
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: 7YKhWqZVx2W/P4VqCg0KvzCEN0PxFxT2YzK9luQ13Qc=
Subject key identifier: 00:DC:1D:5E:85:2A:E2:40:A8:13:5F:3B:09:9B:29:A3:4E:75:5D:9B
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 0199FBEB5D9EFB0BFDEF9EF37C52117ED23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: 3R3CMh1y4wsFDSZM0M3C1xZygbQ.roa (hash: XMT6KzECLufc9ZTbE5ZuXejsU3/rr0tksv09pEK0Cjw=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: 6dysdC65den8vZRH8lNEHWZpa2A7FnIi8G22V45VtC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5d:9e:fb:0b:fd:ef:9e:f3:7c:52:11:7e:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=00dc1d5e852ae240a8135f3b099b29a34e755d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:0b:89:ca:56:16:46:bf:d3:18:f5:c2:91:
0b:f9:0c:b8:f7:8a:7a:94:c4:e2:0b:b6:f9:d0:4f:
7c:fb:94:e5:2c:32:b1:13:8a:fa:12:8c:7c:10:0e:
ac:99:31:32:37:db:51:75:08:3c:ac:e3:83:5a:01:
2e:ed:d9:d9:34:d5:cf:17:7f:c2:32:95:1b:45:e1:
e1:c8:ba:75:79:1e:6d:51:b8:c4:3b:b8:3c:c1:03:
80:dd:ac:e9:91:fc:ac:fd:74:82:d6:47:a2:51:c9:
1e:f5:64:dc:34:5e:ee:4b:ae:46:8e:c9:a8:de:29:
35:9e:5c:c5:fd:33:4b:8b:a4:e0:48:c0:99:3f:e6:
f3:74:eb:b0:30:57:a2:52:b4:c7:58:c6:1a:01:47:
2d:65:d1:eb:9e:7f:08:4a:8d:00:a3:4c:c8:d6:3a:
7a:61:56:30:e2:27:ff:2f:2b:ce:a0:d4:ea:74:53:
6c:9c:1c:7a:14:43:1a:61:67:a6:b5:0d:ad:c7:a7:
46:cb:cd:54:00:b3:f4:47:e3:33:07:ec:95:b2:49:
c3:ae:a1:e4:6c:4a:b9:fd:9c:59:64:2a:07:d6:da:
c4:12:e0:19:00:aa:19:06:3e:9c:3b:f3:16:34:92:
52:ef:96:2b:2c:3c:a9:1f:e3:68:0c:a6:e9:b3:f8:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DC:1D:5E:85:2A:E2:40:A8:13:5F:3B:09:9B:29:A3:4E:75:5D:9B
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:66:5f:a3:d5:4c:5f:e2:fb:f6:a1:1b:d0:7f:cf:2a:c3:92:
d6:8f:e5:33:1a:95:7b:7d:18:7a:c4:f2:a8:e4:85:79:ab:8e:
93:2a:a5:dd:6d:05:6a:e7:97:24:e9:3d:7e:ce:de:44:93:da:
c8:01:52:b8:de:07:2e:28:08:69:72:ae:9e:06:64:18:3d:d5:
58:23:94:66:37:82:a6:37:9c:42:ed:fd:e4:67:89:d7:a1:73:
de:8a:40:40:5e:a4:dd:f4:3c:53:df:f3:3e:d5:71:95:f4:7b:
30:24:01:b6:a6:bf:1c:66:a1:71:54:43:4b:24:de:92:b1:a4:
96:eb:e7:e0:9a:36:b9:54:2f:bd:9a:c6:b7:8f:f4:64:f5:d9:
e2:be:33:95:7c:c1:1c:7b:7e:e6:8a:10:02:5c:28:c5:25:89:
cd:cd:27:ca:c2:8e:44:df:ab:ae:3c:c0:7c:84:75:32:92:aa:
81:84:96:2d:61:08:1f:6e:1f:04:7f:b7:45:19:3f:f5:9d:30:
e4:64:71:9e:bb:6b:c6:78:ff:47:3e:0d:df:d0:fe:09:32:00:
92:d1:81:84:86:64:b0:97:06:02:de:1f:63:a0:74:37:f2:56:
99:b2:11:fd:73:bd:70:3c:b6:1b:92:b5:6f:06:59:7c:8c:65:
de:29:11:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7612e+wv9757zfFIRftI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3OTZjM2ZjNTU5YmZhZjRiNzY1NTA4OTRjZmY0ZDMw
YjliN2UwHhcNMjUxMDE5MTAwMjEwWhcNMjUxMDIwMTAwMjEwWjAzMTEwLwYDVQQD
EygwMGRjMWQ1ZTg1MmFlMjQwYTgxMzVmM2IwOTliMjlhMzRlNzU1ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzQLicpWFka/0xj1wpEL+Qy494p6
lMTiC7b50E98+5TlLDKxE4r6Eox8EA6smTEyN9tRdQg8rOODWgEu7dnZNNXPF3/C
MpUbReHhyLp1eR5tUbjEO7g8wQOA3azpkfys/XSC1keiUcke9WTcNF7uS65Gjsmo
3ik1nlzF/TNLi6TgSMCZP+bzdOuwMFeiUrTHWMYaAUctZdHrnn8ISo0Ao0zI1jp6
YVYw4if/LyvOoNTqdFNsnBx6FEMaYWemtQ2tx6dGy81UALP0R+MzB+yVsknDrqHk
bEq5/ZxZZCoH1trEEuAZAKoZBj6cO/MWNJJS75YrLDypH+NoDKbps/hNFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADcHV6FKuJAqBNfOwmbKaNOdV2bMB8GA1UdIwQY
MBaAFN87eWw/xVm/r0t2VQiUz/TTC5t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUt
MjhlNDRmMmVlOTBhLzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUtMjhlNDRmMmVlOTBh
LzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWZfo9VM
X+L79qEb0H/PKsOS1o/lMxqVe30YesTyqOSFeauOkyql3W0FaueXJOk9fs7eRJPa
yAFSuN4HLigIaXKungZkGD3VWCOUZjeCpjecQu395GeJ16Fz3opAQF6k3fQ8U9/z
PtVxlfR7MCQBtqa/HGahcVRDSyTekrGkluvn4Jo2uVQvvZrGt4/0ZPXZ4r4zlXzB
HHt+5ooQAlwoxSWJzc0nysKORN+rrjzAfIR1MpKqgYSWLWEIH24fBH+3RRk/9Z0w
5GRxnrtrxnj/Rz4N39D+CTIAktGBhIZksJcGAt4fY6B0N/JWmbIR/XO9cDy2G5K1
bwZZfIxl3ikREg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:41 2025 by rpki-client