Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: dHmNLo5FuEYJqci0Mx50XapAaMgZSY2sn1zmDd3D/ZI=
Subject key identifier: 6E:CC:E0:68:1C:C8:7C:58:A0:65:3E:0F:7D:0F:AF:C5:60:15:EB:3B
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 0199FD33EEF9AC02F51DEB8A2A2E7A59FCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 117E
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: e5BPIUATOxE+zzfFc2vPrXTYhyOxCbR6xJ8ON0MWYso=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ee:f9:ac:02:f5:1d:eb:8a:2a:2e:7a:59:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=6ecce0681cc87c58a0653e0f7d0fafc56015eb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:f1:49:e7:46:e5:d2:30:df:0a:ee:9e:01:
23:23:b7:b5:d6:dd:48:99:23:2c:1a:b4:cf:2c:92:
5a:d0:f0:7f:ea:0b:3a:bf:de:e7:f2:45:93:ad:22:
79:86:31:ab:4e:29:c5:2f:89:d4:84:48:8b:bd:13:
55:ba:8e:44:ba:db:a3:2f:3e:95:3c:c1:fb:e0:89:
85:22:11:4f:53:8f:6a:f7:76:a4:f4:87:dd:9c:21:
a6:81:37:25:76:f7:31:01:19:a1:2b:b8:bf:62:f8:
b4:cc:90:3b:15:a8:79:0a:2a:29:7d:19:32:61:e2:
0c:f9:ce:2c:00:08:88:c5:1e:98:15:cb:9c:29:f8:
55:00:0d:6f:9d:ca:46:9e:03:83:51:42:7a:75:cd:
de:df:5e:42:46:a4:7c:33:cc:12:5b:5a:cf:ae:f3:
e3:cd:16:f7:5e:a1:20:d4:3b:08:59:80:60:b6:c0:
dd:65:3a:b3:dc:84:01:86:76:33:34:81:9f:57:fb:
5e:b4:74:35:1e:4c:8c:f8:e9:a5:01:00:23:03:b5:
9d:c9:46:5d:01:91:3a:50:79:7b:16:6b:17:fc:16:
7d:31:48:55:1c:36:1c:a1:92:02:cc:c2:ed:51:87:
76:f1:00:6b:d7:62:a6:c7:52:82:ab:3e:d2:00:b0:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CC:E0:68:1C:C8:7C:58:A0:65:3E:0F:7D:0F:AF:C5:60:15:EB:3B
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:a5:d2:14:9c:6c:a4:d1:4e:9c:dc:9d:c5:60:23:4f:4a:
a7:67:56:5e:6b:45:80:0e:f3:15:0d:60:fa:5b:9e:c5:5f:89:
aa:3c:e6:bb:83:ba:c4:40:aa:5b:9a:f7:5c:68:2e:5c:ad:ac:
6d:4a:43:2c:0e:30:fa:de:05:6a:5c:4f:65:a5:1c:6f:c0:7b:
a8:18:f2:f8:a0:41:d6:6c:8b:c0:a7:fe:4b:a3:ff:13:ca:26:
3c:db:9a:70:73:e2:d5:52:9e:c5:c4:6c:43:ce:56:8e:5d:f1:
a6:0b:a0:bb:9c:81:cf:af:27:62:40:f1:62:bf:8e:b5:ea:f6:
d2:30:c6:9a:54:d9:40:99:76:a6:15:0d:de:dc:c6:cf:0b:28:
af:d7:27:7e:02:81:9f:98:59:24:85:a2:d2:fe:98:c5:5b:62:
36:43:a9:03:83:10:22:a0:06:f6:45:b6:0f:a1:23:54:03:68:
01:6d:17:ba:5f:08:ec:bd:b2:1f:60:37:c7:d5:2f:fc:77:33:
7d:f4:1a:a7:39:5b:d6:65:7f:1d:79:cc:46:61:f7:fa:ef:93:
36:be:0f:14:80:b9:24:e1:80:27:70:19:bf:5b:8d:0e:f7:79:
32:1e:b4:00:a2:ca:13:9d:d5:fe:83:c3:d4:fd:cb:e7:90:3c:
e1:bd:a7:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+75rAL1HeuKKi56WfzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTA4MjQ4OWE0MTQwYzBhNzhlMDNkNTBiNmJmZDU0MDJi
MDQ0ZWEwHhcNMjUxMDE5MTYwMTAzWhcNMjUxMDIwMTYwMTAzWjAzMTEwLwYDVQQD
Eyg2ZWNjZTA2ODFjYzg3YzU4YTA2NTNlMGY3ZDBmYWZjNTYwMTVlYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQrxSedG5dIw3wrungEjI7e11t1I
mSMsGrTPLJJa0PB/6gs6v97n8kWTrSJ5hjGrTinFL4nUhEiLvRNVuo5EutujLz6V
PMH74ImFIhFPU49q93ak9IfdnCGmgTcldvcxARmhK7i/Yvi0zJA7Fah5CiopfRky
YeIM+c4sAAiIxR6YFcucKfhVAA1vncpGngODUUJ6dc3e315CRqR8M8wSW1rPrvPj
zRb3XqEg1DsIWYBgtsDdZTqz3IQBhnYzNIGfV/tetHQ1HkyM+OmlAQAjA7WdyUZd
AZE6UHl7FmsX/BZ9MUhVHDYcoZICzMLtUYd28QBr12Kmx1KCqz7SALCF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7M4GgcyHxYoGU+D30Pr8VgFes7MB8GA1UdIwQY
MBaAFNyggkiaQUDAp44D1Qtr/VQCsETqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgt
ZGZjMDU2NTQ1YmU0LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgtZGZjMDU2NTQ1YmU0
LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBil0hSc
bKTRTpzcncVgI09Kp2dWXmtFgA7zFQ1g+luexV+Jqjzmu4O6xECqW5r3XGguXK2s
bUpDLA4w+t4FalxPZaUcb8B7qBjy+KBB1myLwKf+S6P/E8omPNuacHPi1VKexcRs
Q85Wjl3xpgugu5yBz68nYkDxYr+Oter20jDGmlTZQJl2phUN3tzGzwsor9cnfgKB
n5hZJIWi0v6YxVtiNkOpA4MQIqAG9kW2D6EjVANoAW0Xul8I7L2yH2A3x9Uv/Hcz
ffQapzlb1mV/HXnMRmH3+u+TNr4PFIC5JOGAJ3AZv1uNDvd5Mh60AKLKE53V/oPD
1P3L55A84b2nzQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:04 2025 by rpki-client