Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: ulaYIPQEMy8aN4+3hPpeIczLytkHuXfPH+CJytD0YMw=
Subject key identifier: 1A:56:B8:8E:AD:B3:03:89:F6:F0:DF:BF:E3:E0:40:65:9B:FA:2B:1D
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019A71B7CEF11736241E29B5A9D123E6A3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 1302
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: F0JCNo4wj6dqQ+626+/hBn97kTKFep8iCEjZANtliD0=)
2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ce:f1:17:36:24:1e:29:b5:a9:d1:23:e6:a3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=1a56b88eadb30389f6f0dfbfe3e040659bfa2b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:09:be:bb:3d:1d:c3:f9:f7:7b:cc:f4:00:
25:3b:b3:45:98:a0:3c:78:6c:60:d7:66:1f:36:03:
b1:7d:b3:3d:b5:78:b4:77:7d:e1:ea:76:cb:a7:12:
ad:03:ea:74:3e:21:b8:ad:77:56:18:5e:a1:f3:da:
96:85:06:a5:23:97:19:fa:fb:8c:d8:ef:4e:f6:77:
24:a0:30:e8:3f:98:30:d2:ce:e7:8b:00:bc:a1:10:
a3:1d:1a:d1:8c:b9:0d:23:0d:05:dd:db:eb:62:5e:
85:a1:c5:47:76:6c:23:3c:53:56:80:52:3e:c2:c6:
f3:f5:69:ce:b2:3f:eb:10:e6:4a:c6:42:f1:a3:a6:
f8:74:06:a0:6d:7f:2f:cb:a5:9e:c3:ed:b3:ef:b0:
5e:90:30:79:00:96:22:f4:10:c9:c7:dc:29:1c:fb:
71:e0:dc:87:49:d1:d8:d8:3a:c2:9c:52:b3:e6:07:
4d:c4:ad:19:13:20:57:f3:b0:61:46:9f:a5:f3:ec:
5b:fe:79:5e:5c:64:3e:bc:2d:04:81:be:87:1d:f1:
f5:f1:4d:13:a0:61:7b:75:97:ef:b9:c4:3d:4d:e1:
c6:92:e2:d7:af:50:49:f8:84:1c:6a:e8:6a:23:a8:
af:61:c9:cf:74:55:09:94:6a:d3:fd:1f:08:25:1f:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:B8:8E:AD:B3:03:89:F6:F0:DF:BF:E3:E0:40:65:9B:FA:2B:1D
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f3:c4:43:bf:91:56:63:09:02:c6:1e:eb:9b:18:ff:d5:1b:
d7:b6:57:4c:d0:ef:47:9e:ed:dc:ff:4e:9e:b0:26:db:1b:21:
c4:8e:ec:df:b0:ca:3f:78:b1:f2:ce:7a:c0:3d:d4:ab:73:ac:
f7:48:58:30:3a:8b:3c:a2:7b:86:0d:be:03:3a:f8:6c:77:95:
19:fa:ca:e5:ae:96:be:d6:51:d4:47:97:f9:64:64:a0:ca:10:
70:62:e9:f5:85:db:84:51:5a:f2:ca:bf:e0:f8:2d:99:4f:d7:
c3:70:6e:cf:f4:2e:78:62:f1:38:03:8f:75:57:08:ef:03:32:
54:26:37:21:22:55:c8:b2:33:05:2a:32:17:c4:bb:ba:89:04:
03:ae:70:3b:64:8e:75:f7:08:7e:06:28:ba:d6:57:81:2a:90:
40:c4:5b:17:95:09:cf:ff:a2:26:92:e9:12:75:f2:71:d4:71:
24:79:d4:f4:d3:70:9b:de:ca:d8:25:7f:63:7d:a1:6d:36:b1:
bf:e4:d0:87:23:06:aa:bd:11:68:2c:fa:28:a8:17:27:c7:de:
01:8e:8a:1b:54:01:df:04:23:a7:45:b1:39:49:f3:f1:e8:14:
40:88:f5:ef:42:05:d5:72:e8:d5:63:47:49:a9:fa:ff:e0:66:
cb:0f:e3:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt87xFzYkHim1qdEj5qP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTFiMjVmZDkxYjVmYmMxZmZiMTIxOGM2N2VkNTU4YWU3
NzhjMDQwHhcNMjUxMTExMDcwMTAyWhcNMjUxMTEyMDcwMTAyWjAzMTEwLwYDVQQD
EygxYTU2Yjg4ZWFkYjMwMzg5ZjZmMGRmYmZlM2UwNDA2NTliZmEyYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYIJvrs9HcP593vM9AAlO7NFmKA8
eGxg12YfNgOxfbM9tXi0d33h6nbLpxKtA+p0PiG4rXdWGF6h89qWhQalI5cZ+vuM
2O9O9nckoDDoP5gw0s7niwC8oRCjHRrRjLkNIw0F3dvrYl6FocVHdmwjPFNWgFI+
wsbz9WnOsj/rEOZKxkLxo6b4dAagbX8vy6Wew+2z77BekDB5AJYi9BDJx9wpHPtx
4NyHSdHY2DrCnFKz5gdNxK0ZEyBX87BhRp+l8+xb/nleXGQ+vC0Egb6HHfH18U0T
oGF7dZfvucQ9TeHGkuLXr1BJ+IQcauhqI6ivYcnPdFUJlGrT/R8IJR/hWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpWuI6tswOJ9vDfv+PgQGWb+isdMB8GA1UdIwQY
MBaAFNzhsl/ZG1+8H/sSGMZ+1Viud4wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zMjUyYzAtNTcyNS00NDlmLTkyYTEt
NjQzYmIyN2Y3ZmJmLzEvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zMjUyYzAtNTcyNS00NDlmLTkyYTEtNjQzYmIyN2Y3ZmJm
LzEvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/PEQ7+R
VmMJAsYe65sY/9Ub17ZXTNDvR57t3P9OnrAm2xshxI7s37DKP3ix8s56wD3Uq3Os
90hYMDqLPKJ7hg2+Azr4bHeVGfrK5a6WvtZR1EeX+WRkoMoQcGLp9YXbhFFa8sq/
4PgtmU/Xw3Buz/QueGLxOAOPdVcI7wMyVCY3ISJVyLIzBSoyF8S7uokEA65wO2SO
dfcIfgYoutZXgSqQQMRbF5UJz/+iJpLpEnXycdRxJHnU9NNwm97K2CV/Y32hbTax
v+TQhyMGqr0RaCz6KKgXJ8feAY6KG1QB3wQjp0WxOUnz8egUQIj170IF1XLo1WNH
San6/+Bmyw/jRQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:58 2025 by rpki-client