Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: pES1Y1P15aImodBECge7X1C974Hqc79piPKO4Kr534g=
Subject key identifier: 1C:32:4B:7C:85:8B:19:21:79:50:8F:1E:15:81:A5:54:70:13:79:D1
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019A03A48CF230BE741533F6AA80B932E1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1199
Signing time: Mon 20 Oct 2025 22:01:46 +0000
Manifest this update: Mon 20 Oct 2025 22:01:46 +0000
Manifest next update: Tue 21 Oct 2025 22:01:46 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: aXljmM00e59KT2K6Lzll6OcGXLqGL5u1GFCjkbz+XeY=)
2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=)
3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=)
4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:8c:f2:30:be:74:15:33:f6:aa:80:b9:32:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Oct 20 22:01:46 2025 GMT
Not After : Oct 21 22:01:46 2025 GMT
Subject: CN=1c324b7c858b192179508f1e1581a554701379d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:31:54:33:2c:7d:c3:c2:d8:9a:92:29:69:
7b:2f:3d:ed:8b:e9:e9:f1:c2:95:2e:2d:7e:14:7b:
f8:78:1b:67:47:61:b0:b3:02:45:e2:dc:29:1f:a4:
c4:20:36:75:31:a0:6c:54:78:cf:34:8f:a3:5e:ef:
66:aa:01:cb:a4:b9:82:11:1f:d8:da:e3:af:de:a6:
f7:28:77:96:6b:f8:8f:f7:a9:a4:1c:98:52:ed:c1:
b1:99:5f:4e:bb:47:dd:5d:79:89:22:00:41:83:25:
d0:e2:e6:51:ee:35:ad:89:fc:26:9f:27:31:69:92:
09:88:95:e2:e3:af:bb:b7:45:0f:9c:dd:0c:f0:dc:
e4:01:5d:ea:16:93:45:bb:2f:70:86:e7:ab:09:fd:
86:37:e1:02:54:f6:41:b6:95:ce:22:6b:c0:1c:06:
44:5a:5f:9f:5b:54:91:28:3a:e8:55:e3:d8:25:0d:
83:40:31:44:2a:99:42:d4:93:7a:52:b8:90:b5:6a:
13:06:75:be:40:ae:ba:0f:d6:f7:1d:95:0a:78:2c:
a0:80:62:21:30:1c:80:21:e8:d7:0f:19:5b:6e:3f:
dd:d4:b0:92:67:40:85:b4:c0:df:eb:13:9c:6c:b4:
17:46:a1:b7:51:ad:97:35:ee:f9:9c:0d:63:8f:40:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:4B:7C:85:8B:19:21:79:50:8F:1E:15:81:A5:54:70:13:79:D1
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:65:c3:32:e0:92:5e:dd:13:af:78:b7:bf:a2:36:31:7c:af:
1e:30:06:2c:4b:66:64:e3:f3:1f:4a:ee:88:38:42:bb:b2:1e:
18:74:19:47:81:80:74:b8:e1:11:2c:85:83:a7:ce:00:95:bf:
99:ea:8b:56:8b:02:ac:2f:14:5c:4b:1c:12:e7:c1:bd:dc:7f:
d6:74:2e:55:0b:e4:97:a8:32:19:a8:61:54:a4:6e:ee:62:80:
06:3c:db:32:f0:2c:c7:92:d4:dc:9b:23:db:da:bf:f3:68:18:
81:c2:72:85:fc:d3:a0:f1:c2:c6:e0:93:00:51:e7:57:ed:ba:
0a:8e:89:e8:3e:7a:05:d9:67:d3:1b:63:6e:ba:f0:0c:49:3c:
33:f3:3c:a6:e5:98:29:ae:60:a4:ed:f3:70:d3:a1:0a:98:51:
8d:66:eb:5d:72:46:e5:8d:fc:44:24:d5:5e:ce:7a:8e:5f:d7:
69:2c:f4:46:d9:97:64:c2:9b:7e:0b:35:92:d9:8a:e1:be:b8:
10:8b:d1:ec:9d:e9:de:98:28:fe:fa:19:82:0c:3e:bc:7e:b4:
ca:8b:d5:ab:3e:fd:f7:3d:3b:fe:33:44:8c:d3:21:93:0c:7c:
43:3c:77:27:8e:84:8a:bb:cd:81:b7:2f:90:61:f0:0d:74:a0:
dd:4d:3b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDpIzyML50FTP2qoC5MuHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4
NzYwYWQwHhcNMjUxMDIwMjIwMTQ2WhcNMjUxMDIxMjIwMTQ2WjAzMTEwLwYDVQQD
EygxYzMyNGI3Yzg1OGIxOTIxNzk1MDhmMWUxNTgxYTU1NDcwMTM3OWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhUxVDMsfcPC2JqSKWl7Lz3ti+np
8cKVLi1+FHv4eBtnR2GwswJF4twpH6TEIDZ1MaBsVHjPNI+jXu9mqgHLpLmCER/Y
2uOv3qb3KHeWa/iP96mkHJhS7cGxmV9Ou0fdXXmJIgBBgyXQ4uZR7jWtifwmnycx
aZIJiJXi46+7t0UPnN0M8NzkAV3qFpNFuy9whuerCf2GN+ECVPZBtpXOImvAHAZE
Wl+fW1SRKDroVePYJQ2DQDFEKplC1JN6UriQtWoTBnW+QK66D9b3HZUKeCyggGIh
MByAIejXDxlbbj/d1LCSZ0CFtMDf6xOcbLQXRqG3Ua2XNe75nA1jj0CmzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwyS3yFixkheVCPHhWBpVRwE3nRMB8GA1UdIwQY
MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt
MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj
LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGXDMuCS
Xt0Tr3i3v6I2MXyvHjAGLEtmZOPzH0ruiDhCu7IeGHQZR4GAdLjhESyFg6fOAJW/
meqLVosCrC8UXEscEufBvdx/1nQuVQvkl6gyGahhVKRu7mKABjzbMvAsx5LU3Jsj
29q/82gYgcJyhfzToPHCxuCTAFHnV+26Co6J6D56Bdln0xtjbrrwDEk8M/M8puWY
Ka5gpO3zcNOhCphRjWbrXXJG5Y38RCTVXs56jl/XaSz0RtmXZMKbfgs1ktmK4b64
EIvR7J3p3pgo/voZggw+vH60yovVqz799z07/jNEjNMhkwx8Qzx3J46EirvNgbcv
kGHwDXSg3U07gQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:07:54 2025 by rpki-client