Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: quPXWR9G7OvQL3i6eVzFI3qnWCgfrRkRUISfgYyg2cI=
Subject key identifier: 25:67:46:1A:18:60:08:D1:29:E9:57:C2:7A:51:5E:B2:E1:CC:FB:C4
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 0199FB7CFFC3C16573CDA38A2D3E8A1493BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0A08
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: a3idqZTnlVnCZVieXdhsm0k6ZBtJFEIJ7SNlr7nfMdo=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ff:c3:c1:65:73:cd:a3:8a:2d:3e:8a:14:93:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=2567461a186008d129e957c27a515eb2e1ccfbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:40:4d:fa:f5:de:b1:88:a2:7e:fb:0c:1b:
da:4d:7e:6a:3a:09:0d:10:4d:ca:7a:d2:45:8b:36:
44:0b:67:f3:80:5f:fa:55:33:0d:d5:ae:c9:71:6c:
14:bf:f7:3c:b0:ee:a5:ec:c5:c1:da:72:24:b8:fa:
bc:83:df:fb:0a:39:b7:24:d5:33:65:3b:0c:27:44:
18:39:93:59:69:25:d9:48:d1:63:0a:46:cb:20:70:
0f:07:ab:bc:49:01:24:10:77:7c:fa:e2:ae:94:ae:
88:62:48:ee:97:9e:8f:39:39:a5:54:57:6f:56:60:
fe:fd:c3:2d:a4:3f:e9:59:03:6e:9f:ca:28:78:66:
13:fb:04:53:9a:ec:84:4d:cd:a3:85:85:ab:db:96:
b7:c8:43:1d:07:c4:93:12:64:41:d9:65:09:f2:ff:
61:f1:70:f8:82:3d:a3:f4:8d:40:d6:1a:29:9d:10:
72:be:c6:76:06:ec:0c:ae:92:76:f9:1f:d2:36:6a:
dd:79:fc:c9:87:1e:78:b7:33:b5:b8:94:89:bf:57:
cc:7b:5f:26:bf:7a:40:92:19:19:f3:fa:d4:41:e6:
c1:69:0a:56:4a:40:4e:83:bd:1c:fe:97:91:2f:54:
8b:58:99:7f:b5:b0:1d:dd:d7:5f:99:46:97:13:97:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:46:1A:18:60:08:D1:29:E9:57:C2:7A:51:5E:B2:E1:CC:FB:C4
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:da:b2:e6:fc:a1:d3:ea:f3:9c:0c:48:5c:95:6f:28:b9:01:
90:04:64:ac:1a:de:15:31:e2:bd:6f:b8:d3:71:de:d5:aa:c5:
0d:77:1e:a3:54:76:9d:4c:84:20:c7:ec:ab:f4:0c:79:13:75:
19:b8:a7:1c:fd:43:c7:06:5e:25:7f:48:ce:74:52:0e:40:c9:
69:79:11:13:6f:29:2d:cb:e1:19:46:38:76:b6:40:63:25:49:
ec:7d:82:85:eb:22:a4:97:49:86:4e:b4:ab:80:18:5b:6b:ce:
4a:c9:18:97:07:73:28:18:52:d2:2f:36:44:c3:54:fd:2a:12:
3c:41:7b:a1:1c:a1:fe:55:62:ab:8e:a4:94:5c:9a:84:e8:07:
d4:5e:a7:82:0a:69:9b:62:40:97:f5:d2:2f:f0:83:0d:f9:e0:
c1:63:aa:82:f3:b0:34:9a:1a:b6:f4:b7:6d:3c:a5:71:a0:99:
3e:ac:14:b2:4b:46:3e:8b:a8:23:71:4c:e9:e6:67:2f:66:d5:
48:e4:8a:91:0e:01:e9:46:91:2e:29:5b:fb:bc:8b:ac:d8:08:
87:4c:c4:c4:73:89:10:53:fd:78:ad:a8:a7:4a:35:b6:9f:e8:
a5:09:e7:67:ba:a0:77:f9:9f:43:79:9c:d1:37:e3:33:98:3d:
9e:b4:71:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fP/DwWVzzaOKLT6KFJO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4
OGFhNDkwHhcNMjUxMDE5MDgwMTM3WhcNMjUxMDIwMDgwMTM3WjAzMTEwLwYDVQQD
EygyNTY3NDYxYTE4NjAwOGQxMjllOTU3YzI3YTUxNWViMmUxY2NmYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdNATfr13rGIon77DBvaTX5qOgkN
EE3KetJFizZEC2fzgF/6VTMN1a7JcWwUv/c8sO6l7MXB2nIkuPq8g9/7Cjm3JNUz
ZTsMJ0QYOZNZaSXZSNFjCkbLIHAPB6u8SQEkEHd8+uKulK6IYkjul56POTmlVFdv
VmD+/cMtpD/pWQNun8ooeGYT+wRTmuyETc2jhYWr25a3yEMdB8STEmRB2WUJ8v9h
8XD4gj2j9I1A1hopnRByvsZ2BuwMrpJ2+R/SNmrdefzJhx54tzO1uJSJv1fMe18m
v3pAkhkZ8/rUQebBaQpWSkBOg70c/peRL1SLWJl/tbAd3ddfmUaXE5dpqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVnRhoYYAjRKelXwnpRXrLhzPvEMB8GA1UdIwQY
MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdqy5vyh
0+rznAxIXJVvKLkBkARkrBreFTHivW+403He1arFDXceo1R2nUyEIMfsq/QMeRN1
GbinHP1DxwZeJX9IznRSDkDJaXkRE28pLcvhGUY4drZAYyVJ7H2ChesipJdJhk60
q4AYW2vOSskYlwdzKBhS0i82RMNU/SoSPEF7oRyh/lViq46klFyahOgH1F6nggpp
m2JAl/XSL/CDDfngwWOqgvOwNJoatvS3bTylcaCZPqwUsktGPouoI3FM6eZnL2bV
SOSKkQ4B6UaRLilb+7yLrNgIh0zExHOJEFP9eK2op0o1tp/opQnnZ7qgd/mfQ3mc
0TfjM5g9nrRxZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:44 2025 by rpki-client