Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: /mWhVrvEG5+M7emydcgXtLdknUMq5FgvdUsgtW2lsIk=
Subject key identifier: C0:AE:C9:72:5A:C2:4B:F9:6D:8A:A7:E9:F1:F1:0B:88:15:83:D4:52
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019A711333FF364DA3C0459F63122EF5B59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 082D
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: RfAXHM+oIuLPnj2JjvKjtUX3mfnFenu5SjtB3kNl5uM=)
2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:33:ff:36:4d:a3:c0:45:9f:63:12:2e:f5:b5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=c0aec9725ac24bf96d8aa7e9f1f10b881583d452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:17:55:a1:f9:0d:a9:25:e9:96:7d:1e:ef:
a3:85:42:85:8c:93:36:32:6a:40:c6:ac:e7:d1:ce:
42:db:86:2c:6e:d1:4b:97:06:34:97:dc:28:f8:9d:
ba:c2:4c:2b:62:63:f8:5e:19:fa:18:53:a5:a1:9b:
de:db:ca:8f:23:50:ed:eb:e0:7b:ad:3f:3d:4e:54:
4d:d5:5f:4f:a3:bc:2f:e8:aa:03:33:74:56:dd:7a:
2e:f0:0f:64:da:e0:07:19:55:ae:3c:80:3e:31:1e:
f5:ae:d1:b3:91:70:ae:3b:07:57:58:1c:60:07:6b:
bc:e6:f3:17:43:69:ab:93:7f:e2:3e:77:bd:19:a7:
66:41:df:5c:69:d3:98:2a:3b:0c:15:cc:1c:5d:01:
a1:5b:c2:31:7c:15:cd:1c:76:78:fa:06:04:e0:9b:
da:e5:82:76:61:21:d9:33:b7:ed:56:51:24:ac:57:
82:60:12:10:e4:b7:0f:56:58:e5:8a:bf:69:50:f9:
c3:d2:59:63:f0:06:c4:f6:05:c3:88:33:46:83:10:
38:d0:5e:a4:de:1e:0f:4f:5b:6a:31:26:e6:b0:e0:
d9:36:5c:ba:66:23:f7:75:ce:c8:94:ec:89:86:f2:
5c:0b:ca:fd:14:e6:11:35:1f:12:74:d2:5c:51:d7:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:C9:72:5A:C2:4B:F9:6D:8A:A7:E9:F1:F1:0B:88:15:83:D4:52
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:c1:a0:10:f7:74:59:76:f3:99:3a:13:83:70:7d:67:1e:
47:8e:e9:11:b6:b0:c2:ac:56:83:cc:ff:dc:1f:d7:6c:01:39:
f9:d7:5c:9a:14:47:e4:53:48:5f:1b:eb:2f:43:37:12:62:33:
97:d3:79:3b:d7:1a:29:19:8a:8f:00:2c:81:52:a1:d3:fa:79:
7b:19:42:49:cc:0b:e5:12:d6:73:04:3d:f1:dc:e9:16:c7:29:
9b:4f:ca:7b:ef:02:8e:d8:7f:59:26:bc:dd:de:a2:da:52:38:
96:77:25:48:82:4c:ae:10:54:d2:23:6b:5e:cd:d3:a8:5e:b2:
f4:a1:bc:a3:03:39:c8:a4:23:ce:6c:57:96:d1:d0:3f:88:09:
e6:0e:bc:94:c0:25:04:e9:cf:c0:01:a8:9c:50:63:8f:66:62:
cf:17:8a:18:ee:79:30:d8:86:88:65:89:bb:9c:7e:db:b7:19:
24:60:d2:6e:31:2f:c0:52:ea:7d:0e:55:c5:e9:8f:c1:3c:5a:
b6:ec:5c:70:2d:b3:f2:28:72:75:06:ed:e1:78:de:eb:58:6f:
ea:2f:16:40:c8:4c:1b:d6:23:7c:84:fa:20:35:8c:a3:41:9b:
c9:e0:b6:9e:31:45:ad:f1:1d:ca:f0:83:7f:3f:66:cd:bf:47:
3a:b8:bf:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEzP/Nk2jwEWfYxIu9bWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmRhZWY2NjY0YTc1MjliNjI5ZjNmZDY1MDA0OTE1MjMw
ZjFiZTkwHhcNMjUxMTExMDQwMTE1WhcNMjUxMTEyMDQwMTE1WjAzMTEwLwYDVQQD
EyhjMGFlYzk3MjVhYzI0YmY5NmQ4YWE3ZTlmMWYxMGI4ODE1ODNkNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5YXVaH5Dakl6ZZ9Hu+jhUKFjJM2
MmpAxqzn0c5C24YsbtFLlwY0l9wo+J26wkwrYmP4Xhn6GFOloZve28qPI1Dt6+B7
rT89TlRN1V9Po7wv6KoDM3RW3Xou8A9k2uAHGVWuPIA+MR71rtGzkXCuOwdXWBxg
B2u85vMXQ2mrk3/iPne9GadmQd9cadOYKjsMFcwcXQGhW8IxfBXNHHZ4+gYE4Jva
5YJ2YSHZM7ftVlEkrFeCYBIQ5LcPVljlir9pUPnD0llj8AbE9gXDiDNGgxA40F6k
3h4PT1tqMSbmsODZNly6ZiP3dc7IlOyJhvJcC8r9FOYRNR8SdNJcUdffQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCuyXJawkv5bYqn6fHxC4gVg9RSMB8GA1UdIwQY
MBaAFN1trvZmSnUptinz/WUASRUjDxvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYt
Y2ZlMTMzNWYyN2ZiLzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYtY2ZlMTMzNWYyN2Zi
LzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTXBoBD3
dFl285k6E4NwfWceR47pEbawwqxWg8z/3B/XbAE5+ddcmhRH5FNIXxvrL0M3EmIz
l9N5O9caKRmKjwAsgVKh0/p5exlCScwL5RLWcwQ98dzpFscpm0/Ke+8Cjth/WSa8
3d6i2lI4lnclSIJMrhBU0iNrXs3TqF6y9KG8owM5yKQjzmxXltHQP4gJ5g68lMAl
BOnPwAGonFBjj2ZizxeKGO55MNiGiGWJu5x+27cZJGDSbjEvwFLqfQ5VxemPwTxa
tuxccC2z8ihydQbt4Xje61hv6i8WQMhMG9YjfIT6IDWMo0GbyeC2njFFrfEdyvCD
fz9mzb9HOri/1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client