Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: gZaAatKY4bUsGiygmizp6rKH5/f5/y2KW9Mh7YnpNsY=
Subject key identifier: 52:56:22:3C:E1:00:F6:27:EB:C3:A2:17:30:23:B0:A8:80:E6:4C:97
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 0199FBB36CFFFEE6A7E381F39D8435526FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: rBSGlcr3bUDe7De6iZDgKvIaOWjGNkKImFt6Jx7Wduw=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6c:ff:fe:e6:a7:e3:81:f3:9d:84:35:52:6f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=5256223ce100f627ebc3a2173023b0a880e64c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:d6:41:7a:6b:fb:41:33:af:b4:06:29:e7:
ce:f1:e0:ef:ca:16:1e:c4:e9:3f:9d:f3:e1:f9:fd:
51:96:80:19:e7:f1:4c:b1:93:07:e9:44:e6:5c:60:
14:fb:39:64:37:e2:43:fb:ee:6e:ac:32:49:c5:fd:
c6:26:eb:f0:45:9d:06:6f:60:6a:43:5a:3b:09:64:
96:17:6c:a8:36:e8:d8:3e:dc:ff:bd:06:fc:8b:ce:
5e:53:32:77:b4:73:b8:c5:b6:95:70:b2:dd:40:2c:
f1:d1:c5:54:23:7f:ec:64:58:86:b3:a3:8f:5e:f9:
4d:0c:77:98:46:c2:3f:c0:ee:a5:5e:f3:ab:aa:99:
01:e3:5b:0b:cc:97:ab:9e:c2:f9:5c:9e:03:9b:31:
aa:2b:1a:44:40:7f:9b:17:5a:19:28:53:ef:97:ee:
ec:14:d8:c3:c3:f9:5c:0b:fd:84:6f:55:a4:1d:70:
13:18:6d:94:3a:41:68:6c:0d:92:3b:53:aa:0f:64:
84:4f:b1:08:98:b7:55:4d:42:0a:80:89:a4:55:b3:
b8:d3:30:e3:37:c9:80:62:ce:95:8b:3d:5f:6f:ac:
84:5b:5b:05:9c:88:a3:18:5f:6e:68:62:92:68:7c:
13:20:de:b2:37:ef:dc:dc:b4:3f:4c:51:4a:ec:0b:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:22:3C:E1:00:F6:27:EB:C3:A2:17:30:23:B0:A8:80:E6:4C:97
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5f:8e:93:fb:57:f7:8a:f7:76:af:13:4a:e8:d7:6b:96:51:
d3:e4:ef:4b:d7:61:57:b9:31:70:01:14:71:4e:6d:56:12:91:
e7:c5:1a:c8:13:89:b1:3c:3b:eb:ba:4b:e8:bb:9b:22:6f:7f:
f7:2d:81:86:1d:d7:c2:5e:8b:0b:fa:49:89:81:60:59:b9:d0:
b5:75:22:b3:cb:da:66:a7:e0:29:90:b5:72:78:98:99:2c:9d:
46:28:b5:61:d5:5a:a8:3d:7e:95:98:e6:b0:ec:45:26:ca:75:
58:a9:b5:bf:35:90:be:61:83:9a:09:6f:3c:9d:d2:a0:1c:9b:
bf:51:91:0e:92:7d:1c:2a:03:20:49:16:10:6b:37:e2:9a:4d:
ed:34:2d:0d:56:78:54:bf:20:31:5b:84:91:66:31:16:c9:f2:
04:9c:93:79:33:18:7c:91:80:33:fe:20:1b:35:81:a3:9e:8a:
0b:13:9b:82:7b:1c:82:33:6f:81:2c:42:d1:e4:a7:c9:fd:35:
48:59:c9:31:51:ee:ad:bc:31:b1:c5:fd:06:41:b0:24:69:ab:
d1:cb:38:cf:ac:22:3f:0a:57:b7:e8:50:e3:31:a9:f8:7a:20:
8d:0b:c8:3f:a5:1e:54:4b:20:77:18:86:bf:3a:5c:38:dd:3c:
89:05:ba:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2z//uan44HznYQ1Um/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYzIwMDRhMWFmMDMwYmE5OWZjZjQ1MWYzYmQ4OGVmYzUz
ODQ2YTkwHhcNMjUxMDE5MDkwMTA0WhcNMjUxMDIwMDkwMTA0WjAzMTEwLwYDVQQD
Eyg1MjU2MjIzY2UxMDBmNjI3ZWJjM2EyMTczMDIzYjBhODgwZTY0Yzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+fWQXpr+0Ezr7QGKefO8eDvyhYe
xOk/nfPh+f1RloAZ5/FMsZMH6UTmXGAU+zlkN+JD++5urDJJxf3GJuvwRZ0Gb2Bq
Q1o7CWSWF2yoNujYPtz/vQb8i85eUzJ3tHO4xbaVcLLdQCzx0cVUI3/sZFiGs6OP
XvlNDHeYRsI/wO6lXvOrqpkB41sLzJernsL5XJ4DmzGqKxpEQH+bF1oZKFPvl+7s
FNjDw/lcC/2Eb1WkHXATGG2UOkFobA2SO1OqD2SET7EImLdVTUIKgImkVbO40zDj
N8mAYs6Viz1fb6yEW1sFnIijGF9uaGKSaHwTIN6yN+/c3LQ/TFFK7AviTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJWIjzhAPYn68OiFzAjsKiA5kyXMB8GA1UdIwQY
MBaAFNzCAEoa8DC6mfz0UfO9iO/FOEapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUt
NTZhMzMwNTc0OTdiLzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUtNTZhMzMwNTc0OTdi
LzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV+Ok/tX
94r3dq8TSujXa5ZR0+TvS9dhV7kxcAEUcU5tVhKR58UayBOJsTw767pL6LubIm9/
9y2Bhh3Xwl6LC/pJiYFgWbnQtXUis8vaZqfgKZC1cniYmSydRii1YdVaqD1+lZjm
sOxFJsp1WKm1vzWQvmGDmglvPJ3SoBybv1GRDpJ9HCoDIEkWEGs34ppN7TQtDVZ4
VL8gMVuEkWYxFsnyBJyTeTMYfJGAM/4gGzWBo56KCxObgnscgjNvgSxC0eSnyf01
SFnJMVHurbwxscX9BkGwJGmr0cs4z6wiPwpXt+hQ4zGp+HogjQvIP6UeVEsgdxiG
vzpcON08iQW6qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:28 2025 by rpki-client