Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: 3I75yY2B75qL7qpYN3VxaZ2i5QcuN1RW8i3eANnvrwg=
Subject key identifier: 89:24:B8:36:2D:E7:F0:3F:D6:E3:05:40:E3:B5:60:DE:F6:5D:BF:CF
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019A2741E246E75A115D1E95632E8844CD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0D27
Signing time: Mon 27 Oct 2025 20:00:20 +0000
Manifest this update: Mon 27 Oct 2025 20:00:20 +0000
Manifest next update: Tue 28 Oct 2025 20:00:20 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: 3x9Pcw/EiSjQBw2Izxd76A9HWIVp9IfS3FoFh6xenrc=)
2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:e2:46:e7:5a:11:5d:1e:95:63:2e:88:44:cd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Oct 27 20:00:20 2025 GMT
Not After : Oct 28 20:00:20 2025 GMT
Subject: CN=8924b8362de7f03fd6e30540e3b560def65dbfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:8d:01:7f:9e:38:9a:2d:85:a0:ad:31:74:
c5:b2:4f:fc:4c:9a:39:05:1d:7d:f3:4d:e3:a6:18:
7a:24:eb:3d:53:dc:68:8d:37:08:24:a3:50:d1:5c:
d7:27:2f:be:ab:bc:a3:70:9b:fa:62:16:e1:98:70:
98:4f:c9:44:9c:45:d5:1d:ea:15:9d:ac:5c:0c:83:
96:40:51:90:cd:49:84:7a:bb:14:59:6d:cf:cf:f3:
cc:cb:ee:39:80:c1:6d:92:3d:ae:85:e7:88:e0:f4:
b2:67:93:83:fc:df:67:b7:9a:2c:82:20:a2:0b:c8:
b1:8f:08:13:aa:51:af:c6:ee:b4:fb:3f:6e:6c:41:
3a:6a:7d:d3:58:fe:80:ca:56:c5:1c:08:db:f7:b3:
ee:2a:32:e5:e6:7e:fe:af:cc:29:c5:04:80:7a:d5:
05:40:87:e1:c5:f1:19:43:c2:18:40:60:6d:9a:2b:
20:da:45:0e:16:ce:f0:51:a8:63:16:0f:ce:15:41:
6b:47:5f:94:36:9b:bf:b6:db:ed:ec:2d:81:d8:a7:
3a:02:72:fb:51:d0:f0:94:36:62:91:8b:49:6a:93:
f4:fe:11:39:e8:62:32:82:0c:95:34:74:9b:ae:f7:
aa:2e:0c:c7:ba:26:a8:cd:72:8d:17:56:c7:26:52:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:B8:36:2D:E7:F0:3F:D6:E3:05:40:E3:B5:60:DE:F6:5D:BF:CF
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:02:12:8b:b3:92:2e:d6:a7:98:53:23:55:37:a5:02:77:ac:
b0:bc:08:36:36:0e:66:88:b4:c0:0b:fc:b2:cb:87:3b:63:27:
fc:6f:4c:b4:0a:6c:8b:b6:c5:09:4e:2b:84:45:e4:ae:e4:a0:
2a:e7:af:4e:fd:33:e3:6e:46:cf:6b:e1:e4:97:35:eb:22:a2:
79:5d:76:31:db:11:e8:9c:11:b2:87:93:6b:6c:04:d0:a1:02:
f7:74:ac:61:db:4f:dd:96:6e:0b:a9:1f:aa:15:4e:9d:cb:b3:
10:71:a1:94:8d:2f:d4:d8:93:53:09:37:32:cb:04:35:d1:be:
c8:fb:ad:05:75:df:d8:c6:5d:75:8a:12:a5:5f:4b:3f:c9:d5:
1e:3b:7f:00:3d:f8:e7:15:82:af:6f:67:d9:bd:7a:ab:c1:e1:
1b:20:0e:e6:57:1e:4e:e6:0d:f1:31:70:49:93:0c:1e:23:b2:
23:f8:bf:f4:67:33:dc:89:14:4b:6e:2a:29:fe:e8:ce:b3:e7:
98:2c:83:ec:44:f0:62:2d:91:8f:df:37:8b:d1:b4:bc:17:a3:
2e:9f:9d:4b:24:24:d7:08:06:cd:29:6f:50:ac:28:2e:4f:e6:
3a:23:2c:31:e1:1d:23:a6:2f:49:13:de:71:ba:7c:e9:1d:4a:
96:f5:9d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZonQeJG51oRXR6VYy6IRM2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5
YWVmMDYwHhcNMjUxMDI3MjAwMDIwWhcNMjUxMDI4MjAwMDIwWjAzMTEwLwYDVQQD
Eyg4OTI0YjgzNjJkZTdmMDNmZDZlMzA1NDBlM2I1NjBkZWY2NWRiZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkSNAX+eOJothaCtMXTFsk/8TJo5
BR19803jphh6JOs9U9xojTcIJKNQ0VzXJy++q7yjcJv6YhbhmHCYT8lEnEXVHeoV
naxcDIOWQFGQzUmEersUWW3Pz/PMy+45gMFtkj2uheeI4PSyZ5OD/N9nt5osgiCi
C8ixjwgTqlGvxu60+z9ubEE6an3TWP6AylbFHAjb97PuKjLl5n7+r8wpxQSAetUF
QIfhxfEZQ8IYQGBtmisg2kUOFs7wUahjFg/OFUFrR1+UNpu/ttvt7C2B2Kc6AnL7
UdDwlDZikYtJapP0/hE56GIyggyVNHSbrveqLgzHuiaozXKNF1bHJlJTCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkkuDYt5/A/1uMFQOO1YN72Xb/PMB8GA1UdIwQY
MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt
ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi
LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwISi7OS
LtanmFMjVTelAnessLwINjYOZoi0wAv8ssuHO2Mn/G9MtApsi7bFCU4rhEXkruSg
KuevTv0z425Gz2vh5Jc16yKieV12MdsR6JwRsoeTa2wE0KEC93SsYdtP3ZZuC6kf
qhVOncuzEHGhlI0v1NiTUwk3MssENdG+yPutBXXf2MZddYoSpV9LP8nVHjt/AD34
5xWCr29n2b16q8HhGyAO5lceTuYN8TFwSZMMHiOyI/i/9Gcz3IkUS24qKf7ozrPn
mCyD7ETwYi2Rj983i9G0vBejLp+dSyQk1wgGzSlvUKwoLk/mOiMsMeEdI6YvSRPe
cbp86R1KlvWdwA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:06:17 2025 by rpki-client