Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: JrI94Thu36n1kBoL/k/MNW+KsjUavDAJaQkr+SaBhZU=
Subject key identifier: 7D:5F:B6:F6:19:68:16:61:DE:2E:D6:11:6F:10:F4:B7:D7:96:C3:83
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 0199FEB4EB4E0EFD06D451FF7D24A5AF56C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 05FB
Signing time: Sun 19 Oct 2025 23:01:33 +0000
Manifest this update: Sun 19 Oct 2025 23:01:33 +0000
Manifest next update: Mon 20 Oct 2025 23:01:33 +0000
Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: /d3t2dGM8y26Jg+x2EZLrNx88d4OLEGybFriqHrkGc0=)
2: r0UegqSm-Osf5dt7xIToVoSc8i8.roa (hash: iiKp30ve0a7AciqqMBvmQPAjij1PEXVHVGDlOgok+18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:eb:4e:0e:fd:06:d4:51:ff:7d:24:a5:af:56:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Oct 19 23:01:33 2025 GMT
Not After : Oct 20 23:01:33 2025 GMT
Subject: CN=7d5fb6f619681661de2ed6116f10f4b7d796c383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:a6:c1:6c:ef:32:ad:c3:8f:d5:bb:49:df:
4c:b0:40:d3:fd:be:cf:12:11:0c:3c:a9:ee:46:df:
b2:35:f5:e9:23:26:9a:85:de:00:1a:22:ca:6b:cb:
3c:ea:ca:1a:8a:02:fd:19:77:0b:ee:db:ae:a0:f3:
4d:7e:fa:f5:13:57:fd:e3:a4:dd:d0:bf:5d:c6:12:
1b:d6:76:54:c4:62:1e:db:d9:5f:7e:a1:52:d6:c8:
d4:37:80:e7:1f:fb:89:1b:17:4b:f2:52:70:5a:74:
13:b5:a2:02:7f:f4:ad:59:32:2c:07:8c:40:4e:14:
41:b4:be:11:8b:8d:55:05:ff:5a:96:52:4a:25:17:
c8:e0:35:2c:b6:86:e1:a2:5d:ec:6e:43:6a:50:50:
bf:49:f4:33:1d:1c:c6:a7:71:49:bd:3b:88:97:df:
46:19:af:09:72:39:47:c9:f0:93:79:51:52:f3:49:
5d:54:4b:df:fa:36:6b:24:97:38:6d:29:9c:32:c3:
c9:15:95:95:4f:b9:4b:7a:48:37:e5:df:5c:4d:40:
6f:cb:08:57:d4:8e:21:3f:55:48:ee:39:6d:8b:5a:
45:f5:9a:f2:ef:83:b5:fb:08:5b:44:1d:f9:9a:de:
65:13:4b:fa:df:fc:9b:80:af:d0:c8:1b:d8:09:93:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:B6:F6:19:68:16:61:DE:2E:D6:11:6F:10:F4:B7:D7:96:C3:83
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cf:3f:14:35:95:eb:12:0f:5a:32:0a:f0:77:7c:e4:b4:65:
a3:59:c6:06:4e:5b:1b:9c:bb:85:8f:4b:3f:de:4c:c0:0c:6e:
29:ba:9d:a5:1b:25:1b:e0:1f:3e:9b:d5:48:a3:d6:bd:fc:ec:
02:d3:39:7f:2e:33:3a:2a:06:d7:8c:69:7d:cc:08:56:11:e6:
ff:53:7e:79:33:8a:4e:0d:27:ab:b0:30:8c:0a:16:16:6d:13:
ee:52:0d:00:cc:6d:fd:ba:9a:2f:0c:a6:bd:95:a1:30:5f:29:
85:28:90:eb:75:cc:a3:68:9c:51:11:5b:2b:d3:0a:ce:98:0d:
64:66:01:6e:76:65:8b:c0:99:91:0a:b0:57:41:bd:c1:2a:fc:
c2:a4:f1:4f:6a:01:9a:c9:94:84:ed:91:4a:c1:6e:53:06:b2:
bb:90:91:02:69:ec:ad:30:b4:b3:69:7c:6d:50:5c:a6:94:66:
97:ae:ab:e4:26:28:02:c2:8d:bb:a5:c0:c3:52:a8:6b:5d:f0:
db:b4:f3:d8:82:94:3e:89:66:e2:a1:b8:a5:6e:d8:f3:96:da:
91:bc:2c:e6:09:6d:f7:94:f5:09:66:85:5e:e3:37:e2:bf:0d:
de:f7:34:d8:df:35:40:65:f3:5c:17:78:14:e7:7e:de:11:06:
93:87:4c:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tOtODv0G1FH/fSSlr1bDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5
OGUzYjUwHhcNMjUxMDE5MjMwMTMzWhcNMjUxMDIwMjMwMTMzWjAzMTEwLwYDVQQD
Eyg3ZDVmYjZmNjE5NjgxNjYxZGUyZWQ2MTE2ZjEwZjRiN2Q3OTZjMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgGmwWzvMq3Dj9W7Sd9MsEDT/b7P
EhEMPKnuRt+yNfXpIyaahd4AGiLKa8s86soaigL9GXcL7tuuoPNNfvr1E1f946Td
0L9dxhIb1nZUxGIe29lffqFS1sjUN4DnH/uJGxdL8lJwWnQTtaICf/StWTIsB4xA
ThRBtL4Ri41VBf9allJKJRfI4DUstobhol3sbkNqUFC/SfQzHRzGp3FJvTuIl99G
Ga8JcjlHyfCTeVFS80ldVEvf+jZrJJc4bSmcMsPJFZWVT7lLekg35d9cTUBvywhX
1I4hP1VI7jlti1pF9Zry74O1+whbRB35mt5lE0v63/ybgK/QyBvYCZMyMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1ftvYZaBZh3i7WEW8Q9LfXlsODMB8GA1UdIwQY
MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt
NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm
LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPs8/FDWV
6xIPWjIK8Hd85LRlo1nGBk5bG5y7hY9LP95MwAxuKbqdpRslG+AfPpvVSKPWvfzs
AtM5fy4zOioG14xpfcwIVhHm/1N+eTOKTg0nq7AwjAoWFm0T7lINAMxt/bqaLwym
vZWhMF8phSiQ63XMo2icURFbK9MKzpgNZGYBbnZli8CZkQqwV0G9wSr8wqTxT2oB
msmUhO2RSsFuUwayu5CRAmnsrTC0s2l8bVBcppRml66r5CYoAsKNu6XAw1Koa13w
27Tz2IKUPolm4qG4pW7Y85bakbws5glt95T1CWaFXuM34r8N3vc02N81QGXzXBd4
FOd+3hEGk4dM9Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:36 2025 by rpki-client