Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: rMCJD3Zo8aIo/7vFUJZMeWx9RH2SNU/f8fPa+Tn/ysU=
Subject key identifier: F1:AA:CA:65:56:83:91:2C:62:9F:C2:64:22:2B:4F:F0:24:BC:F1:11
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 0199FFC881F83E5717E636080A07E3FD32CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0E14
Signing time: Mon 20 Oct 2025 04:02:34 +0000
Manifest this update: Mon 20 Oct 2025 04:02:34 +0000
Manifest next update: Tue 21 Oct 2025 04:02:34 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: taN291mfNpsp+efitT8wxf15J87bLoyrz/okSdVXJ+E=)
2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:81:f8:3e:57:17:e6:36:08:0a:07:e3:fd:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Oct 20 04:02:34 2025 GMT
Not After : Oct 21 04:02:34 2025 GMT
Subject: CN=f1aaca655683912c629fc264222b4ff024bcf111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:d7:c4:af:c5:db:13:15:ac:67:a9:64:31:
65:48:3d:6a:4e:c9:17:99:0a:ce:66:fe:6b:25:fa:
9f:f5:d4:bd:56:00:c1:2e:90:be:7f:2e:42:9f:0c:
0e:83:42:f2:b5:68:5d:43:8b:fd:9d:29:cc:a6:d2:
36:f9:b2:b6:2a:5f:c6:7b:d1:73:ce:5b:c3:5a:ff:
a5:75:29:4a:73:0a:ea:48:f9:95:fe:e1:5f:b9:3c:
a2:0d:41:5b:5d:45:a2:70:2f:e3:18:9b:66:5e:d6:
06:ab:53:96:3a:21:9c:47:c6:67:ce:af:af:b2:b6:
74:82:0e:4e:8f:cd:a3:51:ba:48:a6:48:ea:74:bc:
81:f4:77:05:e0:f6:3e:0e:58:86:87:f8:9b:fe:32:
fc:bb:e2:80:83:aa:65:dc:87:a1:e9:22:9b:03:fd:
18:fb:31:7b:9f:9b:17:95:cc:10:b5:d6:ee:37:9a:
fc:75:2d:4c:72:4d:b3:42:c7:58:71:66:ce:29:c4:
67:34:e6:df:52:3f:b5:99:a1:f0:0b:0c:87:8d:7a:
db:2e:c7:ce:8c:e8:3b:62:d3:16:82:65:6d:e1:13:
bb:ad:c4:36:c5:8a:31:15:f8:ab:4f:b5:8e:85:51:
ef:d7:43:77:5d:c9:59:e9:c7:70:18:09:f3:98:8b:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:CA:65:56:83:91:2C:62:9F:C2:64:22:2B:4F:F0:24:BC:F1:11
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5a:53:6c:87:cb:1b:a4:99:c5:ac:8b:bc:5e:91:e9:e2:ef:
25:51:84:5a:fe:d6:ae:f9:03:d5:10:dd:13:91:87:a5:ee:a4:
48:ab:a3:f9:ad:f2:cb:1b:a7:5c:e4:a4:31:9e:e6:b3:e1:6d:
e6:28:fb:66:1c:3b:cb:aa:89:99:a8:92:21:dd:4b:a9:b5:8e:
7a:1e:59:2f:12:7d:e4:01:d8:0f:bb:5e:18:40:2b:df:cb:d8:
4e:95:b5:88:ac:ba:97:dc:c1:1f:34:45:ed:50:7d:19:c9:d1:
56:ac:cf:7a:4b:59:6c:f2:1a:5d:4d:34:4d:26:50:ae:f4:79:
84:6d:cd:ea:17:fa:66:4a:ad:92:cd:10:29:15:86:c4:00:e8:
3b:1a:24:90:29:38:1c:59:3b:fb:c1:b2:41:a8:ca:fe:f6:d3:
f6:d8:6c:2f:65:6d:89:55:ae:55:84:68:ef:f4:81:60:00:78:
ae:ae:98:85:d6:c6:e8:dc:15:f1:c2:e6:f1:c8:76:61:cc:9e:
f9:ca:8a:29:c5:2e:98:3b:30:5a:71:15:62:a5:cc:2c:72:7d:
73:8d:9d:40:d7:c6:54:0b:99:3c:06:bf:11:40:5c:0a:cc:7f:
2c:61:ff:4f:cd:89:cb:1c:a9:fe:8b:b3:f6:ff:ab:04:aa:3b:
4e:66:07:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yIH4PlcX5jYICgfj/TLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGUwNTlkNWViNzc2NDlmYmYxOWI4NGFmMzVmNjg5MWQ5
YzU4MDcwHhcNMjUxMDIwMDQwMjM0WhcNMjUxMDIxMDQwMjM0WjAzMTEwLwYDVQQD
EyhmMWFhY2E2NTU2ODM5MTJjNjI5ZmMyNjQyMjJiNGZmMDI0YmNmMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4zXxK/F2xMVrGepZDFlSD1qTskX
mQrOZv5rJfqf9dS9VgDBLpC+fy5CnwwOg0LytWhdQ4v9nSnMptI2+bK2Kl/Ge9Fz
zlvDWv+ldSlKcwrqSPmV/uFfuTyiDUFbXUWicC/jGJtmXtYGq1OWOiGcR8Znzq+v
srZ0gg5Oj82jUbpIpkjqdLyB9HcF4PY+DliGh/ib/jL8u+KAg6pl3Ieh6SKbA/0Y
+zF7n5sXlcwQtdbuN5r8dS1Mck2zQsdYcWbOKcRnNObfUj+1maHwCwyHjXrbLsfO
jOg7YtMWgmVt4RO7rcQ2xYoxFfirT7WOhVHv10N3XclZ6cdwGAnzmIu2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGqymVWg5EsYp/CZCIrT/AkvPERMB8GA1UdIwQY
MBaAFNyOBZ1et3ZJ+/GbhK819okdnFgHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDkt
NmVmN2UxMTk5Njk4LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDktNmVmN2UxMTk5Njk4
LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1pTbIfL
G6SZxayLvF6R6eLvJVGEWv7WrvkD1RDdE5GHpe6kSKuj+a3yyxunXOSkMZ7ms+Ft
5ij7Zhw7y6qJmaiSId1LqbWOeh5ZLxJ95AHYD7teGEAr38vYTpW1iKy6l9zBHzRF
7VB9GcnRVqzPektZbPIaXU00TSZQrvR5hG3N6hf6Zkqtks0QKRWGxADoOxokkCk4
HFk7+8GyQajK/vbT9thsL2VtiVWuVYRo7/SBYAB4rq6YhdbG6NwV8cLm8ch2Ycye
+cqKKcUumDswWnEVYqXMLHJ9c42dQNfGVAuZPAa/EUBcCsx/LGH/T82Jyxyp/ouz
9v+rBKo7TmYHLQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:09:49 2025 by rpki-client