Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: 1sjiqzhDWHVuAAQMlCByzO+ZSnAQT/zgGgYg2sKUMD8=
Subject key identifier: 93:06:BC:00:B0:AF:EA:C1:C9:26:77:80:E4:DC:0F:5B:3E:36:01:07
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 0199FD34369EBFECC3A5DA694290C1DB7567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0D7A
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: DO2Hjyr20RU324yey1fwJTgDYn7ffuOpfpKSvwXKrzU=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:36:9e:bf:ec:c3:a5:da:69:42:90:c1:db:75:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=9306bc00b0afeac1c9267780e4dc0f5b3e360107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:90:11:34:12:a1:a1:33:4d:17:47:4c:56:
8e:97:8a:f2:7a:83:ff:4e:0c:73:e9:7c:54:a0:95:
53:56:fb:1e:a3:27:88:fb:e0:f4:18:cc:bb:de:07:
fe:d4:49:68:d0:ce:95:72:8b:2b:00:50:88:2b:cc:
31:f0:ff:6e:9a:11:da:e3:a3:c9:43:0e:ef:22:37:
6d:3c:e7:cb:02:30:4d:3f:12:e2:6b:41:37:a1:80:
e2:09:35:48:05:18:d4:d5:ca:e7:61:21:87:f8:f9:
70:35:87:4c:12:48:38:5e:0f:e0:95:4c:c6:56:19:
03:de:68:c2:bc:62:5e:ee:28:fa:3a:bb:cb:7b:07:
7b:10:8a:b3:8d:b2:9a:91:ff:ee:51:87:d5:f5:67:
4b:13:62:37:c8:b5:23:1e:06:16:43:3a:2e:10:62:
86:cf:3f:02:c6:8e:f5:f0:ad:e6:a7:f7:79:3c:5c:
13:35:1a:9c:4b:dd:88:9b:24:83:75:05:7b:44:ee:
b8:c9:e1:85:d4:11:0e:6a:54:69:4e:54:6c:df:41:
bb:eb:b3:fb:66:2e:54:6d:10:04:b8:25:b7:a0:28:
a0:88:9c:04:66:34:2e:66:1e:36:a8:01:cd:6a:ac:
37:39:5d:79:14:b0:2d:a3:9e:79:e9:11:49:3f:e3:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:BC:00:B0:AF:EA:C1:C9:26:77:80:E4:DC:0F:5B:3E:36:01:07
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:db:7e:11:68:4c:ac:31:56:1a:2d:14:97:0c:bb:c6:b5:d8:
2b:80:23:8a:5a:f4:fb:c8:82:0b:17:fd:57:26:55:c2:eb:b5:
40:14:c3:74:a7:10:3f:1c:74:59:6c:06:31:8a:0c:ba:09:4e:
7b:2f:5d:f7:df:a6:f1:9f:12:62:d4:6a:3e:6d:1a:98:bd:2f:
04:3c:3b:e9:e8:96:a4:1f:a6:8c:f4:73:dc:6b:4a:be:6b:c9:
cb:ff:dc:87:0b:6e:01:ce:21:27:e8:24:d8:4e:80:63:ec:b1:
86:0e:5a:2f:02:3b:38:32:fa:6d:8a:5a:cd:af:31:48:e3:cc:
df:a5:99:19:f4:00:ea:a8:36:fd:da:ee:e8:7e:f9:a9:c1:49:
db:48:0f:56:e2:ce:8f:31:31:ac:c8:78:85:73:45:77:b1:62:
8b:2b:6f:be:77:2e:0e:70:0c:a0:60:cd:28:9e:da:0e:a6:fe:
4a:bc:1c:77:56:ea:fa:f8:ab:2d:1b:da:ca:2f:08:f2:e4:1a:
23:ff:c0:d1:7a:32:c6:c3:3e:e8:29:59:c4:17:e0:5b:af:a1:
f8:8f:c2:6c:e0:74:59:dd:6c:73:77:10:5d:04:c8:38:49:c6:
56:f6:5b:c6:6c:25:32:17:9d:26:95:2b:d0:88:7e:4a:0f:57:
76:2e:f4:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NDaev+zDpdppQpDB23VnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0
YTFiNTUwHhcNMjUxMDE5MTYwMTIxWhcNMjUxMDIwMTYwMTIxWjAzMTEwLwYDVQQD
Eyg5MzA2YmMwMGIwYWZlYWMxYzkyNjc3ODBlNGRjMGY1YjNlMzYwMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CeQETQSoaEzTRdHTFaOl4ryeoP/
Tgxz6XxUoJVTVvseoyeI++D0GMy73gf+1Elo0M6VcosrAFCIK8wx8P9umhHa46PJ
Qw7vIjdtPOfLAjBNPxLia0E3oYDiCTVIBRjU1crnYSGH+PlwNYdMEkg4Xg/glUzG
VhkD3mjCvGJe7ij6OrvLewd7EIqzjbKakf/uUYfV9WdLE2I3yLUjHgYWQzouEGKG
zz8Cxo718K3mp/d5PFwTNRqcS92ImySDdQV7RO64yeGF1BEOalRpTlRs30G767P7
Zi5UbRAEuCW3oCigiJwEZjQuZh42qAHNaqw3OV15FLAto5556RFJP+O/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMGvACwr+rBySZ3gOTcD1s+NgEHMB8GA1UdIwQY
MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt
OTlkNWUwN2JhZTc2LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2
LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitt+EWhM
rDFWGi0Ulwy7xrXYK4Ajilr0+8iCCxf9VyZVwuu1QBTDdKcQPxx0WWwGMYoMuglO
ey9d99+m8Z8SYtRqPm0amL0vBDw76eiWpB+mjPRz3GtKvmvJy//chwtuAc4hJ+gk
2E6AY+yxhg5aLwI7ODL6bYpaza8xSOPM36WZGfQA6qg2/dru6H75qcFJ20gPVuLO
jzExrMh4hXNFd7FiiytvvncuDnAMoGDNKJ7aDqb+Srwcd1bq+virLRvayi8I8uQa
I//A0XoyxsM+6ClZxBfgW6+h+I/CbOB0Wd1sc3cQXQTIOEnGVvZbxmwlMhedJpUr
0Ih+Sg9Xdi70mA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:55 2025 by rpki-client