Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: EDaRHNoD5dfbnAfW0OdnI4ilg+OfxKKczvarFbCrlBU=
Subject key identifier: 35:A1:31:BD:40:48:43:0D:E0:BE:B9:1C:39:0E:29:E0:51:5F:52:69
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 0199FBEB668DC851F891C3A91E6BA7A5E18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0E1C
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: wWmbc0QalniElRnRh1hZOCRWOb8m7OiV6MGMLN1VMVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:66:8d:c8:51:f8:91:c3:a9:1e:6b:a7:a5:e1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=35a131bd4048430de0beb91c390e29e0515f5269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:21:28:40:20:53:3b:79:b5:28:ac:a9:07:91:
ab:6b:44:f4:12:1f:e6:c6:31:a0:7f:4f:e1:aa:91:
3c:e2:39:d5:f6:e6:77:cb:43:32:12:7c:d9:31:85:
5c:d4:15:1a:c8:0c:70:4a:aa:bb:bb:c7:c5:08:83:
ba:ec:d3:44:69:e0:d9:7e:44:23:84:5f:7f:43:c0:
20:5a:7a:11:da:70:b3:cd:60:1f:d2:35:0a:45:29:
b2:73:de:0b:4f:8f:67:89:9f:f9:d5:cb:18:04:17:
e8:e9:b1:fe:ed:09:2a:d0:ed:84:5a:12:f8:a2:89:
88:54:b0:08:99:57:d0:97:d1:9a:f8:17:71:52:f0:
db:ab:71:10:e2:9f:8f:7f:2c:cf:06:15:0f:ce:c6:
71:04:1a:e9:75:c8:54:2e:77:62:8d:87:9d:9e:f9:
96:8b:b1:4b:9c:47:da:95:5a:9f:55:50:8a:3e:12:
d2:c1:10:af:54:19:73:cb:9c:39:c7:07:6b:56:12:
55:6f:1f:dc:b1:f6:97:c8:c3:d5:71:e9:c9:f8:e4:
78:01:95:ca:72:88:3b:ad:71:91:ec:f0:07:89:ff:
4c:03:5d:28:3b:a2:f6:5d:ac:43:cb:ec:fa:17:10:
78:02:44:1d:42:4d:c7:81:2c:06:2d:ce:b8:05:9e:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:31:BD:40:48:43:0D:E0:BE:B9:1C:39:0E:29:E0:51:5F:52:69
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7a:14:0c:8d:d1:f8:f3:ed:6c:f2:fe:72:e8:7a:7a:25:84:
f9:d1:7b:4c:34:ff:c6:06:1d:a2:07:0e:b6:64:de:67:17:14:
d2:91:e0:0f:ba:3c:e3:a0:f6:57:bc:8f:e6:67:bf:2a:5b:f7:
d7:34:89:94:4e:02:19:96:a4:65:52:49:97:20:fc:a5:9e:5a:
4e:2d:fb:d1:b0:49:fa:8b:b8:73:8a:12:f5:16:62:12:26:10:
b4:b7:a8:09:c2:42:b0:bd:22:ef:68:e4:72:63:cb:04:07:8c:
55:32:b4:41:9f:55:6e:7a:0b:14:df:0d:d1:af:87:86:21:7e:
aa:fa:4b:2a:63:78:14:05:b8:eb:e4:25:54:0c:c6:5b:8d:49:
dd:59:83:5c:c3:50:95:99:94:99:2c:73:ec:78:1f:0d:8f:33:
be:eb:a5:8d:fe:10:f2:5c:de:24:a9:ed:da:80:75:12:15:4b:
b0:a5:08:ad:45:63:22:12:0a:2d:f7:db:e6:7a:a7:fe:33:71:
73:d6:94:07:20:89:da:9a:29:b7:4b:6c:4f:59:f0:47:48:7b:
6d:86:03:4f:95:80:f0:1d:cb:70:e1:b9:53:12:cb:6b:b4:c0:
62:0d:88:76:74:cb:85:75:f7:9a:30:30:2e:c8:dd:30:aa:07:
70:36:8f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn762aNyFH4kcOpHmunpeGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzA4NjhmMGMyYzIxODc2NWZhNmI1M2FiOWFmMDY1ZmYz
MzlmMDYwHhcNMjUxMDE5MTAwMjEyWhcNMjUxMDIwMTAwMjEyWjAzMTEwLwYDVQQD
EygzNWExMzFiZDQwNDg0MzBkZTBiZWI5MWMzOTBlMjllMDUxNWY1MjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yEoQCBTO3m1KKypB5Gra0T0Eh/m
xjGgf0/hqpE84jnV9uZ3y0MyEnzZMYVc1BUayAxwSqq7u8fFCIO67NNEaeDZfkQj
hF9/Q8AgWnoR2nCzzWAf0jUKRSmyc94LT49niZ/51csYBBfo6bH+7Qkq0O2EWhL4
oomIVLAImVfQl9Ga+BdxUvDbq3EQ4p+PfyzPBhUPzsZxBBrpdchULndijYednvmW
i7FLnEfalVqfVVCKPhLSwRCvVBlzy5w5xwdrVhJVbx/csfaXyMPVcenJ+OR4AZXK
cog7rXGR7PAHif9MA10oO6L2XaxDy+z6FxB4AkQdQk3HgSwGLc64BZ78lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWhMb1ASEMN4L65HDkOKeBRX1JpMB8GA1UdIwQY
MBaAFP9who8MLCGHZfprU6ua8GX/M58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMt
MDA3YzRlNTg1MjdlLzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMtMDA3YzRlNTg1Mjdl
LzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXoUDI3R
+PPtbPL+cuh6eiWE+dF7TDT/xgYdogcOtmTeZxcU0pHgD7o846D2V7yP5me/Klv3
1zSJlE4CGZakZVJJlyD8pZ5aTi370bBJ+ou4c4oS9RZiEiYQtLeoCcJCsL0i72jk
cmPLBAeMVTK0QZ9VbnoLFN8N0a+HhiF+qvpLKmN4FAW46+QlVAzGW41J3VmDXMNQ
lZmUmSxz7HgfDY8zvuuljf4Q8lzeJKnt2oB1EhVLsKUIrUVjIhIKLffb5nqn/jNx
c9aUByCJ2popt0tsT1nwR0h7bYYDT5WA8B3LcOG5UxLLa7TAYg2IdnTLhXX3mjAw
LsjdMKoHcDaP8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:21 2025 by rpki-client