Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: RJ0at4nYrDPhnwDt+YMbblFYPnhTO/UvPKeOJIDMC74=
Subject key identifier: 37:FF:ED:19:91:E4:43:B7:C2:BE:48:07:00:A3:51:F4:49:6A:C2:D0
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 0199FE46913C164C194AFB5EB61F9C108FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 140D
Signing time: Sun 19 Oct 2025 21:01:01 +0000
Manifest this update: Sun 19 Oct 2025 21:01:01 +0000
Manifest next update: Mon 20 Oct 2025 21:01:01 +0000
Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: dZEt8jSSWqyQNPy9QvsMFQAiPenTcs3hsBlq7nL80t0=)
2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:91:3c:16:4c:19:4a:fb:5e:b6:1f:9c:10:8f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Oct 19 21:01:01 2025 GMT
Not After : Oct 20 21:01:01 2025 GMT
Subject: CN=37ffed1991e443b7c2be480700a351f4496ac2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:d8:c1:ed:67:33:70:cb:08:6e:ce:e5:a7:
91:ab:09:8b:bd:2f:38:05:58:9c:83:ec:93:4a:53:
0d:52:64:e4:4a:5a:f3:3e:68:72:a1:3b:3b:ab:a4:
c4:a9:f4:85:31:3b:da:75:2b:00:9c:97:9a:83:ba:
71:a4:0d:aa:87:54:05:e0:b1:b5:84:49:67:f2:be:
3a:4e:78:a2:34:90:34:69:c3:bc:63:ea:20:2d:7c:
6e:23:7d:e4:85:96:16:47:40:ce:12:5b:19:75:da:
27:83:8a:3a:1f:65:04:bb:4e:2c:ea:d9:88:38:2c:
45:a2:1f:3a:2f:e9:86:ef:8e:51:e1:8f:01:d9:53:
be:ca:df:d4:25:2a:7e:3b:88:c9:a7:94:a2:28:74:
cc:23:e5:b9:95:70:03:c1:85:0a:ff:6b:3a:b3:2e:
ea:11:26:34:69:23:93:25:e9:c0:4f:24:f2:2f:32:
55:e7:31:69:e4:12:af:c4:54:f3:b5:73:4a:76:52:
0a:e6:d0:b7:7b:7a:9e:61:3c:05:85:40:32:73:2e:
29:23:57:3b:d7:b9:56:8f:66:b1:c3:fa:52:ae:ca:
f4:54:b4:54:6f:30:47:62:6d:5d:cb:69:e3:06:2d:
ef:26:b6:48:97:96:d4:75:db:34:54:57:81:af:19:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FF:ED:19:91:E4:43:B7:C2:BE:48:07:00:A3:51:F4:49:6A:C2:D0
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1f:71:29:40:f7:cb:c8:37:91:d9:80:5f:16:27:4e:fd:e3:
16:f0:8f:50:a3:72:3c:df:0c:8b:69:c5:f3:53:da:d3:52:a3:
df:81:e5:a9:8e:a0:7e:8b:1a:c6:74:28:9f:7e:ac:21:18:60:
77:dd:51:91:09:b3:82:e4:c2:7e:0e:59:fa:c9:82:c2:bf:14:
d4:0f:bf:3a:4b:68:74:6a:66:89:5e:8e:13:9c:c7:39:40:65:
41:7c:54:12:b1:a2:98:71:70:28:ea:33:1f:23:13:01:33:99:
36:ef:ea:81:fd:25:bc:fa:a2:8e:f2:e3:2c:73:cc:e8:13:cf:
e3:6e:28:68:c9:14:c5:58:3b:e3:9c:fd:33:62:f5:e2:ae:24:
0b:91:6d:2b:9b:d3:8d:36:6c:38:00:e0:ab:ee:f9:92:ac:40:
aa:a3:00:1f:67:e6:35:99:19:56:d9:89:ab:00:09:ff:8f:73:
aa:2d:94:fa:23:e4:be:f5:c5:5b:81:f9:6c:ea:cf:2a:ac:7f:
12:f1:5e:7e:dc:11:d2:bd:85:41:9b:43:5d:70:c7:b8:71:a3:
0e:0b:8e:42:bc:8c:3b:57:44:04:e2:ca:f8:42:29:e2:7b:32:
a1:a1:58:ef:ad:94:e1:c0:7f:50:7e:3b:25:99:79:61:56:12:
3a:aa:95:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RpE8FkwZSvteth+cEI/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2IzZGY2ZDc4Mzk5ZjAzMTgyODU1NmZjZDkwZWJmZGY0
ZDBkMmQwHhcNMjUxMDE5MjEwMTAxWhcNMjUxMDIwMjEwMTAxWjAzMTEwLwYDVQQD
EygzN2ZmZWQxOTkxZTQ0M2I3YzJiZTQ4MDcwMGEzNTFmNDQ5NmFjMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdHYwe1nM3DLCG7O5aeRqwmLvS84
BVicg+yTSlMNUmTkSlrzPmhyoTs7q6TEqfSFMTvadSsAnJeag7pxpA2qh1QF4LG1
hEln8r46TniiNJA0acO8Y+ogLXxuI33khZYWR0DOElsZddong4o6H2UEu04s6tmI
OCxFoh86L+mG745R4Y8B2VO+yt/UJSp+O4jJp5SiKHTMI+W5lXADwYUK/2s6sy7q
ESY0aSOTJenATyTyLzJV5zFp5BKvxFTztXNKdlIK5tC3e3qeYTwFhUAycy4pI1c7
17lWj2axw/pSrsr0VLRUbzBHYm1dy2njBi3vJrZIl5bUdds0VFeBrxl8dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf/7RmR5EO3wr5IBwCjUfRJasLQMB8GA1UdIwQY
MBaAFAN7PfbXg5nwMYKFVvzZDr/fTQ0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgt
YTQ3NWFlYmIwOGQ1LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgtYTQ3NWFlYmIwOGQ1
LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApR9xKUD3
y8g3kdmAXxYnTv3jFvCPUKNyPN8Mi2nF81Pa01Kj34HlqY6gfosaxnQon36sIRhg
d91RkQmzguTCfg5Z+smCwr8U1A+/OktodGpmiV6OE5zHOUBlQXxUErGimHFwKOoz
HyMTATOZNu/qgf0lvPqijvLjLHPM6BPP424oaMkUxVg745z9M2L14q4kC5FtK5vT
jTZsOADgq+75kqxAqqMAH2fmNZkZVtmJqwAJ/49zqi2U+iPkvvXFW4H5bOrPKqx/
EvFeftwR0r2FQZtDXXDHuHGjDguOQryMO1dEBOLK+EIp4nsyoaFY762U4cB/UH47
JZl5YVYSOqqVpA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:21 2025 by rpki-client