Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File: 3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier: OGd0Ttum1Fm0zXvwY27t/fqCsuyr5rdCEwxxDj7e1iw=
Subject key identifier: C5:18:F8:04:67:C2:ED:C3:C9:32:EB:96:8D:8F:8C:B1:06:97:88:13
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer: /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial: 019A7301B66DC7EE87EC5C4523DFD0BEB627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number: 06A4
Signing time: Tue 11 Nov 2025 13:01:23 +0000
Manifest this update: Tue 11 Nov 2025 13:01:23 +0000
Manifest next update: Wed 12 Nov 2025 13:01:23 +0000
Files and hashes: 1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: LMD19TP71SQ+BaVf67N9Rg6OXdPXaNkCEAWIxHiOfH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b6:6d:c7:ee:87:ec:5c:45:23:df:d0:be:b6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Validity
Not Before: Nov 11 13:01:23 2025 GMT
Not After : Nov 12 13:01:23 2025 GMT
Subject: CN=c518f80467c2edc3c932eb968d8f8cb106978813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:18:e5:52:30:d7:ab:ae:90:db:80:c2:4e:
5e:6b:55:d3:94:65:4e:af:ca:c0:b8:84:f5:69:71:
4d:31:cc:ff:b1:f1:2d:3e:63:29:c0:8a:d5:48:b8:
d2:6c:fd:51:82:1e:db:d4:be:47:89:51:4a:d1:a8:
b0:eb:64:50:21:ca:9c:1d:09:07:ec:a3:c6:1a:4e:
fd:59:18:89:a8:6e:bf:8a:da:58:f8:28:34:21:40:
7b:dd:f1:2c:a6:c3:7d:2b:3e:f9:78:0b:bb:af:8c:
c1:c1:a4:06:c8:38:d1:46:eb:1a:c7:3d:0b:1a:81:
01:5e:92:05:90:08:82:20:14:7e:79:c4:fa:f5:84:
60:79:c7:29:89:5e:e0:f6:da:86:0b:cf:dd:9b:45:
f5:96:30:57:e4:46:43:61:e6:35:65:d2:20:86:6e:
cf:a9:80:5b:3e:ea:98:ca:8f:2d:3f:1e:3a:78:05:
53:28:34:db:d2:dd:b6:e6:db:34:67:4c:a0:3c:a8:
cb:d5:c6:16:64:f6:e5:99:01:af:df:f3:a3:dd:a2:
b9:89:db:7a:21:88:95:53:bf:a6:a9:d4:99:bf:45:
8e:9c:43:d7:09:05:34:67:46:99:41:ce:d7:a0:57:
01:6a:36:c4:3a:13:80:c3:23:f8:4c:6a:7d:8a:11:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:18:F8:04:67:C2:ED:C3:C9:32:EB:96:8D:8F:8C:B1:06:97:88:13
X509v3 Authority Key Identifier:
keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a9:cf:47:30:2c:c1:ab:e5:9b:0d:37:0c:ba:d4:9d:a0:8d:
e9:b5:30:55:be:5a:6d:47:4b:f2:d6:57:88:3a:f8:6d:20:46:
74:6a:2a:8a:1b:22:46:9f:00:22:d8:63:0f:00:03:b1:3b:67:
99:8c:48:c4:19:61:f5:d5:7d:53:37:38:7a:34:0f:d5:59:29:
4b:7d:c2:b1:0a:ea:35:60:b7:fb:f6:79:49:2e:48:7e:14:b8:
64:c6:13:9d:3c:7e:58:0b:c9:f5:dc:82:ef:84:28:5d:c7:51:
11:86:1c:d9:45:bd:54:80:3f:bd:bf:4f:ad:05:6c:7f:68:9e:
dc:9f:e3:4b:6e:81:58:2b:53:f8:ce:0d:1e:6f:77:46:14:6e:
2e:13:72:d7:84:1f:48:46:69:ff:f8:8c:e2:68:7c:44:18:93:
88:76:16:bd:d2:c6:c6:3d:7a:65:9e:02:b3:6f:32:11:89:01:
20:dd:62:cf:0d:1e:84:bf:3b:4a:22:2b:ef:0c:30:b6:30:46:
20:c5:f1:1b:7b:6a:0e:2f:2e:c4:22:ae:b5:21:1d:87:c2:41:
8b:d4:b9:88:93:35:43:39:c5:89:86:4f:29:34:3a:5f:93:69:
65:f1:d1:d4:2a:ff:f8:d7:da:98:75:1b:d3:28:9f:d3:8f:06:
8f:7f:70:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAbZtx+6H7FxFI9/QvrYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkY2MyZTYxNDgyYzg2NWRjMjUzYzBmYTk0M2UzZGEyY2U5
N2RhMDUwHhcNMjUxMTExMTMwMTIzWhcNMjUxMTEyMTMwMTIzWjAzMTEwLwYDVQQD
EyhjNTE4ZjgwNDY3YzJlZGMzYzkzMmViOTY4ZDhmOGNiMTA2OTc4ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAQY5VIw16uukNuAwk5ea1XTlGVO
r8rAuIT1aXFNMcz/sfEtPmMpwIrVSLjSbP1Rgh7b1L5HiVFK0aiw62RQIcqcHQkH
7KPGGk79WRiJqG6/itpY+Cg0IUB73fEspsN9Kz75eAu7r4zBwaQGyDjRRusaxz0L
GoEBXpIFkAiCIBR+ecT69YRgeccpiV7g9tqGC8/dm0X1ljBX5EZDYeY1ZdIghm7P
qYBbPuqYyo8tPx46eAVTKDTb0t225ts0Z0ygPKjL1cYWZPblmQGv3/Oj3aK5idt6
IYiVU7+mqdSZv0WOnEPXCQU0Z0aZQc7XoFcBajbEOhOAwyP4TGp9ihGbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUY+ARnwu3DyTLrlo2PjLEGl4gTMB8GA1UdIwQY
MBaAFN3MLmFILIZdwlPA+pQ+PaLOl9oFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2N3dVlVZ3NobDNDVThENmxENDlvczZYMmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iZjczNDMtNjVhNC00NzE0LThmOTAt
MzU4ZjU5NTMyMjU4LzEvM2N3dVlVZ3NobDNDVThENmxENDlvczZYMmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iZjczNDMtNjVhNC00NzE0LThmOTAtMzU4ZjU5NTMyMjU4
LzEvM2N3dVlVZ3NobDNDVThENmxENDlvczZYMmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANanPRzAs
wavlmw03DLrUnaCN6bUwVb5abUdL8tZXiDr4bSBGdGoqihsiRp8AIthjDwADsTtn
mYxIxBlh9dV9Uzc4ejQP1VkpS33CsQrqNWC3+/Z5SS5IfhS4ZMYTnTx+WAvJ9dyC
74QoXcdREYYc2UW9VIA/vb9PrQVsf2ie3J/jS26BWCtT+M4NHm93RhRuLhNy14Qf
SEZp//iM4mh8RBiTiHYWvdLGxj16ZZ4Cs28yEYkBIN1izw0ehL87SiIr7wwwtjBG
IMXxG3tqDi8uxCKutSEdh8JBi9S5iJM1QznFiYZPKTQ6X5NpZfHR1Cr/+NfamHUb
0yif048Gj39wcw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:38 2025 by rpki-client