Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier: zwQCBTFsZzdkjBSEB+hxhiuZfguVszT5cfywa9HsV5s=
Subject key identifier: A5:9B:A4:56:8B:6A:00:8C:C6:C5:28:BD:1D:CB:2F:62:4A:F5:64:F4
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer: /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial: 019A725C5F6BF019A4140D77B0D4A214B351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number: 036E
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: Ymwc7rL/gZAad+Ya7PR0hn03E4kWLQEuXQBE3w1wNKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5f:6b:f0:19:a4:14:0d:77:b0:d4:a2:14:b3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=a59ba4568b6a008cc6c528bd1dcb2f624af564f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1e:e5:b7:8f:81:b7:ec:f7:ef:da:ec:b2:d8:
62:d0:ab:c0:c7:ac:7c:23:c4:84:a5:de:14:03:e0:
6b:31:b3:1c:93:81:4c:f2:63:da:13:ee:69:3f:14:
a6:07:6d:3b:65:56:d1:28:43:45:b9:38:f0:a2:ee:
a0:a8:71:3e:cf:5d:19:84:be:2f:0c:ec:1e:ee:9e:
5a:6e:23:a2:da:50:80:fa:c7:36:14:ee:35:9a:04:
c1:95:f4:84:a9:af:fe:32:3f:10:8d:5c:6c:49:f2:
e2:70:c5:d8:bc:15:3a:93:06:dd:5b:47:8b:ab:69:
b8:27:75:6c:dc:a4:1b:35:5d:fa:32:ea:0f:de:b7:
1c:20:e4:be:00:90:15:91:58:0a:88:33:a6:09:53:
0e:f6:17:c7:38:7f:60:96:5a:07:3f:61:08:ff:7f:
e9:90:98:e4:4d:12:b9:5c:a5:60:69:82:80:ff:20:
e0:11:83:54:5b:9d:a4:e6:c8:35:48:c9:1d:4a:46:
be:55:a5:20:db:5a:b2:70:e4:08:4c:76:d2:bf:28:
c9:65:21:b4:d5:41:b2:f6:90:61:c7:ae:40:ca:d5:
a4:3f:4e:ad:08:e9:45:3a:f3:75:7f:c4:bd:7a:5a:
f3:88:e9:74:a9:ae:c8:df:31:56:21:b3:23:c0:97:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:A4:56:8B:6A:00:8C:C6:C5:28:BD:1D:CB:2F:62:4A:F5:64:F4
X509v3 Authority Key Identifier:
keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cb:c4:96:ad:f9:71:08:99:4a:a3:18:79:1a:84:79:b2:34:
70:24:da:0c:6a:03:4d:5b:a5:6d:c8:fd:19:da:e9:cf:c2:79:
b6:34:e9:56:b8:e6:88:92:80:52:ff:c6:56:fa:bc:fa:e8:81:
9a:e9:af:8e:54:17:d5:a3:0f:7a:50:5d:40:49:45:d1:24:d6:
27:e5:29:99:1c:ae:23:3e:52:db:73:a1:f9:5d:bf:cd:b4:97:
9a:99:55:a3:5c:35:ff:e4:15:06:f2:df:71:40:a7:07:bb:71:
5a:b7:da:53:86:ac:f3:47:c8:22:8e:2a:47:51:93:28:f9:73:
6e:e1:27:29:3a:c8:03:20:9f:30:b7:87:f8:25:38:b2:9d:8e:
e4:c4:f6:a5:40:27:e2:18:f3:5d:dd:84:a5:68:89:39:a8:5e:
1a:fd:4f:58:1a:64:c6:89:9f:ef:42:c4:0f:7d:e0:85:cc:93:
9b:96:7f:5b:fd:15:a3:8b:18:21:85:95:18:b0:d6:4c:cd:4a:
a3:b5:31:32:46:43:ae:e2:67:38:53:e5:cf:6d:ae:1a:18:03:
d7:78:a0:9f:73:5c:99:6f:f6:8f:1a:b6:71:28:4d:6d:3f:dc:
0f:8e:1f:8c:d8:e7:84:d6:ab:4c:d4:7c:34:16:99:08:11:9b:
ab:67:f5:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXF9r8BmkFA13sNSiFLNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2QzYTk4NDk1YzI3YjljZTM1MGFlNWI4OWY5OTE0NGIw
YTRjOWQwHhcNMjUxMTExMTAwMDQ3WhcNMjUxMTEyMTAwMDQ3WjAzMTEwLwYDVQQD
EyhhNTliYTQ1NjhiNmEwMDhjYzZjNTI4YmQxZGNiMmY2MjRhZjU2NGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R7lt4+Bt+z379rssthi0KvAx6x8
I8SEpd4UA+BrMbMck4FM8mPaE+5pPxSmB207ZVbRKENFuTjwou6gqHE+z10ZhL4v
DOwe7p5abiOi2lCA+sc2FO41mgTBlfSEqa/+Mj8QjVxsSfLicMXYvBU6kwbdW0eL
q2m4J3Vs3KQbNV36MuoP3rccIOS+AJAVkVgKiDOmCVMO9hfHOH9glloHP2EI/3/p
kJjkTRK5XKVgaYKA/yDgEYNUW52k5sg1SMkdSka+VaUg21qycOQITHbSvyjJZSG0
1UGy9pBhx65AytWkP06tCOlFOvN1f8S9elrziOl0qa7I3zFWIbMjwJe+ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWbpFaLagCMxsUovR3LL2JK9WT0MB8GA1UdIwQY
MBaAFN49OphJXCe5zjUK5bifmRRLCkydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYjQxMjctOGUwNi00N2Q5LWJkZjEt
Yzg4OGIyMDQ4OWZjLzEvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jYjQxMjctOGUwNi00N2Q5LWJkZjEtYzg4OGIyMDQ4OWZj
LzEvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMvElq35
cQiZSqMYeRqEebI0cCTaDGoDTVulbcj9Gdrpz8J5tjTpVrjmiJKAUv/GVvq8+uiB
mumvjlQX1aMPelBdQElF0STWJ+UpmRyuIz5S23Oh+V2/zbSXmplVo1w1/+QVBvLf
cUCnB7txWrfaU4as80fIIo4qR1GTKPlzbuEnKTrIAyCfMLeH+CU4sp2O5MT2pUAn
4hjzXd2EpWiJOaheGv1PWBpkxomf70LED33ghcyTm5Z/W/0Vo4sYIYWVGLDWTM1K
o7UxMkZDruJnOFPlz22uGhgD13ign3NcmW/2jxq2cShNbT/cD44fjNjnhNarTNR8
NBaZCBGbq2f1kA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:38 2025 by rpki-client