Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: oSCIKwdNZeI8jUnQg9wwrM5FLR0GaoLYoilBaJQ9Sls=
Subject key identifier: 19:6F:1A:40:F8:64:82:77:2C:BA:F0:B1:F0:F2:5B:B3:C1:BB:35:A5
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019A71EE6E8C09C0211D6BBAB2DA6FF933C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0C45
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: QcH6y1cb8bmIvEMXQVGCfiJJxfYiWixc+EML1unUaSk=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6e:8c:09:c0:21:1d:6b:ba:b2:da:6f:f9:33:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=196f1a40f86482772cbaf0b1f0f25bb3c1bb35a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:26:89:6e:2d:d2:2f:3d:81:82:34:2f:12:
d6:e2:17:82:e2:80:31:a7:eb:ee:5a:98:8c:bd:de:
ed:9a:eb:33:8a:b4:55:74:51:9d:1c:43:e9:a8:6a:
6b:42:cf:bc:20:35:f9:ec:d3:bd:57:14:01:da:5e:
06:05:95:f9:2d:48:ba:07:ee:e4:74:e9:73:53:64:
55:3c:f9:83:04:9a:dc:40:91:91:aa:e6:f9:c4:0e:
72:9b:9c:02:97:da:45:77:4f:41:16:f8:f4:b9:18:
3a:a6:0b:f3:7d:f3:c8:3d:5a:89:60:0c:c7:34:1c:
47:8b:7e:57:81:8c:67:5c:bf:52:65:dd:02:ee:75:
f6:2c:ca:d8:3a:72:fb:b8:7b:0f:7a:b6:fc:46:a9:
02:6d:2b:f3:cd:2d:af:b8:4a:60:e5:17:97:54:8b:
1a:d4:07:c5:af:8b:71:08:d5:5d:b9:59:0d:c0:ba:
43:7d:4c:1e:d8:0e:d8:af:82:36:2b:0e:9a:a2:28:
8c:60:c0:3e:80:b0:c0:39:3d:d1:be:2a:ae:34:30:
9d:1a:75:d7:2b:de:36:64:b4:83:3e:d9:bc:b0:c4:
3a:df:c5:38:0e:64:94:62:c5:cc:6f:bf:e8:ad:b1:
63:60:8d:e3:b0:1c:53:68:2a:1c:0b:10:94:c3:f5:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6F:1A:40:F8:64:82:77:2C:BA:F0:B1:F0:F2:5B:B3:C1:BB:35:A5
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5b:29:94:7b:28:3b:d7:a4:7f:37:02:d9:70:eb:d0:73:27:
61:00:c5:2a:3c:a9:34:a9:c3:5e:2d:80:67:e7:a2:56:ed:ca:
af:c5:2c:cd:99:a7:bf:ec:6f:f5:df:71:c4:fa:c9:26:b1:10:
7d:6b:28:69:5a:64:5e:ba:f8:56:a4:63:a3:e3:94:17:79:d0:
19:ed:06:36:de:bf:9e:d5:1c:69:4a:f1:c6:af:90:be:97:1f:
f5:b4:c0:43:04:cb:13:0b:b4:b9:47:9c:72:ac:e7:1c:b1:56:
ea:4a:d1:e7:0b:3e:90:99:40:72:1d:45:62:9f:53:48:d8:27:
5a:99:9a:b4:2f:84:05:ed:c5:e8:2f:5c:ff:e3:23:62:d8:9f:
a9:67:87:fa:0c:9a:0e:72:23:7f:e5:16:be:04:66:95:0a:83:
cf:40:2d:cc:ce:c2:fb:e7:f0:3c:67:de:5b:30:45:3b:89:53:
78:2e:dc:47:c4:87:47:1d:91:9b:97:13:c1:95:c4:9d:ed:a5:
91:fa:97:ef:bc:0f:d0:91:86:52:86:44:58:bd:15:e4:fe:a8:
50:aa:4c:14:7b:0b:14:1e:da:3e:2c:3d:be:ce:13:c0:2c:d1:
de:22:56:21:3a:2c:57:b4:6c:26:a7:70:04:0e:56:7b:09:a0:
9b:b1:fc:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7m6MCcAhHWu6stpv+TPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzc1NmFmNzdkYWZlYmNhMTA2ODRkNjg1NTZiYWFjZDcx
NzM2MTcwHhcNMjUxMTExMDgwMDQyWhcNMjUxMTEyMDgwMDQyWjAzMTEwLwYDVQQD
EygxOTZmMWE0MGY4NjQ4Mjc3MmNiYWYwYjFmMGYyNWJiM2MxYmIzNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTQmiW4t0i89gYI0LxLW4heC4oAx
p+vuWpiMvd7tmuszirRVdFGdHEPpqGprQs+8IDX57NO9VxQB2l4GBZX5LUi6B+7k
dOlzU2RVPPmDBJrcQJGRqub5xA5ym5wCl9pFd09BFvj0uRg6pgvzffPIPVqJYAzH
NBxHi35XgYxnXL9SZd0C7nX2LMrYOnL7uHsPerb8RqkCbSvzzS2vuEpg5ReXVIsa
1AfFr4txCNVduVkNwLpDfUwe2A7Yr4I2Kw6aoiiMYMA+gLDAOT3RviquNDCdGnXX
K942ZLSDPtm8sMQ638U4DmSUYsXMb7/orbFjYI3jsBxTaCocCxCUw/XuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlvGkD4ZIJ3LLrwsfDyW7PBuzWlMB8GA1UdIwQY
MBaAFN7HVq932v68oQaE1oVWuqzXFzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMt
N2UwYzdkMzUyNjcxLzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMtN2UwYzdkMzUyNjcx
LzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1splHso
O9ekfzcC2XDr0HMnYQDFKjypNKnDXi2AZ+eiVu3Kr8UszZmnv+xv9d9xxPrJJrEQ
fWsoaVpkXrr4VqRjo+OUF3nQGe0GNt6/ntUcaUrxxq+Qvpcf9bTAQwTLEwu0uUec
cqznHLFW6krR5ws+kJlAch1FYp9TSNgnWpmatC+EBe3F6C9c/+MjYtifqWeH+gya
DnIjf+UWvgRmlQqDz0AtzM7C++fwPGfeWzBFO4lTeC7cR8SHRx2Rm5cTwZXEne2l
kfqX77wP0JGGUoZEWL0V5P6oUKpMFHsLFB7aPiw9vs4TwCzR3iJWITosV7RsJqdw
BA5Wewmgm7H8Bg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:46 2025 by rpki-client