Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: 59pAZdGoP6tRN+rZRVz9KabgtAW0gcEYbYhdjyhB3Sk=
Subject key identifier: 14:83:36:9A:C7:6D:44:3D:F2:5A:BD:5B:B1:C2:59:4F:D4:3D:63:EB
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019A1EE38ACEAA7EE2197069A0AC93E72BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 1436
Signing time: Sun 26 Oct 2025 05:00:19 +0000
Manifest this update: Sun 26 Oct 2025 05:00:19 +0000
Manifest next update: Mon 27 Oct 2025 05:00:19 +0000
Files and hashes: 1: 0HqlbKdQQOK20VPAmPUPyQddTXs.roa (hash: aRBFmT811p8OCKoTireOuzqal/+u+Ljk+6nGgNDmrp4=)
2: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
3: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: btI0tn8tddwrBW932gk9iKiNF7MyKE0EuRaiRoW5iFs=)
4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
5: LMWHVctmfvvA2wgdJVAHRgQ50TI.roa (hash: 4Qw8ZH0YeLtu3JL9HyfQJb52vaJMYGvqmUzqj7paaS8=)
6: RXNrdOw21efpx6l5cQgC8bq0olI.roa (hash: 8j6x5dvkDJAZguY7H+pN2Kt8JqRUnnSH6EpokJsOPmY=)
7: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
8: qNl-Q8HhmrUArxLKQehroWC5qDc.roa (hash: 9pycVyvA/LfKV0R0Bhd4fllbZltDwLcpn1H2WIOi7gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:8a:ce:aa:7e:e2:19:70:69:a0:ac:93:e7:2b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Oct 26 05:00:19 2025 GMT
Not After : Oct 27 05:00:19 2025 GMT
Subject: CN=1483369ac76d443df25abd5bb1c2594fd43d63eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:32:d3:a3:93:22:32:95:c1:a4:6c:b9:e3:
b5:31:17:a7:b2:7c:25:b4:92:95:52:ab:51:43:34:
f6:21:58:fa:cd:be:e4:0f:4b:68:4f:4b:fe:b7:51:
d2:e5:55:9c:f6:01:1d:69:0e:3c:c3:b1:22:cf:fd:
23:3a:07:9a:d1:a7:84:94:51:f2:a5:b1:b0:f8:8c:
a1:c5:96:3d:3c:d6:b5:42:55:f9:06:ea:2b:b0:d6:
47:96:21:ce:ad:c0:e1:f1:38:35:ad:4c:d8:04:3f:
37:00:2e:dc:1d:12:30:4b:07:e9:cd:45:d7:8f:57:
e9:f0:df:b1:79:57:5d:c4:79:fe:92:d6:4a:c9:d2:
d3:72:05:87:1a:2f:41:71:c0:de:51:95:35:03:0f:
54:ec:d4:84:15:6b:98:5b:67:5e:99:21:0a:ea:ce:
e7:35:1e:f6:2a:67:17:f9:c4:a9:d1:97:48:66:ea:
82:62:f9:bd:83:5c:37:6d:a8:b6:d0:3b:00:60:07:
ba:a0:a0:79:73:03:e1:c5:7e:0c:5e:85:87:b6:5d:
9b:7b:ab:c8:34:d8:57:f9:43:c0:92:bf:68:db:03:
fc:88:27:44:ba:a6:84:34:63:db:db:7a:73:62:bf:
f7:82:c0:c7:26:b9:fb:3e:fe:3d:97:28:85:80:7d:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:83:36:9A:C7:6D:44:3D:F2:5A:BD:5B:B1:C2:59:4F:D4:3D:63:EB
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ab:4d:ca:68:8c:d6:53:9c:ee:d4:bc:4a:c3:0e:85:15:cb:
87:a3:8e:7c:45:c3:d8:9b:91:97:18:10:b6:b1:94:be:bb:86:
8e:ef:32:ea:f2:7a:2e:01:05:a2:3d:16:e9:a7:6a:54:67:25:
44:a4:37:87:56:33:16:b3:6c:d0:4e:6e:c4:7d:0e:03:23:e1:
8d:ff:8a:bd:f1:c0:0e:b1:a9:75:b4:84:ee:4c:5d:d0:12:27:
be:b6:a6:ee:b5:98:12:d0:8e:18:03:eb:c7:b5:ba:3b:b1:95:
dc:81:63:99:9b:76:0e:93:20:ea:bb:f3:72:b9:75:0e:14:bf:
73:25:b2:a9:d1:99:26:9d:fa:69:25:1f:ea:a0:d3:80:99:7a:
d8:5c:5e:e3:d1:96:7f:f2:ba:81:01:f8:98:d1:e4:f0:fa:c1:
3a:7c:cd:e6:a7:15:fb:5f:a5:08:2c:b8:51:f3:28:de:06:03:
6d:a4:c7:57:ab:0f:a5:bd:19:81:de:c6:15:3f:b6:37:3a:3d:
ef:1d:9a:bf:05:f0:9b:74:e4:34:ff:65:bb:7b:08:cb:94:1e:
e5:d7:93:c2:b1:bb:dd:6f:de:b9:62:8b:c1:42:10:e0:2b:bb:
b2:d4:05:85:23:30:5b:0d:7c:e8:d3:2a:c1:5c:f0:4a:41:2d:
77:85:d9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoe44rOqn7iGXBpoKyT5yvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5
MDZjZWUwHhcNMjUxMDI2MDUwMDE5WhcNMjUxMDI3MDUwMDE5WjAzMTEwLwYDVQQD
EygxNDgzMzY5YWM3NmQ0NDNkZjI1YWJkNWJiMWMyNTk0ZmQ0M2Q2M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxQy06OTIjKVwaRsueO1MRensnwl
tJKVUqtRQzT2IVj6zb7kD0toT0v+t1HS5VWc9gEdaQ48w7Eiz/0jOgea0aeElFHy
pbGw+IyhxZY9PNa1QlX5BuorsNZHliHOrcDh8Tg1rUzYBD83AC7cHRIwSwfpzUXX
j1fp8N+xeVddxHn+ktZKydLTcgWHGi9BccDeUZU1Aw9U7NSEFWuYW2demSEK6s7n
NR72KmcX+cSp0ZdIZuqCYvm9g1w3bai20DsAYAe6oKB5cwPhxX4MXoWHtl2be6vI
NNhX+UPAkr9o2wP8iCdEuqaENGPb23pzYr/3gsDHJrn7Pv49lyiFgH1SswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSDNprHbUQ98lq9W7HCWU/UPWPrMB8GA1UdIwQY
MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt
MDkwYzQ2ZTlmMmVkLzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk
LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6tNymiM
1lOc7tS8SsMOhRXLh6OOfEXD2JuRlxgQtrGUvruGju8y6vJ6LgEFoj0W6adqVGcl
RKQ3h1YzFrNs0E5uxH0OAyPhjf+KvfHADrGpdbSE7kxd0BInvram7rWYEtCOGAPr
x7W6O7GV3IFjmZt2DpMg6rvzcrl1DhS/cyWyqdGZJp36aSUf6qDTgJl62Fxe49GW
f/K6gQH4mNHk8PrBOnzN5qcV+1+lCCy4UfMo3gYDbaTHV6sPpb0Zgd7GFT+2Nzo9
7x2avwXwm3TkNP9lu3sIy5Qe5deTwrG73W/euWKLwUIQ4Cu7stQFhSMwWw186NMq
wVzwSkEtd4XZ1w==
-----END CERTIFICATE-----
Generated at Sun Oct 26 11:07:04 2025 by rpki-client