Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier: 8L4HzoshdCCDB6U7+Ylgj6UHZP2xeUGUoGH0CEMy2fo=
Subject key identifier: 76:4C:B9:9D:D7:EC:2A:DB:09:16:39:F0:20:84:A2:D9:51:5F:47:F3
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial: 019A03A39280D607F7728A1F1D5B7878C869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number: 019A
Signing time: Mon 20 Oct 2025 22:00:42 +0000
Manifest this update: Mon 20 Oct 2025 22:00:42 +0000
Manifest next update: Tue 21 Oct 2025 22:00:42 +0000
Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: m3yK8DXLDvm0gcisxFDtpLgfas6Q3axZ/DiZMW5d/0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:92:80:d6:07:f7:72:8a:1f:1d:5b:78:78:c8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Validity
Not Before: Oct 20 22:00:42 2025 GMT
Not After : Oct 21 22:00:42 2025 GMT
Subject: CN=764cb99dd7ec2adb091639f02084a2d9515f47f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:e7:d3:82:03:b0:81:6f:11:6d:14:e5:18:
c9:9a:44:5a:d2:10:29:09:29:23:7b:15:82:65:60:
f3:ec:26:d3:eb:e4:35:e6:59:51:0c:01:68:60:9a:
4d:3d:b4:2e:fa:06:2c:f4:39:e1:b2:75:df:8b:66:
c5:d2:a2:bf:da:25:ae:e0:ea:06:67:01:51:e3:9b:
d4:2a:8d:e5:48:1e:c5:9b:fd:a5:eb:5b:77:f8:38:
78:3c:75:b0:a9:de:7f:3e:d3:c3:3c:1a:3a:a8:b0:
d4:67:38:40:00:e8:bc:b7:2b:8d:2e:c8:63:26:84:
9d:c7:f1:ac:19:fd:8f:bb:1d:3b:94:7b:ea:11:94:
48:d2:3a:0c:dc:3b:11:b3:96:b9:80:59:7e:3a:d3:
95:fc:50:4b:2e:7e:64:02:bd:e3:bd:5f:40:5c:49:
f3:34:36:a2:ea:75:d7:89:b8:0f:44:9c:d2:a5:d2:
dc:7e:b1:60:de:80:1d:f8:0e:55:c4:4b:cc:a0:30:
2f:ab:df:2f:22:00:e0:5a:a2:f6:21:d3:a0:d5:7f:
aa:12:f2:32:f2:b7:e5:a7:b5:97:79:cf:42:ba:46:
73:ef:25:38:7e:ea:ba:f8:ca:1a:73:25:0c:e5:4f:
5f:1d:ba:5b:a3:4f:1c:0f:d0:95:86:ec:fb:0b:0d:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:B9:9D:D7:EC:2A:DB:09:16:39:F0:20:84:A2:D9:51:5F:47:F3
X509v3 Authority Key Identifier:
keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f0:ec:6f:25:4e:39:2b:b8:d4:0e:e0:3d:10:8c:3c:22:4f:
d6:73:ca:ae:d0:7c:b9:4a:25:8f:ed:8e:7b:f7:7a:26:92:df:
66:62:ed:d3:b3:ea:f3:1c:34:28:ff:1e:df:c3:c0:4a:62:3a:
86:ff:73:98:2f:f6:b0:60:9e:c6:e7:9a:79:51:99:99:99:f1:
fc:5c:f7:62:0a:b0:20:fa:f7:f5:73:4c:0e:23:4d:8d:11:b7:
2e:92:6f:4a:38:96:b4:4f:9a:41:63:eb:c9:b3:9f:fb:e2:e1:
02:09:81:57:b4:da:23:cb:83:07:fa:39:8c:2c:94:68:25:af:
29:9f:b2:8a:eb:ed:71:cb:27:bd:b7:7c:fc:ff:c8:e2:9b:e5:
82:78:5b:a5:ac:55:b6:40:aa:46:50:d7:ed:a1:b0:bb:5c:3d:
d6:a9:66:bb:f7:5d:47:04:f5:7f:fb:bd:78:b5:57:9b:48:f2:
49:d1:5e:c9:8e:b3:38:d9:d3:6f:36:c7:ca:55:ac:e3:06:3e:
65:e5:0a:1c:f2:92:a5:5a:38:39:c1:cb:c9:73:b1:14:d2:50:
1d:f1:6e:ca:69:39:f9:cd:53:97:ff:3b:6c:3d:71:1a:59:6a:
b0:53:13:be:48:ee:c2:1e:f2:1c:aa:2e:bb:96:db:0a:6f:8b:
df:f2:4a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDo5KA1gf3coofHVt4eMhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZWEzZTFhY2E2YTVjOWRjM2Y4OGMzODI3NmYwOTFlYmFi
Y2UwYTQwHhcNMjUxMDIwMjIwMDQyWhcNMjUxMDIxMjIwMDQyWjAzMTEwLwYDVQQD
Eyg3NjRjYjk5ZGQ3ZWMyYWRiMDkxNjM5ZjAyMDg0YTJkOTUxNWY0N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLTn04IDsIFvEW0U5RjJmkRa0hAp
CSkjexWCZWDz7CbT6+Q15llRDAFoYJpNPbQu+gYs9DnhsnXfi2bF0qK/2iWu4OoG
ZwFR45vUKo3lSB7Fm/2l61t3+Dh4PHWwqd5/PtPDPBo6qLDUZzhAAOi8tyuNLshj
JoSdx/GsGf2Pux07lHvqEZRI0joM3DsRs5a5gFl+OtOV/FBLLn5kAr3jvV9AXEnz
NDai6nXXibgPRJzSpdLcfrFg3oAd+A5VxEvMoDAvq98vIgDgWqL2IdOg1X+qEvIy
8rflp7WXec9CukZz7yU4fuq6+MoacyUM5U9fHbpbo08cD9CVhuz7Cw267QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZMuZ3X7CrbCRY58CCEotlRX0fzMB8GA1UdIwQY
MBaAFN7qPhrKalydw/iMOCdvCR66vOCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZjVlNzQtYmQ1ZS00Njc5LTg1MmIt
N2JlZjBiNGNjMjVlLzEvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZjVlNzQtYmQ1ZS00Njc5LTg1MmItN2JlZjBiNGNjMjVl
LzEvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvDsbyVO
OSu41A7gPRCMPCJP1nPKrtB8uUolj+2Oe/d6JpLfZmLt07Pq8xw0KP8e38PASmI6
hv9zmC/2sGCexueaeVGZmZnx/Fz3YgqwIPr39XNMDiNNjRG3LpJvSjiWtE+aQWPr
ybOf++LhAgmBV7TaI8uDB/o5jCyUaCWvKZ+yiuvtccsnvbd8/P/I4pvlgnhbpaxV
tkCqRlDX7aGwu1w91qlmu/ddRwT1f/u9eLVXm0jySdFeyY6zONnTbzbHylWs4wY+
ZeUKHPKSpVo4OcHLyXOxFNJQHfFuymk5+c1Tl/87bD1xGllqsFMTvkjuwh7yHKou
u5bbCm+L3/JKEw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:00:31 2025 by rpki-client