Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier: IvK+ADHnrXuI3oh3QnNOc0/uKof4skArKsji2l2nG7o=
Subject key identifier: 93:EA:9A:80:59:D3:07:FD:AF:12:45:80:57:92:D0:44:F7:97:D5:78
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 0199FC8F9542C172EB495A258331D9DE0470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: Bb2xjvR27aWWfTHMTfJTsLNnw1nFHUpOtE2K2Azrna8=)
2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:95:42:c1:72:eb:49:5a:25:83:31:d9:de:04:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=93ea9a8059d307fdaf1245805792d044f797d578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:7c:3f:82:d7:3d:7d:42:d5:4f:c4:af:c7:
a1:90:b8:ac:b2:ea:76:a2:58:c7:46:86:5d:3a:20:
1a:f0:37:30:54:9a:e5:13:ea:58:9d:e1:ea:ba:d7:
d0:a9:2d:82:fb:c3:68:f8:d5:cf:f8:e1:6f:a9:fd:
fc:79:e5:cd:71:e3:6f:0a:52:9c:b9:2e:4e:f4:78:
4f:5c:24:f1:d4:2f:36:51:a3:02:f9:ee:2b:1e:53:
b9:7f:8c:59:42:07:f6:8b:25:6a:85:d4:52:75:71:
da:a2:e7:5d:7c:89:d0:1f:84:10:eb:2b:9d:62:b0:
c0:d5:c2:7f:f4:49:cc:63:e4:f0:f6:8a:49:f2:e9:
18:4c:a9:fd:49:5a:bb:23:98:a8:3e:5b:be:9a:d4:
95:68:58:5c:cf:5f:35:a4:77:13:ad:79:e5:4e:7c:
6b:2b:3f:eb:1c:aa:24:81:fa:62:7e:1c:c2:48:dc:
3b:7f:8c:6e:c7:42:c4:4b:93:d4:35:36:d5:e6:dc:
84:ad:01:10:e7:83:f4:a9:97:59:af:c1:01:c3:9f:
78:6a:7a:a1:d1:9b:a9:cd:c7:2d:90:a1:f1:00:a6:
4a:61:dc:be:e1:d6:ec:46:35:04:23:56:72:07:ac:
de:9f:45:86:10:5b:ac:ac:70:75:df:ef:26:f4:40:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:9A:80:59:D3:07:FD:AF:12:45:80:57:92:D0:44:F7:97:D5:78
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:77:68:fc:c4:9a:26:35:f5:1e:af:c1:c3:9c:90:59:2e:
b1:0b:e3:ae:0a:76:2f:bf:a2:da:0e:7f:d3:5b:19:8d:ba:6d:
b6:50:c4:4e:d2:86:d5:45:13:b9:fa:a6:45:9a:24:e7:6c:56:
15:d6:73:e7:da:3f:bd:01:de:de:50:59:45:b1:0f:a6:8e:44:
1c:36:e5:ce:a2:cd:0a:1f:7b:aa:63:bf:42:bc:e6:2a:6c:7c:
4b:e3:9e:9a:a1:11:52:44:19:a6:62:ac:3d:47:43:fd:de:18:
41:07:46:75:42:70:c9:06:29:33:cf:8b:86:f5:13:77:1b:c2:
6f:b5:0c:38:7c:fc:63:86:b4:83:ab:b3:5f:55:88:4f:23:48:
56:0f:6d:f2:6f:38:be:ad:68:10:81:83:1a:52:90:0e:cb:4b:
57:67:f1:64:a5:97:ab:ba:b8:9b:49:b7:9b:2f:3c:d3:fb:b0:
23:f9:4c:e7:c6:44:5d:d9:5a:d0:67:9e:2e:b8:8c:af:db:3c:
59:1b:f2:53:82:c7:8e:e6:ab:ee:61:e4:bb:1c:ba:bd:a4:14:
60:56:86:40:dc:de:36:c7:fe:87:4b:82:2f:b7:77:6d:fc:e3:
92:d5:b1:2f:3c:03:b1:3f:ba:60:32:75:59:66:fe:04:f5:4a:
d7:94:ce:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5VCwXLrSVolgzHZ3gRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzc3YjVkMDIyYmYwYmU0YTYyMjRiNDdlZWE2Y2EwYjgx
YmYwMzcwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD
Eyg5M2VhOWE4MDU5ZDMwN2ZkYWYxMjQ1ODA1NzkyZDA0NGY3OTdkNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9J8P4LXPX1C1U/Er8ehkLissup2
oljHRoZdOiAa8DcwVJrlE+pYneHqutfQqS2C+8No+NXP+OFvqf38eeXNceNvClKc
uS5O9HhPXCTx1C82UaMC+e4rHlO5f4xZQgf2iyVqhdRSdXHaouddfInQH4QQ6yud
YrDA1cJ/9EnMY+Tw9opJ8ukYTKn9SVq7I5ioPlu+mtSVaFhcz181pHcTrXnlTnxr
Kz/rHKokgfpifhzCSNw7f4xux0LES5PUNTbV5tyErQEQ54P0qZdZr8EBw594anqh
0ZupzcctkKHxAKZKYdy+4dbsRjUEI1ZyB6zen0WGEFusrHB13+8m9EDeCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPqmoBZ0wf9rxJFgFeS0ET3l9V4MB8GA1UdIwQY
MBaAFNw3e10CK/C+SmIktH7qbKC4G/A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jYzU1OGMtMzVlNS00ZGQ2LTg2N2It
OGIwNWI3NzhlMGQ1LzEvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jYzU1OGMtMzVlNS00ZGQ2LTg2N2ItOGIwNWI3NzhlMGQ1
LzEvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+l3aPzE
miY19R6vwcOckFkusQvjrgp2L7+i2g5/01sZjbpttlDETtKG1UUTufqmRZok52xW
FdZz59o/vQHe3lBZRbEPpo5EHDblzqLNCh97qmO/QrzmKmx8S+OemqERUkQZpmKs
PUdD/d4YQQdGdUJwyQYpM8+LhvUTdxvCb7UMOHz8Y4a0g6uzX1WITyNIVg9t8m84
vq1oEIGDGlKQDstLV2fxZKWXq7q4m0m3my880/uwI/lM58ZEXdla0GeeLriMr9s8
WRvyU4LHjuar7mHkuxy6vaQUYFaGQNzeNsf+h0uCL7d3bfzjktWxLzwDsT+6YDJ1
WWb+BPVK15TObw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:31 2025 by rpki-client