Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: SFB4jbY4GbCdRoVbjVbQrfjVsa4LtPATprww2j0U+Og=
Subject key identifier: 3D:80:3B:C3:47:D8:B4:DB:18:0F:A7:58:77:34:B2:48:82:01:18:44
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 019A112877AF2B58C87DD9824B803D072189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 1325
Signing time: Thu 23 Oct 2025 13:00:56 +0000
Manifest this update: Thu 23 Oct 2025 13:00:56 +0000
Manifest next update: Fri 24 Oct 2025 13:00:56 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: pAsFVO1C0iXdqRq64gsmmwHBTu4HjRCk4GEOpVagCA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:28:77:af:2b:58:c8:7d:d9:82:4b:80:3d:07:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Oct 23 13:00:56 2025 GMT
Not After : Oct 24 13:00:56 2025 GMT
Subject: CN=3d803bc347d8b4db180fa7587734b24882011844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:12:b5:32:e6:9b:4d:f2:a3:0f:65:6f:03:
fb:55:83:ac:5b:a3:76:85:fb:cb:34:f8:5d:85:06:
55:b4:c8:c1:a1:ed:aa:d6:6b:d1:37:01:5f:f9:0e:
77:ef:07:dd:d1:1b:e1:b2:1e:57:58:06:a2:fa:b5:
80:4a:2b:76:58:d5:86:63:7e:d2:13:fd:50:60:07:
6d:49:8f:b2:f8:23:31:4d:f8:f4:00:8b:9d:89:f3:
45:d5:75:45:c6:ce:98:e4:a4:60:24:7f:be:11:90:
3d:a0:f8:3a:23:f9:a8:d0:f2:64:b6:d5:bb:2d:e1:
20:d9:e9:9b:d2:8f:e4:15:81:22:51:47:5f:4a:5e:
c7:4b:15:a6:fa:cb:3c:f4:d9:19:c9:36:ac:66:a5:
30:c7:89:16:18:c2:ae:71:a2:64:d5:e3:af:c4:55:
ce:4b:21:d5:ff:5d:f6:d1:3e:6d:a9:cb:58:8e:47:
bc:c4:bd:57:ea:b0:1a:71:ff:57:7a:7b:9c:15:7d:
b1:26:2d:00:bd:ea:5b:1d:09:8e:f4:54:35:ff:77:
14:c8:b8:f2:1a:04:2f:96:33:b2:99:6d:5d:9e:d5:
e8:82:c8:98:ba:5c:dd:bc:b2:3b:07:22:b6:84:f4:
ed:ee:0f:34:aa:ef:9f:e7:f7:22:6a:c5:0d:41:ed:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:80:3B:C3:47:D8:B4:DB:18:0F:A7:58:77:34:B2:48:82:01:18:44
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9b:12:da:55:1d:49:54:a5:6c:aa:05:24:b9:a5:5f:1f:a2:
4b:4d:70:c7:ed:32:97:21:2f:c0:c2:16:45:d7:62:80:5e:ca:
a7:b6:27:c6:9d:cf:02:10:95:52:99:1a:62:56:b9:51:86:66:
77:5b:16:54:24:0a:88:43:92:01:ce:a6:d8:ce:19:dc:9e:c2:
f4:b1:d4:2c:43:a8:d1:f7:34:ea:3b:2f:2a:00:10:dc:c3:e5:
eb:58:51:f6:80:dc:3a:42:70:67:ce:7f:0a:98:ad:84:0d:53:
18:ce:60:d9:6d:45:3d:4b:2c:1b:de:2b:48:83:19:3b:25:e3:
aa:c8:bb:50:77:66:0c:a8:a1:fb:ac:19:24:f6:02:0a:5a:84:
df:30:46:aa:c7:4d:74:be:bf:01:0e:f3:88:b2:4a:bb:87:25:
d5:03:d8:ff:dc:aa:b0:13:16:3a:a7:d4:c0:d0:e1:74:fd:6f:
2d:aa:08:b5:96:97:39:ec:77:91:bf:62:ba:ca:51:a6:74:46:
a4:81:00:37:3c:88:f0:fa:83:d1:25:85:5e:2c:ce:e5:24:2a:
a6:6e:4c:86:ea:ce:d1:be:1d:04:a4:2b:1d:2d:7d:38:0d:b5:
cf:be:3a:78:90:09:af:2b:42:39:98:e8:f5:d7:21:c9:10:c8:
5a:62:e8:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoRKHevK1jIfdmCS4A9ByGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNzdkMTczZjRlYTNhNGY5YjI1M2VlNTJlYjllZTgxNDZi
MTBlM2UwHhcNMjUxMDIzMTMwMDU2WhcNMjUxMDI0MTMwMDU2WjAzMTEwLwYDVQQD
EygzZDgwM2JjMzQ3ZDhiNGRiMTgwZmE3NTg3NzM0YjI0ODgyMDExODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H4StTLmm03yow9lbwP7VYOsW6N2
hfvLNPhdhQZVtMjBoe2q1mvRNwFf+Q537wfd0Rvhsh5XWAai+rWASit2WNWGY37S
E/1QYAdtSY+y+CMxTfj0AIudifNF1XVFxs6Y5KRgJH++EZA9oPg6I/mo0PJkttW7
LeEg2emb0o/kFYEiUUdfSl7HSxWm+ss89NkZyTasZqUwx4kWGMKucaJk1eOvxFXO
SyHV/1320T5tqctYjke8xL1X6rAacf9XenucFX2xJi0AvepbHQmO9FQ1/3cUyLjy
GgQvljOymW1dntXogsiYulzdvLI7ByK2hPTt7g80qu+f5/ciasUNQe1bgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2AO8NH2LTbGA+nWHc0skiCARhEMB8GA1UdIwQY
MBaAFLN30XP06jpPmyU+5S657oFGsQ4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wZTIxNDYtOTc4YS00MzlmLTk1NzAt
Nzk2MDk4NWQzNWEzLzEvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wZTIxNDYtOTc4YS00MzlmLTk1NzAtNzk2MDk4NWQzNWEz
LzEvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5sS2lUd
SVSlbKoFJLmlXx+iS01wx+0ylyEvwMIWRddigF7Kp7Ynxp3PAhCVUpkaYla5UYZm
d1sWVCQKiEOSAc6m2M4Z3J7C9LHULEOo0fc06jsvKgAQ3MPl61hR9oDcOkJwZ85/
CpithA1TGM5g2W1FPUssG94rSIMZOyXjqsi7UHdmDKih+6wZJPYCClqE3zBGqsdN
dL6/AQ7ziLJKu4cl1QPY/9yqsBMWOqfUwNDhdP1vLaoItZaXOex3kb9iuspRpnRG
pIEANzyI8PqD0SWFXizO5SQqpm5MhurO0b4dBKQrHS19OA21z746eJAJrytCOZjo
9dchyRDIWmLoSg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:43:24 2025 by rpki-client