Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: 36S5o+pupv7EfTL59ncL6vG/XlpxH80rC6aUspO0w18=
Subject key identifier: ED:C4:7E:45:45:8D:55:41:64:CE:38:AE:42:64:09:28:9D:0A:4C:CE
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 019A266733D3E00BC2C72742BC979C72A1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 164D
Signing time: Mon 27 Oct 2025 16:01:28 +0000
Manifest this update: Mon 27 Oct 2025 16:01:28 +0000
Manifest next update: Tue 28 Oct 2025 16:01:28 +0000
Files and hashes: 1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: W2BbWia59nXjVxLq4CCIypc/3cVG0+116ZxtUEnbcFg=)
2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:33:d3:e0:0b:c2:c7:27:42:bc:97:9c:72:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Oct 27 16:01:28 2025 GMT
Not After : Oct 28 16:01:28 2025 GMT
Subject: CN=edc47e45458d554164ce38ae426409289d0a4cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:8f:e6:13:9c:6c:18:03:a0:24:89:26:ba:
ef:37:d7:07:2e:fd:4f:50:42:a5:2f:a9:71:a5:b6:
a3:db:b1:1a:39:78:97:99:0f:8f:23:5f:17:22:ad:
d6:36:72:3d:0f:02:b7:22:7d:5f:0a:bd:bb:34:4d:
bb:93:28:39:8d:39:38:b6:d8:1c:51:44:32:a4:33:
3e:d8:3b:05:d0:6b:98:3b:f2:75:42:2a:12:f3:a8:
b0:37:17:3a:a6:0a:aa:d0:cc:22:58:0c:5d:9b:b5:
3c:4a:4c:b8:f0:17:b3:9c:6c:d0:26:46:4a:83:02:
56:db:ea:b8:03:d1:1d:3b:ac:bb:99:d8:83:33:2e:
19:6a:26:82:7b:e4:dd:c7:94:1a:ad:9f:65:d8:fe:
19:cd:f3:ce:e4:98:26:8c:35:a5:e0:0e:97:9b:bb:
2e:ce:73:2f:91:3e:dd:47:d0:1a:c9:f6:de:d0:ea:
53:c3:17:58:0c:ed:ae:c7:a9:04:12:86:46:c0:5d:
aa:9c:6b:1e:ec:39:6e:04:e5:62:ef:ba:d7:c8:86:
cd:ef:28:20:98:29:35:75:6e:0e:32:f7:9e:fd:6b:
a8:a8:2b:a0:b8:d3:1e:c5:ec:ea:5a:e6:04:bb:ea:
a6:12:fd:c2:46:2d:15:e7:97:a4:79:5b:38:78:e9:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:7E:45:45:8D:55:41:64:CE:38:AE:42:64:09:28:9D:0A:4C:CE
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:7a:d7:a9:01:a0:1c:f1:00:d5:92:4a:7a:7c:f0:56:2d:9b:
e4:ad:7f:bb:c6:f6:45:70:18:8e:3d:14:4b:7c:86:ec:95:4d:
b9:4d:b8:1f:a7:7d:ca:d3:87:1d:ad:2e:95:c6:14:4e:41:b5:
21:67:cd:b6:f9:15:cb:a0:ed:e5:eb:ba:ab:cd:0c:3c:12:e4:
96:73:69:ca:ac:4f:b9:2c:e9:87:e4:69:1b:3e:c0:4d:c1:cf:
e7:5e:d1:ec:9b:e1:9c:c4:59:b7:34:b1:f8:0d:f0:fd:4a:4d:
7d:c1:d0:72:26:ba:80:1a:6a:f5:94:27:7a:e5:cb:54:70:55:
3a:d0:b3:48:b2:38:5b:7f:95:5d:23:ed:67:d0:03:7b:e1:a8:
8a:00:25:9a:99:15:fb:81:56:f7:87:e8:8a:c0:b8:1a:da:ff:
00:23:ca:4b:5d:5a:ce:b0:61:9c:2f:17:47:d1:b5:b6:57:c9:
d5:b0:8b:39:29:38:80:8d:67:c5:bc:1d:11:e4:e7:25:95:a9:
43:9b:a8:6a:22:52:78:c3:42:43:fa:bb:eb:46:8a:73:fc:b9:
bf:50:88:8f:98:3a:f1:04:ac:dc:36:03:cd:b0:ca:d6:d5:b4:
ed:72:d0:35:eb:e9:95:da:86:55:be:82:f2:45:7b:ad:27:c3:
1b:05:ea:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZzPT4AvCxydCvJeccqHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWY3MmYwZmFjZjUyNzA1NzI3YzAzOWJkYzFmYmI3Y2M5
N2Q0MjgwHhcNMjUxMDI3MTYwMTI4WhcNMjUxMDI4MTYwMTI4WjAzMTEwLwYDVQQD
EyhlZGM0N2U0NTQ1OGQ1NTQxNjRjZTM4YWU0MjY0MDkyODlkMGE0Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuImP5hOcbBgDoCSJJrrvN9cHLv1P
UEKlL6lxpbaj27EaOXiXmQ+PI18XIq3WNnI9DwK3In1fCr27NE27kyg5jTk4ttgc
UUQypDM+2DsF0GuYO/J1QioS86iwNxc6pgqq0MwiWAxdm7U8Sky48BeznGzQJkZK
gwJW2+q4A9EdO6y7mdiDMy4ZaiaCe+Tdx5QarZ9l2P4ZzfPO5JgmjDWl4A6Xm7su
znMvkT7dR9Aayfbe0OpTwxdYDO2ux6kEEoZGwF2qnGse7DluBOVi77rXyIbN7ygg
mCk1dW4OMvee/WuoqCuguNMexezqWuYEu+qmEv3CRi0V55ekeVs4eOnGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3EfkVFjVVBZM44rkJkCSidCkzOMB8GA1UdIwQY
MBaAFN1fcvD6z1JwVyfAOb3B+7fMl9QoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTIt
Mjg4MDYxMjcwNWVlLzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTItMjg4MDYxMjcwNWVl
LzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4nrXqQGg
HPEA1ZJKenzwVi2b5K1/u8b2RXAYjj0US3yG7JVNuU24H6d9ytOHHa0ulcYUTkG1
IWfNtvkVy6Dt5eu6q80MPBLklnNpyqxPuSzph+RpGz7ATcHP517R7JvhnMRZtzSx
+A3w/UpNfcHQcia6gBpq9ZQneuXLVHBVOtCzSLI4W3+VXSPtZ9ADe+GoigAlmpkV
+4FW94foisC4Gtr/ACPKS11azrBhnC8XR9G1tlfJ1bCLOSk4gI1nxbwdEeTnJZWp
Q5uoaiJSeMNCQ/q760aKc/y5v1CIj5g68QSs3DYDzbDK1tW07XLQNevpldqGVb6C
8kV7rSfDGwXqZw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 02:29:50 2025 by rpki-client