Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: ZY0xdlqBaf7ozHvrvzcEzF0mwHZbaL2E/50YgidQiiE=
Subject key identifier: EE:BE:41:61:95:8B:6E:19:1A:77:DF:DA:91:9A:EC:62:04:E2:F1:7F
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 0199FC8F5CC3E5DE4D00EC0CCEE1A63EEA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: xUqtvkY7Aka3IGInz18OuEVOBQQunQPbTElNl8S5MMA=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5c:c3:e5:de:4d:00:ec:0c:ce:e1:a6:3e:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=eebe4161958b6e191a77dfda919aec6204e2f17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:1a:f8:98:5f:2e:86:2d:cf:97:a9:1c:7e:
cc:9f:07:9e:0d:09:ac:06:eb:e0:be:4e:d9:9b:56:
2c:24:e9:29:cf:1c:84:24:30:ef:16:71:99:02:7a:
7a:42:7b:2e:43:34:6a:f8:93:58:1f:ce:b0:7a:3c:
05:c4:f5:08:0b:f9:8b:5e:c1:2f:c8:bb:de:20:ad:
7d:81:b9:a8:46:65:b6:15:6f:08:28:b5:6b:98:65:
d7:7c:b9:60:f5:3c:13:bd:45:7e:21:53:41:ab:81:
53:00:86:1d:c7:ea:61:13:23:1f:91:35:01:4c:73:
28:ce:10:4e:e5:0c:e2:5d:b2:60:a1:f4:71:a2:d6:
e6:25:c9:16:e6:5c:98:6f:7a:eb:31:ac:e0:e9:f9:
66:10:3c:c4:42:2b:05:54:3f:8c:93:b3:03:5a:9d:
a8:a3:84:9b:ca:05:50:9a:7c:d9:86:11:33:df:e5:
3e:90:1d:0e:15:49:7d:7e:8d:92:fc:83:d4:13:35:
b4:b7:5d:d9:70:d4:71:cb:d3:7a:06:ba:ac:70:42:
18:63:6c:b9:ac:84:a5:81:db:6a:6f:03:61:70:1a:
9b:93:ee:09:fd:3f:8b:17:35:65:1b:00:25:2f:99:
ba:17:a8:7f:19:c2:e9:5c:90:e7:2e:be:1d:37:72:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BE:41:61:95:8B:6E:19:1A:77:DF:DA:91:9A:EC:62:04:E2:F1:7F
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3f:e8:1e:c8:e1:30:aa:79:00:ae:28:d1:d0:ec:5e:1e:e6:
fa:91:7d:61:c7:6a:e4:2d:f7:ab:3a:a7:a9:ea:2b:dc:aa:41:
6d:c3:52:5e:d0:1d:dd:c9:29:24:54:68:72:47:73:22:16:f1:
d6:d1:62:85:61:7a:ce:a1:42:a4:a5:f1:f5:b6:4d:03:67:b1:
88:14:64:58:6f:c9:35:7b:fa:8b:94:a6:df:6b:18:a0:b8:27:
f4:eb:9f:f0:65:04:03:13:1a:d0:49:24:e8:53:43:1a:9b:8c:
f5:53:85:4f:3e:5d:4b:20:7e:a5:6f:82:ec:f7:a6:ce:23:37:
36:e4:11:98:3f:a1:4e:74:de:71:c4:79:84:d9:8c:92:4d:ee:
0b:c9:02:90:e0:74:ea:7d:2f:72:88:fe:b7:7e:f8:00:95:4f:
74:8d:cc:7c:e8:b9:74:b2:d4:52:dc:e7:45:3d:1b:ec:c7:2a:
47:92:89:9a:cf:89:93:f4:9d:9e:6c:5b:f4:2d:ed:37:bb:34:
f3:b0:29:ca:3b:ec:01:1f:2a:a6:21:23:e1:01:30:51:31:94:
50:dd:ed:bf:00:ec:2c:df:b7:5e:6f:98:bf:06:66:6a:d5:d9:
f9:bf:4a:45:c6:49:e4:ee:f8:fb:94:52:1b:dc:13:a9:b5:92:
c7:0e:07:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1zD5d5NAOwMzuGmPuoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTEzOTIxOGM1MmU4ZmU3ZjdjMzE0YjY2MzllN2Y4N2U1
Njc5YzgwHhcNMjUxMDE5MTMwMTE3WhcNMjUxMDIwMTMwMTE3WjAzMTEwLwYDVQQD
EyhlZWJlNDE2MTk1OGI2ZTE5MWE3N2RmZGE5MTlhZWM2MjA0ZTJmMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDQa+JhfLoYtz5epHH7MnweeDQms
Buvgvk7Zm1YsJOkpzxyEJDDvFnGZAnp6QnsuQzRq+JNYH86wejwFxPUIC/mLXsEv
yLveIK19gbmoRmW2FW8IKLVrmGXXfLlg9TwTvUV+IVNBq4FTAIYdx+phEyMfkTUB
THMozhBO5QziXbJgofRxotbmJckW5lyYb3rrMazg6flmEDzEQisFVD+Mk7MDWp2o
o4SbygVQmnzZhhEz3+U+kB0OFUl9fo2S/IPUEzW0t13ZcNRxy9N6BrqscEIYY2y5
rISlgdtqbwNhcBqbk+4J/T+LFzVlGwAlL5m6F6h/GcLpXJDnLr4dN3KyvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6+QWGVi24ZGnff2pGa7GIE4vF/MB8GA1UdIwQY
MBaAFN4ROSGMUuj+f3wxS2Y55/h+VnnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUt
MzhhMzg1ZjM1ZTNiLzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUtMzhhMzg1ZjM1ZTNi
LzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT/oHsjh
MKp5AK4o0dDsXh7m+pF9Ycdq5C33qzqnqeor3KpBbcNSXtAd3ckpJFRockdzIhbx
1tFihWF6zqFCpKXx9bZNA2exiBRkWG/JNXv6i5Sm32sYoLgn9Ouf8GUEAxMa0Ekk
6FNDGpuM9VOFTz5dSyB+pW+C7PemziM3NuQRmD+hTnTeccR5hNmMkk3uC8kCkOB0
6n0vcoj+t374AJVPdI3MfOi5dLLUUtznRT0b7McqR5KJms+Jk/Sdnmxb9C3tN7s0
87ApyjvsAR8qpiEj4QEwUTGUUN3tvwDsLN+3Xm+YvwZmatXZ+b9KRcZJ5O74+5RS
G9wTqbWSxw4HzQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:01 2025 by rpki-client