Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: lfuUVG3O3chHLGJpAcwFXKB5R8FOm8BIa6h9xthZYMQ=
Subject key identifier: CD:11:A2:70:7F:04:C4:18:32:99:EA:2B:29:00:AF:2C:DF:D4:D3:1F
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 0199FC21A76AAF3E6994E1DCD5E1F49A3E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: 1woC8ed5+xuKEGE/3eK7Tqx0L8XFyIXbsctNxF3VyFg=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a7:6a:af:3e:69:94:e1:dc:d5:e1:f4:9a:3e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=cd11a2707f04c4183299ea2b2900af2cdfd4d31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:75:3d:97:7d:83:d4:78:6b:2e:3c:96:86:
11:c7:16:46:3c:65:c3:8a:05:9a:11:39:5f:5f:14:
87:d5:02:9e:c5:61:9a:41:18:af:bb:ce:c1:69:8c:
eb:cd:87:c4:2f:d1:e7:7b:50:fd:1f:42:87:d2:f5:
5c:da:71:8b:6b:2c:c9:58:95:45:4c:47:d4:5f:cc:
ef:f9:3c:ac:f5:ce:88:a8:ae:f5:b0:e7:3f:c8:12:
c7:49:f5:cf:75:60:f1:8f:f2:d2:9b:5d:58:ba:71:
46:ed:1f:df:f0:34:c7:86:86:c4:47:47:a0:44:d7:
4b:0d:15:97:db:86:d4:fd:0f:a1:a0:e8:5c:6d:da:
56:37:22:18:be:1e:a3:e6:83:97:20:98:92:4e:7b:
09:eb:49:0d:85:76:e4:ce:d1:40:82:ba:16:bf:ab:
c3:05:08:a6:62:2d:8d:7b:ce:8c:12:b8:e2:ae:cc:
ff:69:9f:da:ff:be:72:42:68:ba:f0:44:b4:c3:38:
fa:97:7c:88:ab:37:7e:8d:1a:e1:62:00:b3:c3:e0:
38:86:07:55:33:c3:28:d2:ea:f7:3a:52:ff:77:5f:
62:0b:ab:bc:79:f8:e3:21:10:0a:fc:14:fc:e6:52:
34:98:86:a1:79:ba:36:b0:ce:7a:82:1a:8f:38:a0:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:11:A2:70:7F:04:C4:18:32:99:EA:2B:29:00:AF:2C:DF:D4:D3:1F
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:67:b0:9d:74:57:cf:c8:a6:ea:44:f7:2c:14:43:aa:81:d1:
78:03:1b:ea:99:2e:7e:1c:8a:24:09:b1:f8:57:01:7e:f5:4c:
5d:7f:5a:0f:6d:19:df:8a:2b:65:57:eb:b8:9a:af:26:bd:15:
a3:2b:b2:39:a7:2a:38:2b:67:5b:28:ab:89:73:5a:55:52:a9:
b9:bb:27:22:2e:d1:6f:d8:98:30:8d:d8:51:d0:a5:6c:59:50:
99:8c:86:0d:7f:e1:51:f8:86:31:88:77:6c:fb:66:d6:e2:2e:
03:61:78:9a:bb:ca:10:76:cd:5e:a4:7d:a7:a8:81:6a:8a:6b:
0d:6a:af:ed:03:d0:84:7d:90:da:e5:36:18:2a:62:1f:82:07:
5a:2e:ed:c8:e3:f0:a9:73:96:16:65:8d:09:b7:9e:c3:78:b6:
84:f2:0b:41:7b:aa:2d:df:a4:6c:42:35:a9:69:52:63:cd:8f:
41:37:c6:d0:3d:99:1e:56:5a:f5:d2:86:dd:91:fc:f3:87:25:
fe:2f:8a:12:22:58:d0:c4:9e:d4:d6:61:7e:40:d4:27:72:2f:
1b:21:fd:41:4a:e0:25:50:e9:bd:57:f0:b1:67:40:b0:57:45:
a4:e5:d9:ce:6e:0b:ab:c6:8c:46:09:a0:f8:53:29:d5:e0:58:
44:35:99:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Iadqrz5plOHc1eH0mj5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMGJhNGY1NmU2ZjAzNzcyNTI4NjAzN2FmYzNjMTRjMjkz
YjliODIwHhcNMjUxMDE5MTEwMTI3WhcNMjUxMDIwMTEwMTI3WjAzMTEwLwYDVQQD
EyhjZDExYTI3MDdmMDRjNDE4MzI5OWVhMmIyOTAwYWYyY2RmZDRkMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G91PZd9g9R4ay48loYRxxZGPGXD
igWaETlfXxSH1QKexWGaQRivu87BaYzrzYfEL9Hne1D9H0KH0vVc2nGLayzJWJVF
TEfUX8zv+Tys9c6IqK71sOc/yBLHSfXPdWDxj/LSm11YunFG7R/f8DTHhobER0eg
RNdLDRWX24bU/Q+hoOhcbdpWNyIYvh6j5oOXIJiSTnsJ60kNhXbkztFAgroWv6vD
BQimYi2Ne86MErjirsz/aZ/a/75yQmi68ES0wzj6l3yIqzd+jRrhYgCzw+A4hgdV
M8Mo0ur3OlL/d19iC6u8efjjIRAK/BT85lI0mIahebo2sM56ghqPOKDfcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0RonB/BMQYMpnqKykAryzf1NMfMB8GA1UdIwQY
MBaAFN8LpPVubwN3JShgN6/DwUwpO5uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTIt
MzZjNjc4OTAwZjc5LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTItMzZjNjc4OTAwZjc5
LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2ewnXRX
z8im6kT3LBRDqoHReAMb6pkufhyKJAmx+FcBfvVMXX9aD20Z34orZVfruJqvJr0V
oyuyOacqOCtnWyiriXNaVVKpubsnIi7Rb9iYMI3YUdClbFlQmYyGDX/hUfiGMYh3
bPtm1uIuA2F4mrvKEHbNXqR9p6iBaoprDWqv7QPQhH2Q2uU2GCpiH4IHWi7tyOPw
qXOWFmWNCbeew3i2hPILQXuqLd+kbEI1qWlSY82PQTfG0D2ZHlZa9dKG3ZH884cl
/i+KEiJY0MSe1NZhfkDUJ3IvGyH9QUrgJVDpvVfwsWdAsFdFpOXZzm4Lq8aMRgmg
+FMp1eBYRDWZbw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:52 2025 by rpki-client