Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: i+rUSifCK5sxxpmg4Iu9iYvs61AMJBk2nawq+UK/ASo=
Subject key identifier: 16:11:4C:FD:5C:5D:44:DB:FD:5F:C4:E0:A7:42:54:73:C6:D3:C7:63
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 0199FE469DF0E4FC2766E7B284334A9F9620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 1097
Signing time: Sun 19 Oct 2025 21:01:04 +0000
Manifest this update: Sun 19 Oct 2025 21:01:04 +0000
Manifest next update: Mon 20 Oct 2025 21:01:04 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: r8Lfg4jHSAav0a/eEYsnw5fvxjaSRwg0JAgzsijrYyc=)
2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:9d:f0:e4:fc:27:66:e7:b2:84:33:4a:9f:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Oct 19 21:01:04 2025 GMT
Not After : Oct 20 21:01:04 2025 GMT
Subject: CN=16114cfd5c5d44dbfd5fc4e0a7425473c6d3c763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:12:10:8e:48:d3:8e:ae:b4:3e:f8:4e:30:
dc:26:99:a9:34:d8:41:fa:ce:51:78:48:ea:a7:c3:
f9:9b:ce:36:18:d8:88:66:ef:a5:ed:31:c9:3a:48:
f1:a5:c2:fc:35:3e:05:c0:c2:ba:bf:ce:67:50:a9:
50:a7:b9:83:f9:05:21:66:40:86:b3:8e:60:1b:e4:
a9:ff:83:d1:81:d8:b8:8d:fb:64:80:48:f3:ae:4b:
75:24:e5:36:42:36:2f:3e:c1:d0:bf:61:f3:36:91:
bc:58:62:90:1b:4e:ed:38:49:3e:4a:a1:f6:68:27:
74:88:cc:7b:59:e3:43:eb:3c:7a:a4:7c:0b:df:a2:
4c:5d:95:fe:1b:76:42:a8:03:a7:28:31:39:d3:d4:
f2:87:4c:3e:8d:68:4c:9f:ac:17:4f:57:09:6b:bd:
6b:97:6d:88:3a:a4:0d:ec:26:da:38:82:fc:8a:98:
0f:d2:98:88:65:31:9e:74:7c:c8:f7:5f:55:91:f0:
bc:4a:ec:d3:4e:8d:9a:b9:f7:29:60:24:27:6f:56:
45:cb:ff:62:d8:82:b4:ea:3f:f1:3e:bc:b0:47:b4:
5f:0d:12:ba:49:12:df:40:50:e8:26:47:40:6e:cd:
1c:34:d1:d5:e4:1d:ed:55:17:6e:5f:df:05:df:f0:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:11:4C:FD:5C:5D:44:DB:FD:5F:C4:E0:A7:42:54:73:C6:D3:C7:63
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:d1:47:3b:95:8d:a4:4a:cd:b9:68:3c:cc:20:3c:b3:28:
a2:d6:29:e8:6a:a3:bb:e6:fd:1d:0f:91:22:89:a9:dd:4b:e8:
ae:c7:53:7a:af:c0:ed:15:5d:f8:33:d8:9d:c5:8f:97:f4:76:
b6:a1:e1:82:66:bf:5a:3c:9c:d3:be:24:8d:ca:c0:85:24:1d:
04:41:33:db:31:b5:c5:87:30:8a:bf:66:22:94:8a:3f:e7:02:
20:f3:db:25:cf:8a:30:dd:49:7d:f5:41:ab:25:d7:a8:a9:15:
99:66:13:bf:a9:22:1d:42:15:ee:0d:e8:f6:f5:6b:57:63:93:
d4:f8:8f:3a:9e:25:71:30:1c:9a:f1:17:ec:b3:82:ae:60:99:
67:b0:0d:02:f9:0d:32:d7:c8:36:a8:16:0e:15:74:6c:e4:c9:
66:17:7c:24:59:06:47:01:7e:e4:05:ce:4f:ec:97:f7:a9:b8:
4f:27:bc:0a:ed:3d:ae:33:5f:cc:7a:77:5c:0e:12:1c:a3:e1:
4d:e2:60:f8:34:e8:bb:f2:57:c4:b4:f5:c2:1f:13:cb:57:f6:
3f:ec:2a:b2:c1:bf:8a:c9:ed:03:ca:cd:c8:8e:b0:22:8f:e9:
56:52:1c:ca:da:25:fb:58:d7:be:c4:09:06:1c:ee:b7:bc:e8:
56:62:fd:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rp3w5PwnZueyhDNKn5YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl
NjE4NjAwHhcNMjUxMDE5MjEwMTA0WhcNMjUxMDIwMjEwMTA0WjAzMTEwLwYDVQQD
EygxNjExNGNmZDVjNWQ0NGRiZmQ1ZmM0ZTBhNzQyNTQ3M2M2ZDNjNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnYSEI5I046utD74TjDcJpmpNNhB
+s5ReEjqp8P5m842GNiIZu+l7THJOkjxpcL8NT4FwMK6v85nUKlQp7mD+QUhZkCG
s45gG+Sp/4PRgdi4jftkgEjzrkt1JOU2QjYvPsHQv2HzNpG8WGKQG07tOEk+SqH2
aCd0iMx7WeND6zx6pHwL36JMXZX+G3ZCqAOnKDE509Tyh0w+jWhMn6wXT1cJa71r
l22IOqQN7CbaOIL8ipgP0piIZTGedHzI919VkfC8SuzTTo2aufcpYCQnb1ZFy/9i
2IK06j/xPrywR7RfDRK6SRLfQFDoJkdAbs0cNNHV5B3tVRduX98F3/AtVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYRTP1cXUTb/V/E4KdCVHPG08djMB8GA1UdIwQY
MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt
ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2
LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7jRRzuV
jaRKzbloPMwgPLMootYp6Gqju+b9HQ+RIomp3UvorsdTeq/A7RVd+DPYncWPl/R2
tqHhgma/Wjyc074kjcrAhSQdBEEz2zG1xYcwir9mIpSKP+cCIPPbJc+KMN1JffVB
qyXXqKkVmWYTv6kiHUIV7g3o9vVrV2OT1PiPOp4lcTAcmvEX7LOCrmCZZ7ANAvkN
MtfINqgWDhV0bOTJZhd8JFkGRwF+5AXOT+yX96m4Tye8Cu09rjNfzHp3XA4SHKPh
TeJg+DTou/JXxLT1wh8Ty1f2P+wqssG/isntA8rNyI6wIo/pVlIcytol+1jXvsQJ
Bhzut7zoVmL9MA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:27 2025 by rpki-client