Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File: 3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier: beYqsk/HZ6jybuv/Yq1jJ6Fksd//DxOHa9S3Plwtry8=
Subject key identifier: D9:8A:92:7C:10:96:58:88:83:D8:5F:EB:AE:A5:EA:F5:5C:59:58:2D
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 0199FC2163DFEF029F4453068F402AAE0E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number: 16F3
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: XMah5FCBZsJpFNfirATIMnE4533YLRgeyu7s/alkpZA=)
2: A9hFHuB1KcT6sufWXb7Ip8uski0.roa (hash: il6x3CO5f44reEoXrVw6CoxKeHuPAxsUHCAYCbpYXXA=)
3: AvB8ANlawjDpzo5pEv-ozc274As.roa (hash: JAMHGl8FA3FqoIkdY9hmqgyAMGPXFfGq49FOeMqcpDU=)
4: P4Cb5oaFevIjC5s1wM4Yzi97PJE.roa (hash: 3Ogb5mf4rx+IYcLkaQHDj7kY0bKNooxxAV2yrkt6glM=)
5: yytkDg390wURQAs45MKB5G-EL9Y.roa (hash: Zh5YMYHrmE+MJNbhijbyZkT5VrFHROVfxZElaGb2ngI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:63:df:ef:02:9f:44:53:06:8f:40:2a:ae:0e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=d98a927c1096588883d85febaea5eaf55c59582d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:74:c0:e7:43:6b:b7:94:45:bb:02:cf:52:
2d:98:81:13:36:5c:45:90:ba:09:74:b5:46:44:d7:
c5:40:15:f4:6b:1d:21:55:cf:77:21:98:5d:99:96:
22:d2:9f:1b:cd:fb:f5:8d:dd:79:f7:48:a7:dd:40:
78:3e:37:fe:45:8d:50:b2:49:bd:7f:13:a3:14:1a:
87:e6:51:0f:6c:ce:46:2a:37:92:1b:d7:c0:03:b5:
e8:31:12:62:50:0c:7e:34:b1:22:b3:65:55:f3:28:
5c:95:3a:bd:34:da:7f:71:60:bb:c3:ab:54:64:d6:
0a:e6:73:29:54:45:26:95:ef:73:7a:8d:d5:d3:89:
e5:0d:fc:bb:b5:f4:31:98:23:21:60:34:04:7f:bb:
7a:e8:ef:30:d9:15:c9:5c:b2:5c:bc:42:ef:4a:ee:
9f:c2:69:98:63:fe:5f:2b:40:a8:09:d5:78:3b:09:
55:6a:14:aa:6e:2f:aa:2c:7f:23:42:5b:5e:03:d5:
cc:88:b5:8a:1e:0e:f2:28:ed:4d:97:38:03:28:06:
21:e0:b8:65:df:6b:85:b8:6f:0c:f3:71:5e:e9:5a:
57:69:af:da:12:23:5e:4f:2f:78:7d:90:9d:d7:4e:
55:48:c2:ab:60:49:fd:99:be:37:2a:00:a8:64:d3:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:92:7C:10:96:58:88:83:D8:5F:EB:AE:A5:EA:F5:5C:59:58:2D
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:67:9a:39:b7:7b:52:bb:1a:a1:f4:75:7d:cb:ae:2a:ff:6a:
98:7c:e1:ed:61:ea:88:93:3e:d7:45:88:78:19:d2:a9:6e:c4:
af:85:60:5d:41:c9:27:1c:f3:7e:39:d7:27:73:f9:be:7b:b6:
a5:f6:38:ef:0d:17:f2:f3:32:ef:2f:95:e9:be:a5:44:26:3c:
88:10:03:2b:1e:67:7d:31:1c:73:73:88:4a:b2:0d:2f:b4:eb:
af:f4:cb:8b:b9:db:4a:9f:3b:9d:4d:4b:fa:35:89:30:18:be:
78:e6:66:05:14:d6:86:e6:79:68:2f:87:e9:3d:65:8a:0e:87:
16:a2:4d:40:60:a3:c1:72:90:88:e9:49:f0:fb:04:bc:c8:cd:
dc:cb:80:2d:a5:cd:77:b1:c0:bf:99:bd:af:b5:e5:a0:d5:69:
df:d7:9c:e0:ca:84:49:d3:53:fb:cd:4e:df:47:77:5f:1a:ec:
d6:4b:06:7c:71:7c:8c:07:d7:98:7e:06:82:09:d4:ea:e1:af:
67:cd:12:f2:7a:75:ac:0a:f5:69:37:de:25:98:dd:d6:36:64:
01:01:4a:26:76:41:90:1d:17:cf:2e:92:8e:96:bc:96:8f:fb:
9c:c6:d8:1c:85:ef:e9:d4:79:ec:bc:9d:d8:03:93:7f:58:ca:
8b:75:96:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWPf7wKfRFMGj0Aqrg5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk
YzNjOTcwHhcNMjUxMDE5MTEwMTEwWhcNMjUxMDIwMTEwMTEwWjAzMTEwLwYDVQQD
EyhkOThhOTI3YzEwOTY1ODg4ODNkODVmZWJhZWE1ZWFmNTVjNTk1ODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9J0wOdDa7eURbsCz1ItmIETNlxF
kLoJdLVGRNfFQBX0ax0hVc93IZhdmZYi0p8bzfv1jd1590in3UB4Pjf+RY1Qskm9
fxOjFBqH5lEPbM5GKjeSG9fAA7XoMRJiUAx+NLEis2VV8yhclTq9NNp/cWC7w6tU
ZNYK5nMpVEUmle9zeo3V04nlDfy7tfQxmCMhYDQEf7t66O8w2RXJXLJcvELvSu6f
wmmYY/5fK0CoCdV4OwlVahSqbi+qLH8jQlteA9XMiLWKHg7yKO1NlzgDKAYh4Lhl
32uFuG8M83Fe6VpXaa/aEiNeTy94fZCd105VSMKrYEn9mb43KgCoZNMFnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmKknwQlliIg9hf666l6vVcWVgtMB8GA1UdIwQY
MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt
ZjhkNjVjOTgzNzQ0LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0
LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGeaObd7
UrsaofR1fcuuKv9qmHzh7WHqiJM+10WIeBnSqW7Er4VgXUHJJxzzfjnXJ3P5vnu2
pfY47w0X8vMy7y+V6b6lRCY8iBADKx5nfTEcc3OISrINL7Trr/TLi7nbSp87nU1L
+jWJMBi+eOZmBRTWhuZ5aC+H6T1lig6HFqJNQGCjwXKQiOlJ8PsEvMjN3MuALaXN
d7HAv5m9r7XloNVp39ec4MqESdNT+81O30d3Xxrs1ksGfHF8jAfXmH4GggnU6uGv
Z80S8np1rAr1aTfeJZjd1jZkAQFKJnZBkB0Xzy6Sjpa8lo/7nMbYHIXv6dR57Lyd
2AOTf1jKi3WWsg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:56 2025 by rpki-client