Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: H24oFNF37LguQZ48BRzzZPKnWtutmNJR491jWzwf8sc=
Subject key identifier: 83:C5:44:35:BD:A9:13:A2:F5:E2:73:D7:DC:84:5C:64:A3:1F:57:84
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019A70A558654365D491DBB789827225B82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0CCB
Signing time: Tue 11 Nov 2025 02:01:15 +0000
Manifest this update: Tue 11 Nov 2025 02:01:15 +0000
Manifest next update: Wed 12 Nov 2025 02:01:15 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: abHzzJJI5wmvOVUCh4EDS6ZKnr1xSXGId4ckedth/xU=)
2: IWr6TuTrJyjayPLvTxSMqZtzabw.roa (hash: rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:58:65:43:65:d4:91:db:b7:89:82:72:25:b8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Nov 11 02:01:15 2025 GMT
Not After : Nov 12 02:01:15 2025 GMT
Subject: CN=83c54435bda913a2f5e273d7dc845c64a31f5784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:1c:8d:31:41:cc:87:7c:6b:c8:24:8a:a9:
8e:8c:52:98:5f:37:8a:4c:1d:6d:5f:d9:4b:1a:e0:
69:ed:0f:fc:34:3e:d3:95:ce:af:77:f5:29:de:f9:
b7:24:04:21:df:72:d6:21:88:6a:08:ee:44:48:12:
7f:8d:ef:54:37:13:90:58:a6:3f:d9:e5:58:65:c8:
fc:a1:29:ee:c5:66:da:a6:38:e4:75:a6:51:87:60:
37:6a:c2:7f:4b:95:2a:1a:36:03:83:85:2f:ca:3f:
b1:b9:f3:da:c9:be:75:6f:52:c3:e7:98:57:2c:a9:
17:7d:eb:5e:18:dc:16:b0:0e:9f:fe:74:e8:26:64:
7e:39:45:70:98:ea:59:e8:72:8b:1d:bb:93:90:1b:
4c:88:83:52:ad:d4:7a:59:f5:4f:d2:21:b5:d3:05:
67:77:96:e4:d2:e5:49:ba:36:7e:f5:d8:21:34:e9:
eb:00:54:e4:c7:a0:36:cc:18:48:65:c7:e1:b3:38:
9c:95:75:89:77:64:f3:67:5c:08:55:61:c8:7a:6e:
7a:b2:6a:d5:9b:03:31:69:b0:db:dd:ea:22:70:c1:
20:95:db:15:39:43:68:56:3d:71:12:29:7c:32:47:
a7:fc:04:7b:f7:38:21:6a:b8:39:2b:9d:9e:b0:4b:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:44:35:BD:A9:13:A2:F5:E2:73:D7:DC:84:5C:64:A3:1F:57:84
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:be:6b:d5:71:2f:f1:1e:15:97:06:23:00:08:7f:33:28:88:
2a:1d:f2:70:47:ac:f1:ee:d5:30:61:e0:db:01:f0:4b:e1:26:
a8:60:80:52:8e:8b:fb:5b:72:ce:5d:82:f0:34:6c:b7:e8:98:
dd:cd:f5:d8:5c:ba:0a:2c:4c:b6:77:3e:e7:21:27:f4:a8:b9:
97:9e:26:4c:65:c9:a2:73:70:cd:93:39:8b:e2:ce:1c:e0:cb:
03:32:a1:da:ec:33:3c:04:54:f8:11:61:db:3b:d6:66:2a:a0:
06:13:7f:95:0c:7f:72:89:4e:1e:29:7c:f0:6b:cf:89:46:6c:
67:02:e5:dd:d8:ec:63:40:76:d3:bc:76:af:12:e4:a0:ac:7c:
51:8e:b8:18:27:c8:27:fc:5e:c6:1b:28:92:82:35:8e:c3:48:
d8:36:68:e4:8d:ee:e0:6f:a0:c8:5e:49:a7:fd:c4:02:d7:21:
41:0e:38:47:c0:89:ac:b5:e0:d3:18:96:dd:1f:0a:7d:76:fb:
6f:f1:12:4d:6e:c0:54:bf:9b:6e:33:0a:62:ee:4f:4f:f5:2a:
c2:57:fc:3c:4f:37:3d:b4:07:df:37:d0:51:4a:8c:3a:3f:c9:
e8:66:b3:a7:5a:d9:9e:8f:7d:8c:56:16:c8:29:04:ce:6a:88:
95:b2:c2:17
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpwpVhlQ2XUkdu3iYJyJbgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZWZmNzZlMTJkYzE0Yzc0NGFhNzI2ZTAxNzQxNzI3YzQ2
ZGMxNTkwHhcNMjUxMTExMDIwMTE1WhcNMjUxMTEyMDIwMTE1WjAzMTEwLwYDVQQD
Eyg4M2M1NDQzNWJkYTkxM2EyZjVlMjczZDdkYzg0NWM2NGEzMWY1Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA0cjTFBzId8a8gkiqmOjFKYXzeK
TB1tX9lLGuBp7Q/8ND7Tlc6vd/Up3vm3JAQh33LWIYhqCO5ESBJ/je9UNxOQWKY/
2eVYZcj8oSnuxWbapjjkdaZRh2A3asJ/S5UqGjYDg4Uvyj+xufPayb51b1LD55hX
LKkXfeteGNwWsA6f/nToJmR+OUVwmOpZ6HKLHbuTkBtMiINSrdR6WfVP0iG10wVn
d5bk0uVJujZ+9dghNOnrAFTkx6A2zBhIZcfhsziclXWJd2TzZ1wIVWHIem56smrV
mwMxabDb3eoicMEgldsVOUNoVj1xEil8Mken/AR79zgharg5K52esEvMqQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIPFRDW9qROi9eJz19yEXGSjH1eEMB8GA1UdIwQY
MBaAFPvv924S3BTHRKpybgF0FyfEbcFZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0tXzNiaExjRk1kRXFuSnVBWFFYSjhSdHdWay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhm
LTNiOGY1MDhhNzU0YS8xLzEtLV8zYmhMY0ZNZEVxbkp1QVhRWEo4UnR3VmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVmL2Q4MDFmNy0yODI0LTRlYTktYWQ4Zi0zYjhmNTA4YTc1
NGEvMS8xLS1fM2JoTGNGTWRFcW5KdUFYUVhKOFJ0d1ZrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYL5r
1XEv8R4VlwYjAAh/MyiIKh3ycEes8e7VMGHg2wHwS+EmqGCAUo6L+1tyzl2C8DRs
t+iY3c312Fy6CixMtnc+5yEn9Ki5l54mTGXJonNwzZM5i+LOHODLAzKh2uwzPARU
+BFh2zvWZiqgBhN/lQx/colOHil88GvPiUZsZwLl3djsY0B207x2rxLkoKx8UY64
GCfIJ/xexhsokoI1jsNI2DZo5I3u4G+gyF5Jp/3EAtchQQ44R8CJrLXg0xiW3R8K
fXb7b/ESTW7AVL+bbjMKYu5PT/Uqwlf8PE83PbQH3zfQUUqMOj/J6Gazp1rZno99
jFYWyCkEzmqIlbLCFw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:06 2025 by rpki-client