Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: HbnFLtSVDvqxi7PqcyNyQ8USuBLPL8ExX5JiUjeQ4ZQ=
Subject key identifier: 17:E3:AE:8B:DE:1C:98:50:8A:F9:E4:0D:AC:83:4C:A9:01:D3:56:CD
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019A353496D2A20ACF4090CE87FD73E010B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 0134
Signing time: Thu 30 Oct 2025 13:00:30 +0000
Manifest this update: Thu 30 Oct 2025 13:00:30 +0000
Manifest next update: Fri 31 Oct 2025 13:00:30 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: ueYRPd1JzdEPUSPqlRQ7AEz/LRBV6XIhZvTJ0srJpbg=)
2: vfts5VO11Lf49yWawFf1T10X7IA.roa (hash: o5JhQxo9WfUPfoKsbz0ZkfnOyZ6HVJldiK9KySDHufY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:34:96:d2:a2:0a:cf:40:90:ce:87:fd:73:e0:10:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: Oct 30 13:00:30 2025 GMT
Not After : Oct 31 13:00:30 2025 GMT
Subject: CN=17e3ae8bde1c98508af9e40dac834ca901d356cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:30:ba:c6:7a:78:9d:5e:34:46:b9:82:90:
cc:c6:80:1c:bf:a0:45:6d:c9:d6:42:c4:65:db:70:
c4:14:2f:1f:1c:7b:42:6b:a5:5f:a0:54:4b:d5:5a:
46:eb:b4:c7:10:12:f4:4f:2f:dd:ba:a8:a1:0a:92:
a2:5a:7b:e4:19:fa:9b:c5:9b:68:e8:fe:4f:cf:f8:
d2:fd:f1:f0:bb:89:af:1b:f2:f0:3c:3c:c6:05:86:
69:ab:95:c0:3a:13:cd:c3:27:b3:7e:f1:fb:61:6d:
26:f8:d5:4f:cf:67:78:ef:10:e9:37:37:f8:f8:14:
85:57:e2:5b:a1:9c:cb:ae:91:4b:9d:34:6b:a2:d5:
cd:b3:d4:76:2d:70:71:b8:35:d9:45:7b:41:9d:30:
1d:44:44:7f:83:bc:43:0c:db:b8:d6:1d:f8:2f:56:
d4:3e:b4:23:fe:18:cf:2b:f0:99:51:b8:1c:35:73:
b7:ea:8e:6d:7d:35:2d:25:cb:a8:c2:47:3e:41:f7:
41:6f:83:2c:66:a6:d3:97:93:55:1f:9b:38:71:31:
bc:fc:80:d3:fe:5b:5b:26:96:8a:dc:31:ee:3b:fa:
07:d1:76:ae:b7:bd:93:cb:61:7e:9c:d9:be:49:1f:
d6:7f:fd:09:1c:1d:35:3d:40:d7:15:01:d5:c2:b6:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:AE:8B:DE:1C:98:50:8A:F9:E4:0D:AC:83:4C:A9:01:D3:56:CD
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4a:e0:a2:f2:15:75:71:58:c7:e2:f7:d4:73:79:ad:b7:c4:
7f:23:29:24:1c:10:4d:79:2e:06:04:53:9a:88:b9:49:fd:67:
cd:ee:e5:eb:ed:6c:83:5f:10:67:13:71:4e:9f:5d:99:b1:6b:
b7:71:30:c6:a2:0e:b8:b9:f4:fe:51:35:01:b4:8c:65:48:03:
77:15:17:37:57:e6:af:fc:e6:21:ef:74:61:13:a3:84:69:66:
ab:9b:d4:d7:e7:aa:cb:b3:47:e5:e9:aa:68:7b:4b:b4:bc:c9:
10:c3:a0:48:07:77:b1:1c:21:e4:2e:4d:bd:ac:f1:4c:95:70:
92:26:fd:8c:41:af:3b:ff:d4:54:b1:fb:06:93:59:1e:11:80:
57:52:61:7f:68:07:69:3f:b5:bb:af:ce:2c:ab:1b:d9:92:4d:
04:62:e1:32:59:25:89:e9:e9:16:23:18:24:bd:f0:f5:a5:80:
27:3e:2f:97:5c:9b:52:19:2e:5a:4f:e0:18:85:b2:40:12:10:
10:b2:3d:43:0e:72:ee:e4:dd:be:1d:40:ae:b3:2e:03:25:5d:
05:17:95:71:0c:04:89:17:8a:e0:da:1a:3d:c4:3a:ac:57:5e:
c0:3b:a5:42:d9:a0:70:5d:22:44:07:37:82:54:db:17:b2:e3:
bb:0b:1e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo1NJbSogrPQJDOh/1z4BCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzRjN2I4YmFhMWQ5ZDQ3YzNhZjU1ZjNlOTdkZDZlNWQ2
ZTI3ZDUwHhcNMjUxMDMwMTMwMDMwWhcNMjUxMDMxMTMwMDMwWjAzMTEwLwYDVQQD
EygxN2UzYWU4YmRlMWM5ODUwOGFmOWU0MGRhYzgzNGNhOTAxZDM1NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA0wusZ6eJ1eNEa5gpDMxoAcv6BF
bcnWQsRl23DEFC8fHHtCa6VfoFRL1VpG67THEBL0Ty/duqihCpKiWnvkGfqbxZto
6P5Pz/jS/fHwu4mvG/LwPDzGBYZpq5XAOhPNwyezfvH7YW0m+NVPz2d47xDpNzf4
+BSFV+JboZzLrpFLnTRrotXNs9R2LXBxuDXZRXtBnTAdRER/g7xDDNu41h34L1bU
PrQj/hjPK/CZUbgcNXO36o5tfTUtJcuowkc+QfdBb4MsZqbTl5NVH5s4cTG8/IDT
/ltbJpaK3DHuO/oH0Xaut72Ty2F+nNm+SR/Wf/0JHB01PUDXFQHVwrZkDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfjroveHJhQivnkDayDTKkB01bNMB8GA1UdIwQY
MBaAFLd0x7i6odnUfDr1Xz6X3W5dbifVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMDg3OTQtMDA5NS00NzFiLWEzMDEt
ZjAzODdlMGU2MjFiLzEvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMDg3OTQtMDA5NS00NzFiLWEzMDEtZjAzODdlMGU2MjFi
LzEvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFErgovIV
dXFYx+L31HN5rbfEfyMpJBwQTXkuBgRTmoi5Sf1nze7l6+1sg18QZxNxTp9dmbFr
t3EwxqIOuLn0/lE1AbSMZUgDdxUXN1fmr/zmIe90YROjhGlmq5vU1+eqy7NH5emq
aHtLtLzJEMOgSAd3sRwh5C5NvazxTJVwkib9jEGvO//UVLH7BpNZHhGAV1Jhf2gH
aT+1u6/OLKsb2ZJNBGLhMlklienpFiMYJL3w9aWAJz4vl1ybUhkuWk/gGIWyQBIQ
ELI9Qw5y7uTdvh1ArrMuAyVdBReVcQwEiReK4NoaPcQ6rFdewDulQtmgcF0iRAc3
glTbF7Ljuwse/w==
-----END CERTIFICATE-----
Generated at Thu Oct 30 15:49:45 2025 by rpki-client