Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: stCIHdrOAz/Wbmew8nusubifW//Oywt+XLK5hPpYCe0=
Subject key identifier: D2:9A:A0:DF:9C:B3:69:3D:08:72:2A:97:A3:5D:72:50:BD:18:9B:14
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 019A2289B9CEE753A2903FC9715EECE0F12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0DDD
Signing time: Sun 26 Oct 2025 22:00:42 +0000
Manifest this update: Sun 26 Oct 2025 22:00:42 +0000
Manifest next update: Mon 27 Oct 2025 22:00:42 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: lndi0+IkjdIzUzFQ4Y9jgkb4ADylUV0JNb4aE7+8zFc=)
2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=)
3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:b9:ce:e7:53:a2:90:3f:c9:71:5e:ec:e0:f1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Oct 26 22:00:42 2025 GMT
Not After : Oct 27 22:00:42 2025 GMT
Subject: CN=d29aa0df9cb3693d08722a97a35d7250bd189b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:d2:7d:bc:b4:3b:8e:7d:4c:d5:1f:a4:6d:
ef:a5:8d:cd:29:63:d3:40:43:e3:7b:cc:d4:b5:ed:
8c:7b:ca:7c:ad:af:6f:e9:ec:db:ad:bd:e8:d1:27:
8b:2a:a8:8f:c0:f9:b2:8d:8e:87:f0:e3:89:5e:c9:
20:9f:44:87:0e:5a:19:b1:67:2b:c6:09:ff:b2:ad:
be:5e:c2:19:31:cc:e8:75:b4:62:f6:7e:de:90:a7:
2e:87:f1:55:4c:a6:b7:2d:75:25:d6:85:0c:4b:84:
5c:a8:7a:5e:61:34:49:6e:59:a6:f6:e8:9f:07:dd:
39:97:3a:19:81:b7:80:2e:da:98:bb:9c:b1:dc:3b:
eb:c5:c5:86:0a:c1:dd:61:30:bb:2b:d5:1f:b3:e9:
33:89:70:ab:6e:bc:88:63:c2:81:69:07:6c:9d:5d:
03:67:43:07:1c:b5:ac:9d:2e:97:67:2b:2c:e9:f3:
b3:cd:ff:2a:cd:64:2a:e0:d9:4c:1c:35:68:b5:d8:
75:4a:23:4d:59:7a:3c:10:4c:a6:bf:10:df:b4:1c:
82:ec:2b:7f:42:75:a1:79:57:c3:42:90:f1:bd:b8:
a1:64:6b:0c:df:a7:29:af:9a:a1:86:ed:de:d5:ae:
eb:fb:e1:1e:4c:26:ef:82:33:7c:1b:80:eb:f0:81:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:A0:DF:9C:B3:69:3D:08:72:2A:97:A3:5D:72:50:BD:18:9B:14
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:20:b0:50:3a:a5:3f:d9:e2:04:f6:1c:6b:48:49:1f:47:bc:
4d:b7:c6:ee:55:d1:ae:92:ce:98:3b:1a:63:46:f3:10:97:0b:
74:3e:a6:e2:9d:17:33:b1:c7:77:d5:f8:ae:95:09:06:bc:4a:
18:7a:d8:4b:36:c0:22:e2:bb:2c:35:7d:85:01:f3:7b:8b:ce:
f5:20:d3:31:dc:79:ed:8f:26:79:20:80:e1:51:b1:8e:c5:c4:
a0:77:64:19:4a:2c:e0:34:51:3b:94:3f:c2:76:b1:07:ca:87:
ce:96:4c:68:27:49:36:b1:83:57:fe:6f:52:14:e7:8f:8f:c0:
2c:e6:64:2e:08:c6:18:d4:bd:89:5a:29:2e:9f:ac:a9:d0:a5:
73:64:27:96:bb:73:00:fc:b0:1b:e2:37:58:88:ce:47:22:43:
8c:37:f9:8f:10:18:3f:93:c2:89:67:05:ef:01:4c:f2:06:26:
74:2b:be:6d:7f:03:a3:dc:93:2c:1c:d6:80:f7:f4:8d:c0:58:
ee:71:83:65:09:79:e6:db:8a:88:e4:0a:bf:1b:47:f2:2a:14:
25:4c:9e:ec:48:f0:9f:83:e1:f9:f7:e4:c0:63:f5:1b:00:97:
65:ae:3a:60:92:c1:90:16:d3:54:33:25:49:d0:bb:a3:10:ca:
26:40:a1:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiibnO51OikD/JcV7s4PEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmQ5NGViYjhjYjk4YTFkYmRmNTBiZGNkNjlkY2MyOTE0
NDg4OWUwHhcNMjUxMDI2MjIwMDQyWhcNMjUxMDI3MjIwMDQyWjAzMTEwLwYDVQQD
EyhkMjlhYTBkZjljYjM2OTNkMDg3MjJhOTdhMzVkNzI1MGJkMTg5YjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjTSfby0O459TNUfpG3vpY3NKWPT
QEPje8zUte2Me8p8ra9v6ezbrb3o0SeLKqiPwPmyjY6H8OOJXskgn0SHDloZsWcr
xgn/sq2+XsIZMczodbRi9n7ekKcuh/FVTKa3LXUl1oUMS4RcqHpeYTRJblmm9uif
B905lzoZgbeALtqYu5yx3DvrxcWGCsHdYTC7K9Ufs+kziXCrbryIY8KBaQdsnV0D
Z0MHHLWsnS6XZyss6fOzzf8qzWQq4NlMHDVotdh1SiNNWXo8EEymvxDftByC7Ct/
QnWheVfDQpDxvbihZGsM36cpr5qhhu3e1a7r++EeTCbvgjN8G4Dr8IGkCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKaoN+cs2k9CHIql6NdclC9GJsUMB8GA1UdIwQY
MBaAFN39lOu4y5ih299Qvc1p3MKRRIieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hNmY1MDYtNjk0OC00Y2VmLTg1NDgt
YzkzYzFlZTg5OGJlLzEvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hNmY1MDYtNjk0OC00Y2VmLTg1NDgtYzkzYzFlZTg5OGJl
LzEvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSCwUDql
P9niBPYca0hJH0e8TbfG7lXRrpLOmDsaY0bzEJcLdD6m4p0XM7HHd9X4rpUJBrxK
GHrYSzbAIuK7LDV9hQHze4vO9SDTMdx57Y8meSCA4VGxjsXEoHdkGUos4DRRO5Q/
wnaxB8qHzpZMaCdJNrGDV/5vUhTnj4/ALOZkLgjGGNS9iVopLp+sqdClc2Qnlrtz
APywG+I3WIjORyJDjDf5jxAYP5PCiWcF7wFM8gYmdCu+bX8Do9yTLBzWgPf0jcBY
7nGDZQl55tuKiOQKvxtH8ioUJUye7Ejwn4Ph+ffkwGP1GwCXZa46YJLBkBbTVDMl
SdC7oxDKJkChtw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:19 2025 by rpki-client