Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier: TUgqBVrHadRhnJ16fxu7Q+nDVuU3punJnOVmLNTzOlg=
Subject key identifier: 82:40:9B:37:37:CD:97:D8:B4:0B:9B:17:6F:DA:D9:54:EA:9A:7A:BE
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 0199FB7CD674716E671333B528B4E1F5606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number: 13C8
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: MyiZPIlMWHduRI1VWiQWK41K2PnsqYUNHmdh+QIHfKM=)
2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=)
3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=)
4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=)
5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d6:74:71:6e:67:13:33:b5:28:b4:e1:f5:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=82409b3737cd97d8b40b9b176fdad954ea9a7abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:b9:e5:b9:6e:92:ab:8d:65:d6:4d:29:26:
10:23:d3:3a:35:9b:14:ae:95:f4:cf:05:8b:ed:32:
94:8d:9c:17:32:10:ba:45:5a:06:c0:48:5e:f4:c8:
f7:9f:87:7e:91:67:06:86:a5:a9:40:97:d4:1f:96:
bb:d0:5f:f8:26:a8:cf:16:09:62:8f:fd:ea:0b:34:
9c:4c:99:6b:56:2a:a9:12:5e:14:75:34:ac:37:65:
69:6f:12:96:3b:f9:d4:b8:0c:ee:a9:e2:13:17:ab:
d6:9b:57:94:de:79:b7:40:7b:b5:d7:81:8d:14:81:
f4:13:b5:fa:24:29:6e:58:fd:78:0d:d5:8b:be:b3:
63:c0:2d:13:56:98:9d:23:10:28:f2:c7:7f:5d:a1:
dc:6c:6b:a6:c8:44:3f:b3:15:54:ff:06:f4:df:22:
3d:2f:82:10:aa:c3:0e:51:3f:eb:96:90:0f:de:37:
c9:36:8a:0a:96:9e:04:c2:96:55:42:2b:0d:be:ab:
72:c5:88:8b:e2:68:17:cb:f2:2c:c8:01:ad:19:bd:
d3:89:ae:6b:a0:8c:32:93:12:ea:2d:d1:b2:f3:ff:
9a:5e:f2:a8:b4:21:2c:2b:ac:57:b3:f5:07:a7:44:
55:f4:32:c6:07:0c:6e:00:fb:7b:16:8a:90:7c:4b:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:40:9B:37:37:CD:97:D8:B4:0B:9B:17:6F:DA:D9:54:EA:9A:7A:BE
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9d:25:38:f0:c5:1f:47:b8:83:fa:79:64:ec:16:03:b5:4f:
71:d5:2e:9b:ac:a0:0f:30:8c:24:5b:19:b0:67:da:c2:69:6f:
6c:1c:fc:07:52:f9:74:d2:9d:b6:45:3c:db:b6:8b:90:fe:d9:
d1:55:7e:69:77:07:29:2a:60:22:78:ac:76:db:f6:4d:00:9d:
8c:79:af:27:59:7e:28:d7:a8:0b:71:a6:25:1d:95:d5:17:0d:
96:3c:0f:61:25:23:78:9d:aa:62:45:8c:76:22:f1:26:20:66:
d4:97:60:b3:ce:ea:ca:20:23:9c:e7:b7:21:3e:18:1b:13:ff:
01:40:a8:56:ae:bd:75:b9:f9:32:00:76:5b:5f:87:f2:64:91:
c7:b7:73:cd:9e:33:ae:6e:ba:ed:d4:96:b9:ae:0d:b5:57:18:
7c:74:e6:47:8a:e1:2a:c0:69:08:ab:1b:80:f8:77:21:26:82:
c2:b8:9b:7a:6c:86:f7:9b:be:41:8c:ce:5d:12:73:39:3a:42:
b3:e3:4c:c6:92:2c:f8:7a:b1:50:3a:8d:1d:8c:53:9c:12:fa:
e3:ca:7d:57:87:24:f9:de:49:de:00:2b:7f:8b:d3:a8:b5:42:
a2:91:4d:4f:78:5d:91:c3:67:39:c1:0f:0e:93:f0:7c:3b:cf:
68:c5:46:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNZ0cW5nEzO1KLTh9WBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk
YmVmYzgwHhcNMjUxMDE5MDgwMTI2WhcNMjUxMDIwMDgwMTI2WjAzMTEwLwYDVQQD
Eyg4MjQwOWIzNzM3Y2Q5N2Q4YjQwYjliMTc2ZmRhZDk1NGVhOWE3YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pq55blukquNZdZNKSYQI9M6NZsU
rpX0zwWL7TKUjZwXMhC6RVoGwEhe9Mj3n4d+kWcGhqWpQJfUH5a70F/4JqjPFgli
j/3qCzScTJlrViqpEl4UdTSsN2VpbxKWO/nUuAzuqeITF6vWm1eU3nm3QHu114GN
FIH0E7X6JCluWP14DdWLvrNjwC0TVpidIxAo8sd/XaHcbGumyEQ/sxVU/wb03yI9
L4IQqsMOUT/rlpAP3jfJNooKlp4EwpZVQisNvqtyxYiL4mgXy/IsyAGtGb3Tia5r
oIwykxLqLdGy8/+aXvKotCEsK6xXs/UHp0RV9DLGBwxuAPt7FoqQfEu8nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJAmzc3zZfYtAubF2/a2VTqmnq+MB8GA1UdIwQY
MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt
MzcyNzNkZjM5MDFjLzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj
LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ0lOPDF
H0e4g/p5ZOwWA7VPcdUum6ygDzCMJFsZsGfawmlvbBz8B1L5dNKdtkU827aLkP7Z
0VV+aXcHKSpgInisdtv2TQCdjHmvJ1l+KNeoC3GmJR2V1RcNljwPYSUjeJ2qYkWM
diLxJiBm1Jdgs87qyiAjnOe3IT4YGxP/AUCoVq69dbn5MgB2W1+H8mSRx7dzzZ4z
rm667dSWua4NtVcYfHTmR4rhKsBpCKsbgPh3ISaCwribemyG95u+QYzOXRJzOTpC
s+NMxpIs+HqxUDqNHYxTnBL648p9V4ck+d5J3gArf4vTqLVCopFNT3hdkcNnOcEP
DpPwfDvPaMVGkg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:52 2025 by rpki-client