Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: beNuRZ9PGjx87mWJNjhXQ5Irn5saEDtBTlJWNij5ubc=
Subject key identifier: 3B:DA:39:9B:FA:29:1D:5F:5D:C5:98:66:BF:E1:40:9B:F1:34:13:5E
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019A725C9B63C8D6C158EBE6781E9277AC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1231
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: hOScFgmfZU74OLdvwGAlR/YX1zHeNc1bLilS7/1IaMU=)
2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9b:63:c8:d6:c1:58:eb:e6:78:1e:92:77:ac:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=3bda399bfa291d5f5dc59866bfe1409bf134135e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:fb:e9:09:68:eb:58:48:78:91:a8:df:d0:
c3:d6:95:af:cb:15:65:7f:ef:3c:b9:a0:2b:26:1f:
21:fb:0b:bf:45:db:51:39:a8:b4:30:d3:f5:46:88:
36:af:d5:51:bd:37:59:8b:4c:6e:4c:00:c5:15:b0:
7e:53:11:d8:bf:0e:15:38:32:6b:67:88:a6:a7:9f:
d5:a8:5c:b2:aa:cd:8a:fa:83:2b:47:31:28:3a:00:
3e:dc:bf:75:54:0a:be:92:3d:38:53:2b:cd:b9:9c:
19:a4:99:5a:74:f6:b3:dd:f8:17:b2:82:a7:62:9b:
fb:0e:0a:1d:91:00:04:e4:40:f3:9a:34:9a:de:62:
77:dc:0d:1e:61:8c:65:eb:80:ce:1a:48:8a:74:57:
e4:af:12:c8:da:c5:9f:80:94:d1:69:68:c2:cd:79:
67:e4:35:7a:98:10:6a:9c:07:7a:aa:32:59:3f:33:
e0:92:06:97:7d:5e:d5:56:66:53:7b:c1:71:0d:7c:
d7:84:a8:b6:97:41:31:de:e8:08:09:83:f3:f4:c7:
8f:09:cd:3d:c8:0f:37:42:e5:87:58:9f:3f:23:ab:
09:02:16:fe:c0:0f:ae:a9:91:2a:30:55:bd:d1:d6:
c5:ad:f0:f7:26:29:aa:20:9e:b2:41:20:a2:0a:30:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:39:9B:FA:29:1D:5F:5D:C5:98:66:BF:E1:40:9B:F1:34:13:5E
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4d:3f:49:bf:55:a4:b6:66:33:d1:28:4a:34:77:b6:c1:c0:
f8:d9:9d:0b:f2:70:21:32:4e:c3:d2:76:49:be:4d:06:be:be:
f7:d0:b1:80:4e:d1:8f:1c:44:4d:4b:da:a7:b2:7d:e8:f8:9c:
59:5f:ac:38:ea:e8:a1:08:52:90:90:53:2b:e6:d9:2e:6b:97:
50:06:f7:5a:f4:90:68:1b:06:a9:25:52:60:69:13:a4:63:82:
63:a0:af:e6:36:c7:2e:b9:4d:e4:73:d6:b5:ba:01:66:cd:3f:
1c:8e:4b:dd:8e:c4:4b:3b:bd:83:bc:3e:b0:26:fe:78:45:7d:
47:aa:25:43:3e:7f:0b:f2:77:73:b6:62:8f:4c:cd:51:a8:b3:
ae:66:ea:ec:f6:5a:3b:cf:e4:4f:ab:e3:37:e4:79:50:4b:4c:
55:98:42:73:54:9e:df:ce:ab:88:25:e2:e6:8e:96:41:5c:18:
b2:a8:a4:01:f5:53:42:a6:00:06:f8:12:77:fc:92:bb:6d:97:
eb:a3:21:42:b8:91:cb:8c:5c:88:b9:c1:84:4d:8b:1c:c5:c2:
8b:b9:98:21:8a:a5:73:07:7c:6e:1b:2d:a9:18:d6:2f:68:bc:
6f:ba:84:d2:70:6a:64:ea:12:19:ce:88:d6:05:2c:76:93:72:
0c:32:b4:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJtjyNbBWOvmeB6Sd6xGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk
NGFjNGMwHhcNMjUxMTExMTAwMTAyWhcNMjUxMTEyMTAwMTAyWjAzMTEwLwYDVQQD
EygzYmRhMzk5YmZhMjkxZDVmNWRjNTk4NjZiZmUxNDA5YmYxMzQxMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAX76Qlo61hIeJGo39DD1pWvyxVl
f+88uaArJh8h+wu/RdtROai0MNP1Rog2r9VRvTdZi0xuTADFFbB+UxHYvw4VODJr
Z4imp5/VqFyyqs2K+oMrRzEoOgA+3L91VAq+kj04UyvNuZwZpJladPaz3fgXsoKn
Ypv7DgodkQAE5EDzmjSa3mJ33A0eYYxl64DOGkiKdFfkrxLI2sWfgJTRaWjCzXln
5DV6mBBqnAd6qjJZPzPgkgaXfV7VVmZTe8FxDXzXhKi2l0Ex3ugICYPz9MePCc09
yA83QuWHWJ8/I6sJAhb+wA+uqZEqMFW90dbFrfD3JimqIJ6yQSCiCjCczQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvaOZv6KR1fXcWYZr/hQJvxNBNeMB8GA1UdIwQY
MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt
MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx
LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhU0/Sb9V
pLZmM9EoSjR3tsHA+NmdC/JwITJOw9J2Sb5NBr6+99CxgE7RjxxETUvap7J96Pic
WV+sOOrooQhSkJBTK+bZLmuXUAb3WvSQaBsGqSVSYGkTpGOCY6Cv5jbHLrlN5HPW
tboBZs0/HI5L3Y7ESzu9g7w+sCb+eEV9R6olQz5/C/J3c7Zij0zNUaizrmbq7PZa
O8/kT6vjN+R5UEtMVZhCc1Se386riCXi5o6WQVwYsqikAfVTQqYABvgSd/ySu22X
66MhQriRy4xciLnBhE2LHMXCi7mYIYqlcwd8bhstqRjWL2i8b7qE0nBqZOoSGc6I
1gUsdpNyDDK0Vw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:33 2025 by rpki-client