Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier: fRA8ykUXSwbzcSp/ntmwb+rp9F9QAEOH2NYFielYETw=
Subject key identifier: 39:45:09:B8:26:2E:6D:DB:5B:D6:9B:3D:66:AE:B2:E0:BE:BD:19:58
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 019A72CA415D72575467660CB321272ABAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: tw31fy1jOwiSha4lUgaanyXz/X986P+ZvvlcgSCOxyU=)
2: FzwFRP4-A3VF1cOjtYqnBZUlK8Y.roa (hash: arVJNSKTx0owboHk87Pz6q3TsmBB0DVqu8a1mnGjuAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:41:5d:72:57:54:67:66:0c:b3:21:27:2a:ba:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=394509b8262e6ddb5bd69b3d66aeb2e0bebd1958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:22:86:20:6b:35:a5:52:6f:03:55:4d:f9:
e0:ae:af:3d:15:e0:77:9c:a5:14:d6:d2:3e:da:0f:
82:e6:af:b9:30:70:d4:58:17:a4:2a:c8:24:3b:09:
66:95:49:4a:e8:5e:6e:44:96:70:1b:89:a7:f6:8d:
28:c3:4a:d4:53:93:b5:9f:bf:f8:75:41:3e:51:48:
d4:8b:36:af:0e:a7:f7:25:2a:3a:6b:98:db:af:47:
a6:05:4a:75:79:f0:08:50:d9:56:03:2a:62:d6:cc:
ac:b3:f0:1c:1a:12:dd:36:72:6b:b0:b0:3c:51:7b:
0f:1b:fd:25:2b:fd:fc:94:22:1e:99:7a:f5:9e:6b:
b3:f6:ac:73:8d:e2:e4:a3:91:49:b2:a3:0e:a1:43:
04:16:c0:02:91:24:50:84:b3:2f:cd:9a:0d:0d:6c:
82:1b:25:52:a7:a5:e3:3c:b6:b5:c2:33:3f:8f:d7:
f4:4c:51:b0:8c:b8:09:95:63:53:7f:7e:35:e6:93:
06:6d:15:76:a6:c2:44:ac:d9:0c:52:9d:db:4f:26:
db:57:ce:03:0a:0e:da:ec:64:19:ca:a1:b2:01:6c:
6e:ad:c9:28:84:df:08:c5:5c:04:ea:f3:86:d6:00:
73:e6:a3:d0:f7:90:f3:dd:19:45:19:60:87:41:ec:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:45:09:B8:26:2E:6D:DB:5B:D6:9B:3D:66:AE:B2:E0:BE:BD:19:58
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b5:80:f9:d4:a7:b2:0f:37:a7:fc:29:37:11:21:b3:cb:18:
fd:35:52:99:ce:ea:73:d5:13:95:98:a8:23:b0:33:bb:9b:a6:
93:6d:4f:b7:26:48:62:d8:27:2c:27:53:96:81:ec:b4:a5:d3:
fd:1f:6b:d9:75:e2:96:8d:a7:df:0d:ec:22:b9:f7:12:de:00:
d7:2f:88:47:b5:90:2e:d3:63:06:95:38:4b:eb:01:4a:a5:17:
cc:2e:c6:d7:17:86:c6:eb:19:8c:be:10:41:46:74:9a:c3:34:
a7:a8:c8:e9:58:ae:96:9c:fb:e7:23:8e:e1:a8:e0:f8:14:2e:
36:31:ba:4a:be:7b:c1:d7:c1:c7:e8:5c:1a:1e:f3:b5:b5:41:
6b:a9:1b:98:78:39:74:c6:5c:2f:02:10:11:55:8e:27:9a:19:
ee:00:e0:23:dd:dd:ee:16:df:cd:90:2d:73:50:49:47:1e:99:
4b:55:f6:a7:d7:54:f3:18:4f:7c:7c:45:81:42:61:01:ac:1c:
5b:63:bf:41:45:3f:88:0c:80:d3:40:e8:35:78:ff:35:fd:8a:
3f:5b:e7:6b:bb:1d:5c:8e:1d:7c:80:f1:87:13:eb:4e:b8:69:
37:5f:ba:8d:c7:32:05:88:6c:2f:76:07:59:a2:d6:fe:70:6c:
de:b6:ba:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyykFdcldUZ2YMsyEnKrquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDU5NzBlNjUwYzJhYWYxYWI2YTNhMzNhODM3MzI0NjZh
MTUxMmUwHhcNMjUxMTExMTIwMDQ4WhcNMjUxMTEyMTIwMDQ4WjAzMTEwLwYDVQQD
EygzOTQ1MDliODI2MmU2ZGRiNWJkNjliM2Q2NmFlYjJlMGJlYmQxOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi4ihiBrNaVSbwNVTfngrq89FeB3
nKUU1tI+2g+C5q+5MHDUWBekKsgkOwlmlUlK6F5uRJZwG4mn9o0ow0rUU5O1n7/4
dUE+UUjUizavDqf3JSo6a5jbr0emBUp1efAIUNlWAypi1syss/AcGhLdNnJrsLA8
UXsPG/0lK/38lCIemXr1nmuz9qxzjeLko5FJsqMOoUMEFsACkSRQhLMvzZoNDWyC
GyVSp6XjPLa1wjM/j9f0TFGwjLgJlWNTf3415pMGbRV2psJErNkMUp3bTybbV84D
Cg7a7GQZyqGyAWxurckohN8IxVwE6vOG1gBz5qPQ95Dz3RlFGWCHQexlmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlFCbgmLm3bW9abPWausuC+vRlYMB8GA1UdIwQY
MBaAFNwFlw5lDCqvGrajozqDcyRmoVEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTkt
NjdhNTQwZTI5N2YwLzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTktNjdhNTQwZTI5N2Yw
LzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrWA+dSn
sg83p/wpNxEhs8sY/TVSmc7qc9UTlZioI7Azu5umk21PtyZIYtgnLCdTloHstKXT
/R9r2XXilo2n3w3sIrn3Et4A1y+IR7WQLtNjBpU4S+sBSqUXzC7G1xeGxusZjL4Q
QUZ0msM0p6jI6Viulpz75yOO4ajg+BQuNjG6Sr57wdfBx+hcGh7ztbVBa6kbmHg5
dMZcLwIQEVWOJ5oZ7gDgI93d7hbfzZAtc1BJRx6ZS1X2p9dU8xhPfHxFgUJhAawc
W2O/QUU/iAyA00DoNXj/Nf2KP1vna7sdXI4dfIDxhxPrTrhpN1+6jccyBYhsL3YH
WaLW/nBs3ra6BA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:27 2025 by rpki-client