Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: 3Gu3rgZunLkAJPOryocYxJbXR2nTvyL/3QTvxGaMdHk=
Subject key identifier: 29:2E:1A:F8:24:16:8A:0B:B6:3A:6E:93:C8:A3:D9:60:80:52:78:15
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 019A73383D39F6DAA4F00C9F2C90174F39CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 1021
Signing time: Tue 11 Nov 2025 14:00:56 +0000
Manifest this update: Tue 11 Nov 2025 14:00:56 +0000
Manifest next update: Wed 12 Nov 2025 14:00:56 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: 5iv2xIk+Sw66c2tlh4Lwj+fhnsAxcOCJN8ob/I72mys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:3d:39:f6:da:a4:f0:0c:9f:2c:90:17:4f:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Nov 11 14:00:56 2025 GMT
Not After : Nov 12 14:00:56 2025 GMT
Subject: CN=292e1af824168a0bb63a6e93c8a3d96080527815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:6d:12:dc:7c:fd:e4:da:35:7e:bd:a8:25:
de:36:4a:9b:d2:cb:c8:c5:fb:72:c9:0a:68:69:02:
75:26:66:2a:59:ff:70:44:db:64:16:6a:f3:73:9a:
1a:18:69:34:b6:4f:ca:61:a2:15:33:db:fd:84:15:
67:b8:b2:a4:f0:18:b0:58:fe:32:0e:de:79:91:3e:
97:60:bf:59:2e:ef:90:98:34:4e:8f:a7:29:41:10:
54:e9:65:0c:0f:37:a4:5b:dc:57:ec:5e:31:89:35:
8f:03:9f:b1:87:4b:27:9c:cd:e6:68:90:a0:95:bc:
d5:f4:2b:a7:16:3e:04:0c:f4:34:84:58:06:f8:37:
38:d6:e0:69:da:9d:32:de:7d:7f:4b:f0:91:6e:ac:
27:68:73:c6:42:c6:15:ea:d6:7f:0f:67:56:39:75:
9b:d6:20:5a:c1:07:b2:07:9a:d1:8a:8f:8a:bd:9c:
7b:0b:87:23:a5:54:20:7a:15:9d:82:f5:3d:f1:fb:
80:9c:b3:e8:bc:d2:2b:48:fc:3d:26:ad:4b:93:9f:
2f:d0:0d:3e:07:32:19:97:51:24:b3:e6:4f:07:df:
79:8b:e8:a2:e7:49:24:cb:47:9d:60:10:9b:9f:72:
37:0a:c7:c1:a7:f3:64:d3:3a:12:39:8e:c3:67:54:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2E:1A:F8:24:16:8A:0B:B6:3A:6E:93:C8:A3:D9:60:80:52:78:15
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9f:d8:99:d0:85:9f:1e:07:97:13:09:1f:02:87:6b:b2:a0:
26:4b:83:4f:cd:dc:b7:a9:0c:c9:bb:e2:35:ae:2f:28:00:eb:
3e:20:bb:63:ff:49:cf:ac:88:a0:6e:ff:e8:43:e9:58:8d:3a:
81:6a:f0:47:87:6e:74:1c:0a:89:be:e6:43:e6:cc:86:40:06:
3f:33:e3:01:2e:97:67:79:8e:e7:6e:63:b3:c2:be:45:55:3d:
e9:d4:02:9f:b5:d8:c4:11:50:5a:6a:de:d7:f0:89:d8:49:b2:
3c:cc:b6:3e:2a:7f:ba:63:92:18:81:7f:54:0e:dc:b5:9e:bb:
ab:08:f4:a1:7d:f4:d7:0c:47:88:8b:e2:5c:7d:45:10:53:08:
2e:fe:01:03:18:19:6a:28:f6:3d:7f:27:7c:bd:cd:a6:0f:14:
f6:ea:91:77:dd:c3:0c:de:a4:23:ab:d1:9f:69:bd:9d:9a:57:
38:05:e5:13:71:61:06:1d:72:f8:87:94:dd:d2:27:e3:6d:1b:
38:06:d8:84:1c:95:56:03:42:e0:4e:08:93:2e:bd:30:13:75:
52:1d:3e:e0:34:48:86:e1:df:be:d4:c2:9c:eb:9e:93:eb:d5:
07:8a:e5:d3:68:84:36:c3:61:26:d7:fd:dc:ec:07:25:73:7d:
2c:b3:a4:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOD059tqk8AyfLJAXTznPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx
NWZmYzgwHhcNMjUxMTExMTQwMDU2WhcNMjUxMTEyMTQwMDU2WjAzMTEwLwYDVQQD
EygyOTJlMWFmODI0MTY4YTBiYjYzYTZlOTNjOGEzZDk2MDgwNTI3ODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLZtEtx8/eTaNX69qCXeNkqb0svI
xftyyQpoaQJ1JmYqWf9wRNtkFmrzc5oaGGk0tk/KYaIVM9v9hBVnuLKk8BiwWP4y
Dt55kT6XYL9ZLu+QmDROj6cpQRBU6WUMDzekW9xX7F4xiTWPA5+xh0snnM3maJCg
lbzV9CunFj4EDPQ0hFgG+Dc41uBp2p0y3n1/S/CRbqwnaHPGQsYV6tZ/D2dWOXWb
1iBawQeyB5rRio+KvZx7C4cjpVQgehWdgvU98fuAnLPovNIrSPw9Jq1Lk58v0A0+
BzIZl1Eks+ZPB995i+ii50kky0edYBCbn3I3CsfBp/Nk0zoSOY7DZ1S9YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkuGvgkFooLtjpuk8ij2WCAUngVMB8GA1UdIwQY
MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt
NjY5NmRhZGI0NWViLzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi
LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZ/YmdCF
nx4HlxMJHwKHa7KgJkuDT83ct6kMybviNa4vKADrPiC7Y/9Jz6yIoG7/6EPpWI06
gWrwR4dudBwKib7mQ+bMhkAGPzPjAS6XZ3mO525js8K+RVU96dQCn7XYxBFQWmre
1/CJ2EmyPMy2Pip/umOSGIF/VA7ctZ67qwj0oX301wxHiIviXH1FEFMILv4BAxgZ
aij2PX8nfL3Npg8U9uqRd93DDN6kI6vRn2m9nZpXOAXlE3FhBh1y+IeU3dIn420b
OAbYhByVVgNC4E4Iky69MBN1Uh0+4DRIhuHfvtTCnOuek+vVB4rl02iENsNhJtf9
3OwHJXN9LLOkmg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:47 2025 by rpki-client