Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: j8ra7Z3s56G7/vXTuDb2ArfF8Cu2BnRM4cKuEaW2jh8=
Subject key identifier: 17:C3:6F:CD:EE:E0:82:6D:A5:41:7A:48:03:77:54:C5:0B:4F:E5:8C
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019A706E04845D0E4A5F49FAB8F53A04E08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 0C
Signing time: Tue 11 Nov 2025 01:00:49 +0000
Manifest this update: Tue 11 Nov 2025 01:00:49 +0000
Manifest next update: Wed 12 Nov 2025 01:00:49 +0000
Files and hashes: 1: 8x9frN2OUt9fxn_h5gX6Grs_CgI.roa (hash: dNtoUWEMIhmyRQMVSfVQJIk3/+F8fL+9APaLlanRg8E=)
2: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: fnb+NtlATt3V7B1Mo+b1re9+b20Fo5dA6aL4vK697+0=)
3: nWXUmdrRFwsJUQ_9oJaPGBDP9jQ.roa (hash: rIbSgKhcb90mcIIisuiQswIgBYp5rgA0dx4/mD2oAi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:04:84:5d:0e:4a:5f:49:fa:b8:f5:3a:04:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Nov 11 01:00:49 2025 GMT
Not After : Nov 12 01:00:49 2025 GMT
Subject: CN=17c36fcdeee0826da5417a48037754c50b4fe58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:c3:be:93:b4:da:3f:59:ff:b0:0c:a6:60:
92:5a:01:cc:66:12:d7:0d:1d:69:28:ff:3f:4a:84:
72:6f:c8:23:5c:17:65:a3:8c:fe:9f:ca:d3:83:4f:
b2:5a:62:1b:5b:74:c7:78:a6:3b:4c:cf:08:9d:f1:
7f:e9:f8:93:49:35:71:51:c9:cd:19:bc:9d:e5:8f:
74:c4:02:35:5c:bb:74:10:6b:f6:62:99:a2:de:61:
fc:42:97:19:4d:1e:6c:94:9d:5b:ef:ec:a5:1f:21:
09:3d:60:1e:6d:ce:3e:6b:53:0e:61:b9:c4:4c:5f:
c9:e4:34:e5:21:b8:3f:65:6b:fd:08:7d:0d:aa:63:
c5:2d:78:4a:8f:8d:96:1f:59:7a:eb:fe:1a:5d:4a:
7a:f5:20:58:bc:89:13:fb:fa:b0:bc:e3:5c:ab:39:
9a:a4:c6:57:3d:c0:61:e8:5d:08:81:7f:c7:da:06:
5c:2b:5b:d1:8a:b9:ec:22:f9:ab:60:fa:62:23:71:
4c:ca:a2:2d:b9:e5:1e:20:d3:66:96:62:2d:d5:86:
5a:38:dd:e2:cb:75:20:22:5f:6f:c4:00:87:4e:00:
72:b7:09:0e:a0:bc:0b:42:5e:ec:6c:d1:2b:db:00:
a0:1e:6d:25:d2:fe:cc:f1:92:2d:18:ed:5d:a1:7a:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:6F:CD:EE:E0:82:6D:A5:41:7A:48:03:77:54:C5:0B:4F:E5:8C
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f1:66:ef:a6:71:a8:95:23:ed:bf:2f:27:87:fa:7f:6b:af:
c0:d1:24:7c:82:44:18:42:14:62:f4:7d:c7:29:52:70:48:38:
10:da:12:4b:9a:84:40:81:1a:a9:da:d2:09:d0:2b:8c:53:58:
d4:58:62:6a:3c:6d:ee:b4:91:03:97:22:25:bc:72:27:a4:a8:
57:57:ae:de:73:a7:01:c2:57:2d:8b:48:5a:d0:e0:c4:e4:2a:
4d:57:49:66:07:0d:83:fa:7a:d9:25:bb:3e:f6:ab:3a:23:ca:
dd:a2:8b:a2:fd:e1:44:05:8f:66:c8:23:93:e4:39:3c:85:4f:
89:e5:aa:fb:6f:ed:c1:23:7b:2c:00:72:76:0d:92:1b:16:83:
17:3d:36:97:09:c8:dc:55:bd:1b:53:0f:20:85:4c:8b:ef:bf:
42:60:2a:47:ef:8d:77:ac:88:ec:1c:a2:17:b5:16:95:c1:54:
d5:35:fd:17:33:08:a2:51:7b:c3:2f:7d:af:e2:1b:4e:e6:ee:
51:b6:81:df:0c:ca:a3:da:c6:02:b1:bf:58:50:0e:eb:26:22:
34:6f:cd:4a:4d:13:56:1d:fb:e1:ad:2b:e1:b9:c7:c7:55:5c:
3a:12:b6:3f:82:20:35:14:13:e6:01:53:0a:1c:fa:93:bd:ff:
47:f8:1a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbgSEXQ5KX0n6uPU6BOCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi
ZWJmZjgwHhcNMjUxMTExMDEwMDQ5WhcNMjUxMTEyMDEwMDQ5WjAzMTEwLwYDVQQD
EygxN2MzNmZjZGVlZTA4MjZkYTU0MTdhNDgwMzc3NTRjNTBiNGZlNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0vDvpO02j9Z/7AMpmCSWgHMZhLX
DR1pKP8/SoRyb8gjXBdlo4z+n8rTg0+yWmIbW3THeKY7TM8InfF/6fiTSTVxUcnN
Gbyd5Y90xAI1XLt0EGv2Ypmi3mH8QpcZTR5slJ1b7+ylHyEJPWAebc4+a1MOYbnE
TF/J5DTlIbg/ZWv9CH0NqmPFLXhKj42WH1l66/4aXUp69SBYvIkT+/qwvONcqzma
pMZXPcBh6F0IgX/H2gZcK1vRirnsIvmrYPpiI3FMyqItueUeINNmlmIt1YZaON3i
y3UgIl9vxACHTgBytwkOoLwLQl7sbNEr2wCgHm0l0v7M8ZItGO1doXp/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfDb83u4IJtpUF6SAN3VMULT+WMMB8GA1UdIwQY
MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt
NjNjZWQ4NzYyMDQyLzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy
LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfFm76Zx
qJUj7b8vJ4f6f2uvwNEkfIJEGEIUYvR9xylScEg4ENoSS5qEQIEaqdrSCdArjFNY
1Fhiajxt7rSRA5ciJbxyJ6SoV1eu3nOnAcJXLYtIWtDgxOQqTVdJZgcNg/p62SW7
PvarOiPK3aKLov3hRAWPZsgjk+Q5PIVPieWq+2/twSN7LABydg2SGxaDFz02lwnI
3FW9G1MPIIVMi++/QmAqR++Nd6yI7ByiF7UWlcFU1TX9FzMIolF7wy99r+IbTubu
UbaB3wzKo9rGArG/WFAO6yYiNG/NSk0TVh374a0r4bnHx1VcOhK2P4IgNRQT5gFT
Chz6k73/R/gafg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:40 2025 by rpki-client