Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: 1hO2nJ4kMeBqzxc2La4bDzLpw0BuI00T1l/k9HiFeAg=
Subject key identifier: 1E:A0:B1:C6:60:AE:5B:6D:93:00:1E:6E:DC:44:2B:0B:BB:93:08:6F
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 0199FC21792678C9515C24B0F61D4D827032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 0491
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: Vephb5Pt3B3EXLg7EOPVAzOC8yA.roa (hash: wPf553d/HK8+hJAOoCPQVSLwr68fouqN6FsXjPzFiWo=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: PjLQjk4SVUPmIzmMwrna9OiK9BP61ufB8VprOv2X1Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:79:26:78:c9:51:5c:24:b0:f6:1d:4d:82:70:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=1ea0b1c660ae5b6d93001e6edc442b0bbb93086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:f2:af:9a:84:47:59:21:de:b2:41:cd:e7:
28:f8:d3:f1:2f:e3:08:95:2f:37:70:f5:ab:c7:20:
9c:7d:aa:aa:6b:3f:66:28:36:69:5a:6c:ed:ed:a5:
d5:a8:33:5d:e1:ef:67:49:34:e1:9b:2a:21:28:bb:
45:5f:91:ec:32:b7:5f:f7:78:82:1b:8a:1e:c2:ca:
06:b1:29:a1:2a:ca:ef:ef:98:a2:e9:4f:4f:0f:f7:
6d:49:53:63:fe:be:f8:7f:c6:ce:d4:d0:f2:2f:f1:
64:ad:b0:b8:38:45:61:07:7e:bb:f1:17:6f:cb:e2:
5e:fb:46:23:4d:45:6f:80:29:d9:d7:e4:22:09:a9:
cb:f3:8f:7a:85:38:ba:40:4d:cc:d0:ff:3d:89:6d:
52:4d:38:84:ce:90:f0:8e:b1:87:b1:d4:3c:f5:37:
b0:63:06:d6:43:a9:ae:d2:16:96:df:e0:26:29:ca:
c5:93:e0:65:be:96:bb:f3:ca:91:37:35:23:b3:3c:
15:39:10:00:49:42:84:89:0f:36:5f:0d:56:65:db:
69:be:99:67:e5:01:75:46:57:b2:1d:7d:78:4f:6c:
41:82:06:7a:f3:12:f7:81:0c:99:23:53:71:83:97:
3f:8e:f1:cc:5b:fa:57:8f:3b:ec:97:9e:a4:b8:9e:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:B1:C6:60:AE:5B:6D:93:00:1E:6E:DC:44:2B:0B:BB:93:08:6F
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:45:c0:83:c0:f5:1c:8c:a4:c7:b4:c4:00:9c:b0:dd:0a:ce:
d0:eb:dd:7c:87:8f:bc:25:79:b3:83:18:8a:62:ab:61:01:8f:
53:c5:dc:53:23:53:80:7a:cf:e4:e3:6b:40:18:98:76:0d:d8:
1e:73:c0:ab:6e:67:fe:c6:9f:e3:6f:5a:db:16:8a:0f:37:0d:
9b:f0:43:cb:0c:2f:c3:08:3c:f3:9b:f7:92:2f:6f:d8:36:40:
3f:1e:f5:2d:a9:a2:f7:64:c8:d5:9c:42:fb:75:d4:a9:7a:cb:
8f:e8:7a:5c:f8:60:8e:a7:0e:dd:dd:1e:9a:77:38:94:5a:50:
02:49:40:45:38:c8:77:20:4f:d7:f7:8c:0e:7c:5c:ed:d9:16:
6a:76:5a:07:1f:01:96:37:46:6a:24:66:fa:a8:77:05:07:21:
34:89:bf:e8:db:83:c8:03:fd:cb:9d:ed:94:87:26:50:86:7b:
98:71:93:ab:f9:c7:21:08:44:3a:5f:02:ed:a6:e7:60:33:f7:
f2:42:c9:4d:72:6b:f5:a5:ba:8a:61:cd:2b:31:07:b3:0f:06:
e2:19:24:e3:b6:20:c4:80:a4:5f:6b:c7:0d:58:57:5d:ae:4b:
aa:14:33:d6:4f:ba:47:d4:c5:56:f9:d7:71:da:63:7f:fb:10:
e4:bf:bc:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXkmeMlRXCSw9h1NgnAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh
NGE4ZmYwHhcNMjUxMDE5MTEwMTE2WhcNMjUxMDIwMTEwMTE2WjAzMTEwLwYDVQQD
EygxZWEwYjFjNjYwYWU1YjZkOTMwMDFlNmVkYzQ0MmIwYmJiOTMwODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTXyr5qER1kh3rJBzeco+NPxL+MI
lS83cPWrxyCcfaqqaz9mKDZpWmzt7aXVqDNd4e9nSTThmyohKLtFX5HsMrdf93iC
G4oewsoGsSmhKsrv75ii6U9PD/dtSVNj/r74f8bO1NDyL/FkrbC4OEVhB3678Rdv
y+Je+0YjTUVvgCnZ1+QiCanL8496hTi6QE3M0P89iW1STTiEzpDwjrGHsdQ89Tew
YwbWQ6mu0haW3+AmKcrFk+Blvpa788qRNzUjszwVORAASUKEiQ82Xw1WZdtpvpln
5QF1RleyHX14T2xBggZ68xL3gQyZI1Nxg5c/jvHMW/pXjzvsl56kuJ6kYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6gscZgrlttkwAebtxEKwu7kwhvMB8GA1UdIwQY
MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt
NDdhYzM4OWQzMjYxLzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx
LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0XAg8D1
HIykx7TEAJyw3QrO0OvdfIePvCV5s4MYimKrYQGPU8XcUyNTgHrP5ONrQBiYdg3Y
HnPAq25n/saf429a2xaKDzcNm/BDywwvwwg885v3ki9v2DZAPx71Lami92TI1ZxC
+3XUqXrLj+h6XPhgjqcO3d0emnc4lFpQAklARTjIdyBP1/eMDnxc7dkWanZaBx8B
ljdGaiRm+qh3BQchNIm/6NuDyAP9y53tlIcmUIZ7mHGTq/nHIQhEOl8C7abnYDP3
8kLJTXJr9aW6imHNKzEHsw8G4hkk47YgxICkX2vHDVhXXa5LqhQz1k+6R9TFVvnX
cdpjf/sQ5L+8zg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:49 2025 by rpki-client