Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: 2sa9sNclV5TNoEe7ocFp0lEtvofFLXHZA1uhVNwna7Y=
Subject key identifier: B7:8E:35:29:A0:D5:28:D6:49:77:B6:46:75:9A:18:3E:7C:EB:8B:2E
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 019A72CA3F8A511444EA45361E66720E163F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 0793
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: xdiPam/7Us63ZCh7jCVqkMjHg6atCRU/o6sSmA+vW84=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3f:8a:51:14:44:ea:45:36:1e:66:72:0e:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=b78e3529a0d528d64977b646759a183e7ceb8b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:46:c3:4d:41:6e:ea:32:c9:5c:8c:1f:b9:
0f:90:1c:37:d1:9c:4f:70:1f:88:a4:7d:64:71:c4:
bc:cf:24:f5:74:e0:c2:f2:ef:93:e7:9c:c5:50:ac:
79:ee:44:d6:1f:65:a9:3c:b1:93:12:50:f2:ba:9e:
99:a4:08:fb:a5:e7:4d:47:99:dd:62:e3:85:59:59:
c1:07:39:e4:ab:27:07:e8:e5:1c:2b:c9:fa:52:57:
f0:a3:de:1f:eb:7d:eb:d7:55:18:b7:60:86:5a:f7:
f6:fe:08:91:13:fc:fa:9e:66:76:76:67:1c:b2:95:
c2:41:de:a1:92:bd:92:08:2e:e2:be:6a:80:d1:26:
ba:13:22:cb:47:4d:6a:80:49:da:97:d2:ac:91:6b:
fd:6b:1c:06:69:f2:c7:89:72:13:0c:d1:b9:d4:dd:
fb:d5:6c:86:e4:c6:97:5d:79:0e:29:fd:01:d2:26:
4f:ba:14:cd:08:5b:ee:66:b2:6e:e9:ff:87:e1:36:
0e:d2:38:5e:48:55:55:bc:bf:03:6a:ec:94:d1:d7:
5a:db:f9:2e:dd:aa:13:f9:da:06:ff:d5:a2:86:f0:
dd:e8:f7:4a:29:da:7d:b5:3c:a5:d2:9f:0e:7e:6b:
36:5a:2a:b5:8c:27:c8:a9:ff:88:c1:5a:b4:46:85:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8E:35:29:A0:D5:28:D6:49:77:B6:46:75:9A:18:3E:7C:EB:8B:2E
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:77:53:da:7c:29:5c:ba:6b:4d:79:75:61:d4:fc:da:db:9f:
59:52:0f:31:ff:2a:40:59:26:f3:de:f7:7f:c9:59:69:00:6b:
84:bb:14:cb:bc:3c:45:09:10:0e:e5:b2:e8:99:d1:99:12:bc:
ec:c8:7e:36:09:4a:e6:c1:c4:57:c3:6c:7d:c2:4a:dd:ae:39:
ae:3d:62:f3:a3:6e:4b:2c:7e:57:0b:81:d3:c4:2d:38:f5:52:
90:76:dd:48:3c:d1:d3:ae:c8:67:f3:05:12:80:4b:ef:99:dd:
1c:68:76:24:34:be:ca:2b:31:3c:aa:6c:5b:44:57:32:c4:e8:
e7:74:47:2e:63:37:87:fb:db:b8:37:7d:fb:bb:62:cb:7d:96:
7f:80:c3:7d:d6:24:d7:53:62:84:e0:ce:a1:0f:bc:66:98:a8:
9d:a4:75:56:91:da:6b:46:b2:61:54:dd:84:f9:a7:86:ab:67:
d7:c9:17:8b:cb:c6:b4:fc:0b:6b:35:f3:89:8d:34:b2:6d:5b:
ae:54:98:80:61:da:ee:e4:c0:23:f8:3e:58:b6:c2:10:71:4c:
fa:cc:c8:90:c4:6f:d4:84:8c:25:83:29:66:49:0c:1c:b5:14:
a1:51:11:62:cc:5f:70:da:1f:da:23:d5:43:db:af:c1:a1:29:
77:46:70:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyj+KURRE6kU2HmZyDhY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMGYzMmU1ZjA5OGI4NmE4Nzk0ODI1YzgxMTIyZGE5NTM0
NjYyODQwHhcNMjUxMTExMTIwMDQ4WhcNMjUxMTEyMTIwMDQ4WjAzMTEwLwYDVQQD
EyhiNzhlMzUyOWEwZDUyOGQ2NDk3N2I2NDY3NTlhMTgzZTdjZWI4YjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KxGw01BbuoyyVyMH7kPkBw30ZxP
cB+IpH1kccS8zyT1dODC8u+T55zFUKx57kTWH2WpPLGTElDyup6ZpAj7pedNR5nd
YuOFWVnBBznkqycH6OUcK8n6Ulfwo94f633r11UYt2CGWvf2/giRE/z6nmZ2dmcc
spXCQd6hkr2SCC7ivmqA0Sa6EyLLR01qgEnal9KskWv9axwGafLHiXITDNG51N37
1WyG5MaXXXkOKf0B0iZPuhTNCFvuZrJu6f+H4TYO0jheSFVVvL8DauyU0dda2/ku
3aoT+doG/9WihvDd6PdKKdp9tTyl0p8Ofms2Wiq1jCfIqf+IwVq0RoUlLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeONSmg1SjWSXe2RnWaGD5864suMB8GA1UdIwQY
MBaAFN8PMuXwmLhqh5SCXIESLalTRmKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTE2MDctOGVmMC00ZWQ1LWE2OGIt
OGIxMmIxZjFiNWFlLzEvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTE2MDctOGVmMC00ZWQ1LWE2OGItOGIxMmIxZjFiNWFl
LzEvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHdT2nwp
XLprTXl1YdT82tufWVIPMf8qQFkm8973f8lZaQBrhLsUy7w8RQkQDuWy6JnRmRK8
7Mh+NglK5sHEV8NsfcJK3a45rj1i86NuSyx+VwuB08QtOPVSkHbdSDzR067IZ/MF
EoBL75ndHGh2JDS+yisxPKpsW0RXMsTo53RHLmM3h/vbuDd9+7tiy32Wf4DDfdYk
11NihODOoQ+8ZpionaR1VpHaa0ayYVTdhPmnhqtn18kXi8vGtPwLazXziY00sm1b
rlSYgGHa7uTAI/g+WLbCEHFM+szIkMRv1ISMJYMpZkkMHLUUoVERYsxfcNof2iPV
Q9uvwaEpd0Zw0g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:46 2025 by rpki-client