Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: aozWIqbpDnJtlJGUyNcmXwMZDIePZTq8ngEvk+deD98=
Subject key identifier: 45:2A:88:71:9A:B6:6C:52:95:08:07:A2:59:67:B0:D8:D3:54:1A:96
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 0199FEEBF717990F2B6E848BF0F103C7456B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 043C
Signing time: Mon 20 Oct 2025 00:01:41 +0000
Manifest this update: Mon 20 Oct 2025 00:01:41 +0000
Manifest next update: Tue 21 Oct 2025 00:01:41 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: eJu1chGPHIZNdEh/p9yeRwfPt9BBf7lZjRqj/+qcKrw=)
2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f7:17:99:0f:2b:6e:84:8b:f0:f1:03:c7:45:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Oct 20 00:01:41 2025 GMT
Not After : Oct 21 00:01:41 2025 GMT
Subject: CN=452a88719ab66c52950807a25967b0d8d3541a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:1b:62:2a:1c:af:ac:6e:87:6f:1f:86:6d:
e0:2b:e4:75:38:4d:77:a8:c8:4e:39:f9:41:33:44:
9a:d7:b7:d4:8a:cf:e5:1d:41:ee:a7:c0:85:9a:01:
64:20:a6:9a:8b:e4:f3:d1:19:6c:4d:a2:1b:db:da:
0c:2d:16:95:a9:ea:df:f6:9a:5d:a6:4b:1d:db:7a:
fc:bc:c7:6f:8d:61:77:52:39:fb:43:8a:2f:4a:11:
35:9d:fe:d9:b4:b6:92:06:cb:d5:24:00:d8:b4:2b:
4f:18:69:d8:68:1b:8b:49:85:ce:a7:a9:87:f1:57:
da:0a:43:c8:fc:05:6e:7b:56:e2:63:7f:16:79:92:
cd:39:0e:f2:58:7d:12:c9:83:9b:58:c2:26:91:40:
8e:3d:8c:1b:0b:6a:35:6a:57:36:41:cb:ec:de:1e:
2b:bc:3c:b5:db:7b:51:1f:1b:cc:8b:fb:44:26:0a:
f3:e5:d1:46:c2:cb:1d:04:c8:ec:28:22:de:12:35:
07:e8:f3:70:9f:0f:da:43:9a:42:88:ee:86:46:95:
20:7b:df:64:09:32:ed:73:0e:26:52:74:29:36:0e:
91:80:6f:70:31:93:6f:1f:a5:bb:33:97:3c:53:e4:
ff:b1:a9:b5:ba:0b:5d:8c:de:c8:26:ce:d1:17:90:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:88:71:9A:B6:6C:52:95:08:07:A2:59:67:B0:D8:D3:54:1A:96
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:92:df:e2:63:20:44:6d:11:d5:67:37:2a:01:5c:2e:2f:82:
f8:90:95:f4:86:85:3c:14:4f:21:62:e7:8f:7a:ab:4a:eb:51:
58:13:34:bf:f7:0a:ae:96:91:7b:df:5c:2e:d8:29:a1:99:2e:
e7:5b:72:28:ce:90:f4:14:6c:72:c5:f3:8b:c9:83:f2:9d:5b:
d9:78:84:44:67:8d:4c:cc:c9:6a:40:59:21:62:ed:77:49:31:
f8:d6:fb:db:fe:2d:64:b9:ba:c3:91:76:fe:12:f6:e1:55:06:
c7:74:a4:98:63:7e:17:94:36:87:00:3b:f7:55:b0:b5:9a:13:
ab:bc:c7:72:c6:80:91:1d:76:fc:59:fa:6b:c7:94:12:69:9c:
34:9e:d6:e7:b6:0c:89:79:2e:47:6b:5a:31:7f:7f:b8:46:95:
d3:26:a7:9a:6a:42:66:f7:d3:8b:73:6a:f1:f1:cc:94:2d:78:
23:be:a3:37:7b:9b:6d:dd:a8:9b:53:08:d9:2e:15:9e:12:b7:
af:df:24:6f:9a:fa:68:13:85:4a:bd:f8:6f:e2:30:02:d8:8a:
a9:2e:ce:f4:32:16:ae:a4:9f:ae:95:a4:62:d9:c0:b0:be:f5:
b1:de:26:a8:98:fb:af:b0:5f:67:50:d5:b3:ef:82:af:09:d3:
af:4c:fa:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6/cXmQ8rboSL8PEDx0VrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWIyYjBlMWNlNzgzZWI3YTJlMzkzZmZkZDEyOGM2YTlj
MDIyMzkwHhcNMjUxMDIwMDAwMTQxWhcNMjUxMDIxMDAwMTQxWjAzMTEwLwYDVQQD
Eyg0NTJhODg3MTlhYjY2YzUyOTUwODA3YTI1OTY3YjBkOGQzNTQxYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X8bYiocr6xuh28fhm3gK+R1OE13
qMhOOflBM0Sa17fUis/lHUHup8CFmgFkIKaai+Tz0RlsTaIb29oMLRaVqerf9ppd
pksd23r8vMdvjWF3Ujn7Q4ovShE1nf7ZtLaSBsvVJADYtCtPGGnYaBuLSYXOp6mH
8VfaCkPI/AVue1biY38WeZLNOQ7yWH0SyYObWMImkUCOPYwbC2o1alc2Qcvs3h4r
vDy123tRHxvMi/tEJgrz5dFGwssdBMjsKCLeEjUH6PNwnw/aQ5pCiO6GRpUge99k
CTLtcw4mUnQpNg6RgG9wMZNvH6W7M5c8U+T/sam1ugtdjN7IJs7RF5C5OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUqiHGatmxSlQgHollnsNjTVBqWMB8GA1UdIwQY
MBaAFNwbKw4c54Prei45P/3RKMapwCI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUt
YWRmZTdlNzNkZmVlLzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUtYWRmZTdlNzNkZmVl
LzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpLf4mMg
RG0R1Wc3KgFcLi+C+JCV9IaFPBRPIWLnj3qrSutRWBM0v/cKrpaRe99cLtgpoZku
51tyKM6Q9BRscsXzi8mD8p1b2XiERGeNTMzJakBZIWLtd0kx+Nb72/4tZLm6w5F2
/hL24VUGx3SkmGN+F5Q2hwA791WwtZoTq7zHcsaAkR12/Fn6a8eUEmmcNJ7W57YM
iXkuR2taMX9/uEaV0yanmmpCZvfTi3Nq8fHMlC14I76jN3ubbd2om1MI2S4VnhK3
r98kb5r6aBOFSr34b+IwAtiKqS7O9DIWrqSfrpWkYtnAsL71sd4mqJj7r7BfZ1DV
s++CrwnTr0z6NA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:11 2025 by rpki-client