Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: CSUNeG2xe31iNN6/mb18Z/ymrPeB/lSK7jXxe/tCim8=
Subject key identifier: 7B:F4:EC:BB:68:CA:B6:5A:69:2C:7A:03:C2:2E:68:1A:0C:B9:CF:98
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019A71EEC0F906AB4804BA798507D4231611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 1600
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: 2Jbl2mZJFtGMubWLTuo5o8lZdJvUCbtk5/ARyvaUqFY=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c0:f9:06:ab:48:04:ba:79:85:07:d4:23:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=7bf4ecbb68cab65a692c7a03c22e681a0cb9cf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:74:74:69:2e:b9:bd:ec:1e:3d:af:38:70:
c9:a1:dd:ca:60:77:64:23:37:9d:88:86:0f:15:a5:
6e:63:18:45:3b:67:e6:3e:6c:e9:92:f6:dd:2c:60:
8a:ca:d4:6c:2a:50:76:43:13:9a:96:ab:29:e8:e3:
30:24:2a:f0:a3:3e:e5:9d:b9:b3:ce:02:43:b8:9a:
9a:96:b7:f3:0a:36:9a:20:85:7a:cb:cf:c4:ad:ae:
ae:ea:1c:d2:22:76:48:c3:0a:72:ca:cb:16:34:b2:
dc:90:df:b0:d5:61:47:df:f3:ce:69:0c:63:eb:47:
c5:9a:c8:57:81:5d:70:48:cd:d5:27:00:6f:da:05:
5f:c4:2a:d1:e2:f0:91:f2:71:e7:fe:83:de:f5:e0:
b1:66:42:19:77:05:b5:a8:24:c5:63:24:57:38:3e:
d6:86:16:bd:3a:8b:a0:eb:dc:08:0e:9d:df:0f:b6:
be:91:e4:4f:23:3c:2b:f9:99:86:af:0a:3e:6b:7e:
64:9d:74:fd:1f:98:89:f3:43:ec:33:07:af:e7:f1:
d8:65:14:bf:c6:3b:16:1f:8f:f5:d8:fc:1b:6f:5f:
d8:44:0c:cc:e1:e8:58:74:e6:59:9d:ee:35:a4:7e:
ae:9b:ab:37:84:7d:e7:99:30:58:7a:0a:fc:02:ab:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:EC:BB:68:CA:B6:5A:69:2C:7A:03:C2:2E:68:1A:0C:B9:CF:98
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:33:dd:a7:ad:a7:81:fc:1d:f2:a8:64:a6:1c:6a:59:62:
5f:53:41:6b:13:68:bc:f1:9a:03:c6:9c:6d:d2:74:63:97:32:
a7:90:cf:b0:74:7f:6c:65:78:45:f5:2d:32:6a:5b:36:1e:b7:
95:28:58:23:96:08:48:6a:a3:59:f3:31:fa:5a:af:9a:72:be:
13:21:ff:ec:fd:4c:fd:9e:57:12:2a:54:87:25:e9:81:bf:7b:
b2:83:d1:8b:1b:16:a8:a2:8e:a5:71:dc:08:da:f6:4f:f4:38:
5a:f9:dc:ab:dc:8a:2c:29:5e:ac:b2:17:c8:1e:30:7c:78:9f:
76:16:f6:d2:cd:fd:41:29:1a:f1:fd:ec:32:e1:13:46:c8:00:
6f:55:52:ac:b7:eb:db:d5:6c:f6:3e:61:cb:cf:f4:3b:ca:64:
87:5f:88:47:65:07:20:34:e2:72:60:0c:aa:ea:df:8d:56:82:
dc:7f:e3:6d:40:56:25:a0:28:a0:a2:66:cd:8e:e9:3f:b2:a9:
35:03:19:1e:10:96:60:49:fa:8a:10:e5:5e:77:bf:cd:ed:83:
e8:02:8b:67:65:88:ec:47:44:e0:10:98:71:5d:33:ca:66:58:
31:93:f3:0c:4e:d5:82:aa:82:da:38:d9:de:4c:d7:71:e6:98:
6b:0b:bd:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sD5BqtIBLp5hQfUIxYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi
NzgwNTgwHhcNMjUxMTExMDgwMTAzWhcNMjUxMTEyMDgwMTAzWjAzMTEwLwYDVQQD
Eyg3YmY0ZWNiYjY4Y2FiNjVhNjkyYzdhMDNjMjJlNjgxYTBjYjljZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAR0dGkuub3sHj2vOHDJod3KYHdk
IzediIYPFaVuYxhFO2fmPmzpkvbdLGCKytRsKlB2QxOalqsp6OMwJCrwoz7lnbmz
zgJDuJqalrfzCjaaIIV6y8/Era6u6hzSInZIwwpyyssWNLLckN+w1WFH3/POaQxj
60fFmshXgV1wSM3VJwBv2gVfxCrR4vCR8nHn/oPe9eCxZkIZdwW1qCTFYyRXOD7W
hha9Ooug69wIDp3fD7a+keRPIzwr+ZmGrwo+a35knXT9H5iJ80PsMwev5/HYZRS/
xjsWH4/12Pwbb1/YRAzM4ehYdOZZne41pH6um6s3hH3nmTBYegr8AqsjKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv07LtoyrZaaSx6A8IuaBoMuc+YMB8GA1UdIwQY
MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt
OWNkM2M2YTE4ODY2LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2
LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7gz3aet
p4H8HfKoZKYcalliX1NBaxNovPGaA8acbdJ0Y5cyp5DPsHR/bGV4RfUtMmpbNh63
lShYI5YISGqjWfMx+lqvmnK+EyH/7P1M/Z5XEipUhyXpgb97soPRixsWqKKOpXHc
CNr2T/Q4Wvncq9yKLClerLIXyB4wfHifdhb20s39QSka8f3sMuETRsgAb1VSrLfr
29Vs9j5hy8/0O8pkh1+IR2UHIDTicmAMqurfjVaC3H/jbUBWJaAooKJmzY7pP7Kp
NQMZHhCWYEn6ihDlXne/ze2D6AKLZ2WI7EdE4BCYcV0zymZYMZPzDE7VgqqC2jjZ
3kzXceaYawu9eQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:58 2025 by rpki-client