiBQ0C+11AS
8ABXRuYWZe6xV0wpWgQYn1f+Q87gwtyOYVY7cL3ds/7UmGtpIpWgz42cJumrMU2n
FcbB0yyiayjx0e2Z2n+aR368fAfDfv4LjAy3hztbjlSRzHAYx+uFstcjQadtYgZA
DcZwpQQUkHoTNg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:37 2025 by rpki-client