Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: UOCYX06Yj4zbOpALucmIESVc04GYv/i6RjlNuy2ITbE=
Subject key identifier: FC:07:D4:AB:13:EA:9B:63:44:BC:09:18:F9:AE:F3:96:EC:C9:18:11
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 019A0034ECE7DE91DD9C053BFC91664B6659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 13D6
Signing time: Mon 20 Oct 2025 06:00:59 +0000
Manifest this update: Mon 20 Oct 2025 06:00:59 +0000
Manifest next update: Tue 21 Oct 2025 06:00:59 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: 2hMtidyG+57BnUozIy6FRU4SUd6dWUMwgR/o0YAPB7M=)
2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:ec:e7:de:91:dd:9c:05:3b:fc:91:66:4b:66:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Oct 20 06:00:59 2025 GMT
Not After : Oct 21 06:00:59 2025 GMT
Subject: CN=fc07d4ab13ea9b6344bc0918f9aef396ecc91811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:74:d1:72:fe:52:e1:07:31:8b:61:4d:35:
4f:ee:55:f6:c6:f5:fe:a8:01:f1:7b:09:ea:06:9b:
6f:0d:12:d1:7e:de:5f:37:26:ac:27:01:3e:58:1d:
15:d6:19:48:9e:94:31:b4:bc:88:32:58:02:74:d0:
3c:cc:64:b9:7d:19:75:69:1d:c8:55:fa:1b:ee:49:
5a:fa:41:dd:c7:2c:09:df:27:27:cf:da:21:a1:d9:
d7:3c:37:11:15:1d:c4:57:f1:be:e7:ad:06:14:02:
4b:1e:f1:33:da:0b:cc:3f:a0:42:2b:17:44:fb:8e:
c8:13:ed:8b:f2:ec:80:23:9e:23:c2:08:e2:34:b0:
92:e0:f2:15:74:d2:0a:73:48:26:3a:a7:5d:4e:96:
13:44:3f:0a:7e:65:9d:f3:81:45:ea:fb:88:46:79:
46:98:1c:81:b1:db:25:17:a2:1d:6f:4f:2d:a9:77:
32:7d:74:1f:82:dd:d6:35:79:43:23:a9:9e:a1:f0:
45:3e:bb:ad:87:fc:03:fa:73:d6:e6:95:db:0e:0a:
13:ee:98:a5:f9:08:ed:8f:9a:6b:71:25:26:25:8f:
45:c0:d6:9c:e0:55:5d:f4:19:d6:7d:3c:c8:ec:c7:
66:6f:a3:01:8a:82:03:4b:71:02:bf:f8:e4:98:ac:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:07:D4:AB:13:EA:9B:63:44:BC:09:18:F9:AE:F3:96:EC:C9:18:11
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:3e:ae:71:de:2e:fb:da:ec:48:ba:24:6e:c1:4d:32:71:
94:f8:34:d6:c9:c0:9c:37:48:c1:a3:88:fb:c0:bf:e4:13:d0:
08:fd:4b:e4:27:b4:55:d6:bb:af:4c:d1:43:00:43:6a:1f:87:
bd:0e:d5:31:d7:a2:39:b9:6a:be:56:f8:c7:4e:9d:f8:63:ef:
60:84:1d:a9:8f:cb:f4:0c:11:48:50:a3:96:f6:ce:31:a9:64:
70:0a:1a:ae:f7:b0:ff:da:db:fb:31:d7:f1:da:41:5b:e5:87:
14:4c:b2:bc:fd:bd:03:2f:3d:27:39:20:51:8b:08:9c:a1:b8:
df:7c:4b:49:c2:20:9a:21:9d:d3:49:5f:96:7b:69:fc:ba:21:
a4:b5:dc:11:00:06:20:b5:7c:78:c2:23:f5:0f:2f:9e:e3:7e:
aa:84:4d:dd:ac:34:8a:7b:b4:1f:08:2b:0e:9e:3e:4d:d1:2a:
fc:59:50:e0:2e:33:ea:3b:56:6d:16:af:e5:34:55:b9:68:1f:
1c:aa:59:76:95:9c:c3:c5:b9:f7:06:bf:4e:e7:43:1f:b1:0e:
f8:ed:3d:9a:86:04:63:54:56:1c:f3:e2:7d:b9:ac:bd:a5:a4:
97:24:6a:26:52:d5:5b:33:aa:1c:31:95:90:94:b1:cc:92:45:
09:04:e1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANOzn3pHdnAU7/JFmS2ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWZhY2NhMTRkZTA4MTc0ZWY1Yzk2YzkxZjFlNzgyNWY0
MmQwN2IwHhcNMjUxMDIwMDYwMDU5WhcNMjUxMDIxMDYwMDU5WjAzMTEwLwYDVQQD
EyhmYzA3ZDRhYjEzZWE5YjYzNDRiYzA5MThmOWFlZjM5NmVjYzkxODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DR00XL+UuEHMYthTTVP7lX2xvX+
qAHxewnqBptvDRLRft5fNyasJwE+WB0V1hlInpQxtLyIMlgCdNA8zGS5fRl1aR3I
Vfob7kla+kHdxywJ3ycnz9ohodnXPDcRFR3EV/G+560GFAJLHvEz2gvMP6BCKxdE
+47IE+2L8uyAI54jwgjiNLCS4PIVdNIKc0gmOqddTpYTRD8KfmWd84FF6vuIRnlG
mByBsdslF6Idb08tqXcyfXQfgt3WNXlDI6meofBFPruth/wD+nPW5pXbDgoT7pil
+Qjtj5prcSUmJY9FwNac4FVd9BnWfTzI7Mdmb6MBioIDS3ECv/jkmKy8TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwH1KsT6ptjRLwJGPmu85bsyRgRMB8GA1UdIwQY
MBaAFNxfrMoU3ggXTvXJbJHx54JfQtB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wODkzZjEtZmZiNC00NmIzLWJmMjct
YTcwMTY5ODBjODZmLzEvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wODkzZjEtZmZiNC00NmIzLWJmMjctYTcwMTY5ODBjODZm
LzEvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkc+rnHe
Lvva7Ei6JG7BTTJxlPg01snAnDdIwaOI+8C/5BPQCP1L5Ce0Vda7r0zRQwBDah+H
vQ7VMdeiOblqvlb4x06d+GPvYIQdqY/L9AwRSFCjlvbOMalkcAoarvew/9rb+zHX
8dpBW+WHFEyyvP29Ay89JzkgUYsInKG433xLScIgmiGd00lflntp/LohpLXcEQAG
ILV8eMIj9Q8vnuN+qoRN3aw0inu0HwgrDp4+TdEq/FlQ4C4z6jtWbRav5TRVuWgf
HKpZdpWcw8W59wa/TudDH7EO+O09moYEY1RWHPPifbmsvaWklyRqJlLVWzOqHDGV
kJSxzJJFCQThdQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:25 2025 by rpki-client