Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: GvX2kTlgWYGElrMixDWynIbAp4XgMBSwA3VLpi38BkE=
Subject key identifier: CA:92:43:57:19:D8:3F:56:8B:9E:3D:0A:EE:1B:4A:CC:01:87:89:AB
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019A71B93F2C43D2521FF7EB5973BFB35F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 1090
Signing time: Tue 11 Nov 2025 07:02:36 +0000
Manifest this update: Tue 11 Nov 2025 07:02:36 +0000
Manifest next update: Wed 12 Nov 2025 07:02:36 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: yQkL05pTSRuivwXa4ShcfAUu1s50FOkRhjOJeGI4kCw=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:3f:2c:43:d2:52:1f:f7:eb:59:73:bf:b3:5f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Nov 11 07:02:36 2025 GMT
Not After : Nov 12 07:02:36 2025 GMT
Subject: CN=ca92435719d83f568b9e3d0aee1b4acc018789ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:1e:91:8c:f1:b7:46:33:fe:a1:09:2d:8f:
1b:f3:6f:b7:c6:a1:70:2c:fb:4f:8a:21:0e:ae:70:
74:dc:2e:06:bd:19:4e:be:ed:44:f6:33:fa:14:58:
99:15:37:ee:6c:e9:af:3b:90:e6:53:ce:80:9e:68:
72:0f:26:16:55:01:e7:52:b5:fa:1e:3d:de:c1:93:
b3:82:a2:6e:ff:ae:f5:7e:9b:63:94:cb:c2:b5:2a:
64:09:d3:1c:14:26:4a:fc:bf:fa:6e:aa:28:5e:57:
86:14:4c:f4:00:f3:f1:9b:48:5e:4d:31:07:f7:a1:
45:f3:6c:47:52:b5:2d:c4:6e:ad:65:ae:20:1a:5a:
22:90:37:32:dd:07:0c:0e:f8:a6:09:7b:12:3b:59:
22:09:cb:05:b5:97:98:84:0c:20:1f:1c:18:63:3d:
09:bc:ea:98:45:89:a4:f5:64:c5:cd:16:66:18:81:
90:77:84:bf:82:62:96:e2:41:99:44:2d:57:18:83:
3f:38:ca:0f:75:84:95:f8:19:22:ca:dd:c4:01:ce:
3f:5d:f2:4b:7d:ca:34:79:47:c4:31:75:5f:51:7a:
46:d4:3d:17:1f:41:f3:5d:b7:48:cd:bd:ed:b5:28:
f8:47:bb:6b:19:84:71:a6:36:cb:6e:d7:ab:a0:c1:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:92:43:57:19:D8:3F:56:8B:9E:3D:0A:EE:1B:4A:CC:01:87:89:AB
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:8f:3e:44:74:a6:f7:d8:d5:da:76:c5:74:77:68:55:29:
78:c9:ee:c2:a3:13:ce:40:60:69:1d:26:8a:df:8b:54:ec:9e:
d9:29:d1:38:d1:97:bd:df:00:2e:17:01:22:23:09:77:5e:eb:
93:47:31:5a:3d:9b:31:0a:d6:b9:c3:a9:29:c2:cb:db:c6:ce:
00:74:f7:ed:e7:af:2d:f1:f8:f4:7d:5a:ea:8b:a3:76:7c:a2:
59:78:1a:68:6f:f2:a7:97:b6:fd:8c:ea:74:81:15:a5:61:e1:
d4:69:1c:eb:61:bc:6e:8c:52:f5:de:b8:a1:b8:0b:90:ae:f7:
75:18:cc:ff:5d:a0:3b:1a:a3:9b:55:27:ac:7f:90:d7:f5:19:
5a:a0:6d:c4:59:38:fe:6a:8d:ad:73:61:30:47:3a:8e:1d:7a:
64:07:e7:9d:f5:19:f1:33:42:a7:e9:e5:5d:d8:76:76:41:56:
54:c7:50:55:6a:20:4c:64:dd:ce:8c:25:8d:42:46:5c:51:0e:
67:81:ae:8d:f7:01:8f:57:bd:da:e7:09:48:33:e9:91:20:b8:
57:a1:29:49:84:aa:54:1b:b7:a1:29:df:38:07:ed:20:81:a1:
c8:30:75:aa:31:4d:8f:b7:73:37:c6:61:89:60:4c:34:1d:a3:
76:92:28:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuT8sQ9JSH/frWXO/s19JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh
Yjk5YmQwHhcNMjUxMTExMDcwMjM2WhcNMjUxMTEyMDcwMjM2WjAzMTEwLwYDVQQD
EyhjYTkyNDM1NzE5ZDgzZjU2OGI5ZTNkMGFlZTFiNGFjYzAxODc4OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2MekYzxt0Yz/qEJLY8b82+3xqFw
LPtPiiEOrnB03C4GvRlOvu1E9jP6FFiZFTfubOmvO5DmU86AnmhyDyYWVQHnUrX6
Hj3ewZOzgqJu/671fptjlMvCtSpkCdMcFCZK/L/6bqooXleGFEz0APPxm0heTTEH
96FF82xHUrUtxG6tZa4gGloikDcy3QcMDvimCXsSO1kiCcsFtZeYhAwgHxwYYz0J
vOqYRYmk9WTFzRZmGIGQd4S/gmKW4kGZRC1XGIM/OMoPdYSV+Bkiyt3EAc4/XfJL
fco0eUfEMXVfUXpG1D0XH0HzXbdIzb3ttSj4R7trGYRxpjbLbteroMFNaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqSQ1cZ2D9Wi549Cu4bSswBh4mrMB8GA1UdIwQY
MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt
M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy
LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOePPkR0
pvfY1dp2xXR3aFUpeMnuwqMTzkBgaR0mit+LVOye2SnRONGXvd8ALhcBIiMJd17r
k0cxWj2bMQrWucOpKcLL28bOAHT37eevLfH49H1a6oujdnyiWXgaaG/yp5e2/Yzq
dIEVpWHh1Gkc62G8boxS9d64obgLkK73dRjM/12gOxqjm1UnrH+Q1/UZWqBtxFk4
/mqNrXNhMEc6jh16ZAfnnfUZ8TNCp+nlXdh2dkFWVMdQVWogTGTdzowljUJGXFEO
Z4GujfcBj1e92ucJSDPpkSC4V6EpSYSqVBu3oSnfOAftIIGhyDB1qjFNj7dzN8Zh
iWBMNB2jdpIocw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:39 2025 by rpki-client