Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: W7Dr4ubSCZUadyaZZpq5581S/CHE8/BWmThuBhKy6yY=
Subject key identifier: 16:7C:7D:A0:2B:FE:4D:1E:45:C1:82:3E:48:CB:5A:F7:69:9F:E3:1E
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 0199FF596A58DCE61119E2B2ADBA3DA94F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 02:01:13 +0000
Manifest this update: Mon 20 Oct 2025 02:01:13 +0000
Manifest next update: Tue 21 Oct 2025 02:01:13 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: cuZx6rKeFNHb7Lv7M8bv2ogVd7t5DsIFKzK1GSSp3M8=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:6a:58:dc:e6:11:19:e2:b2:ad:ba:3d:a9:4f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Oct 20 02:01:13 2025 GMT
Not After : Oct 21 02:01:13 2025 GMT
Subject: CN=167c7da02bfe4d1e45c1823e48cb5af7699fe31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:1e:62:b0:e0:ff:29:bb:65:bb:fd:30:51:
bc:50:c4:93:0f:35:c7:62:33:a4:b1:4f:08:19:7e:
f9:3d:1b:5e:17:d2:c6:25:95:0f:02:2a:c0:57:89:
6c:f7:6f:97:0f:18:f8:46:b8:d1:3c:9e:80:be:ab:
6b:f6:b1:46:c3:07:cf:57:5c:ff:dd:f1:0a:8b:6e:
d6:03:e5:51:69:d6:28:cd:96:36:0c:02:1d:cb:2a:
f9:1c:76:87:47:39:43:e5:a2:d9:a6:86:6d:38:63:
dd:46:52:35:99:c4:57:5c:74:f5:23:ee:cb:ca:c7:
74:73:2a:67:a9:43:07:91:a2:13:9d:30:a8:48:de:
6f:00:3b:44:2f:15:76:87:0c:51:b3:b0:99:31:3f:
88:bc:21:2e:d8:9e:28:ee:65:bf:d3:ce:ff:47:fe:
e6:1b:fd:a7:09:02:f2:d0:10:4f:cd:f5:54:af:83:
88:8f:02:d9:12:95:4c:dc:38:fd:c2:9b:87:51:a8:
41:82:0c:b4:39:99:33:9b:79:89:dd:40:0b:cb:4d:
bb:b3:13:e4:f3:f8:7d:7a:38:18:85:d3:77:bc:6c:
21:24:a3:64:f6:de:1c:c2:64:d6:26:63:66:ac:3d:
be:2b:ef:69:73:0c:b4:42:ad:84:80:4b:b4:74:d8:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:7D:A0:2B:FE:4D:1E:45:C1:82:3E:48:CB:5A:F7:69:9F:E3:1E
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:50:ee:2b:aa:fa:75:be:70:de:f9:20:56:ab:82:d9:94:98:
54:65:64:3f:ea:53:cb:34:1b:07:1a:a6:4a:32:98:82:d0:90:
1b:c7:a7:67:36:f1:51:ff:af:8d:d2:ab:5d:3a:6c:9b:56:7d:
d9:bd:0b:ed:05:e7:12:b7:1b:f5:18:de:86:4e:a0:74:16:b1:
15:d2:d4:7d:6d:ce:7a:4c:42:96:1d:d8:aa:cb:85:ed:8e:7f:
42:ee:99:67:52:c7:97:a5:df:13:b5:4b:1d:0b:78:53:6c:13:
b8:88:f3:f5:29:ec:71:22:0b:f8:fa:fa:f3:e6:24:6e:46:2e:
13:17:f9:e6:fb:28:0b:6d:e0:c7:18:15:83:0c:1f:ce:3d:ff:
58:ed:da:24:80:b1:3e:9f:f1:78:bc:34:b1:b5:ce:65:71:a5:
86:6e:ab:1f:16:ba:91:b3:d8:07:63:bb:49:99:7c:b3:ed:a0:
df:a8:69:0f:13:4c:79:09:3c:3e:b4:17:d2:b6:49:f6:1f:aa:
1c:6b:9b:51:ee:fc:fc:2b:d4:e6:5f:94:4c:10:ce:66:6f:3d:
1f:49:a1:5e:78:73:59:0e:f5:50:a7:fa:b5:ee:1a:ac:fc:cb:
f3:d8:e2:45:0b:ea:2d:fc:83:98:5e:6f:97:04:5e:5d:da:83:
51:a1:61:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WWpY3OYRGeKyrbo9qU9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWU0YjA0NzFhNjE4NzJjNDA0MTQyZTFmOTBmNTA3NGYw
ZDZmMTUwHhcNMjUxMDIwMDIwMTEzWhcNMjUxMDIxMDIwMTEzWjAzMTEwLwYDVQQD
EygxNjdjN2RhMDJiZmU0ZDFlNDVjMTgyM2U0OGNiNWFmNzY5OWZlMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7MeYrDg/ym7Zbv9MFG8UMSTDzXH
YjOksU8IGX75PRteF9LGJZUPAirAV4ls92+XDxj4RrjRPJ6Avqtr9rFGwwfPV1z/
3fEKi27WA+VRadYozZY2DAIdyyr5HHaHRzlD5aLZpoZtOGPdRlI1mcRXXHT1I+7L
ysd0cypnqUMHkaITnTCoSN5vADtELxV2hwxRs7CZMT+IvCEu2J4o7mW/087/R/7m
G/2nCQLy0BBPzfVUr4OIjwLZEpVM3Dj9wpuHUahBggy0OZkzm3mJ3UALy027sxPk
8/h9ejgYhdN3vGwhJKNk9t4cwmTWJmNmrD2+K+9pcwy0Qq2EgEu0dNiqmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ8faAr/k0eRcGCPkjLWvdpn+MeMB8GA1UdIwQY
MBaAFNyuSwRxphhyxAQULh+Q9QdPDW8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQt
NGI2OGIxNWQzMDFhLzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQtNGI2OGIxNWQzMDFh
LzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplDuK6r6
db5w3vkgVquC2ZSYVGVkP+pTyzQbBxqmSjKYgtCQG8enZzbxUf+vjdKrXTpsm1Z9
2b0L7QXnErcb9Rjehk6gdBaxFdLUfW3OekxClh3YqsuF7Y5/Qu6ZZ1LHl6XfE7VL
HQt4U2wTuIjz9SnscSIL+Pr68+YkbkYuExf55vsoC23gxxgVgwwfzj3/WO3aJICx
Pp/xeLw0sbXOZXGlhm6rHxa6kbPYB2O7SZl8s+2g36hpDxNMeQk8PrQX0rZJ9h+q
HGubUe78/CvU5l+UTBDOZm89H0mhXnhzWQ71UKf6te4arPzL89jiRQvqLfyDmF5v
lwReXdqDUaFhiw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:40 2025 by rpki-client