Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: mpgGKeTsJP6dltdsz/SYrkkj2zLgwK/m163KE83+wNg=
Subject key identifier: 39:AE:21:77:F7:C0:9B:81:53:FC:69:1B:6E:E1:F2:4A:30:7A:BF:FC
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019A24782D05271CF930CF06CB5A86E9DBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 076F
Signing time: Mon 27 Oct 2025 07:00:46 +0000
Manifest this update: Mon 27 Oct 2025 07:00:46 +0000
Manifest next update: Tue 28 Oct 2025 07:00:46 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: RHEcOQO9RM/T5j1fDhaksyBbts6wiAkm5/0jEZM//5Y=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:2d:05:27:1c:f9:30:cf:06:cb:5a:86:e9:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Oct 27 07:00:46 2025 GMT
Not After : Oct 28 07:00:46 2025 GMT
Subject: CN=39ae2177f7c09b8153fc691b6ee1f24a307abffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:09:7f:71:d1:e9:ee:5d:7c:b6:d5:cc:bb:
f9:92:6b:23:79:be:af:05:63:2b:e8:b7:0c:ec:34:
4c:77:02:88:9b:1b:46:f4:d4:00:b2:0b:68:d5:34:
78:e1:29:d7:5c:ce:fd:51:ea:ae:8e:24:57:b0:31:
e1:eb:8e:ad:02:e7:6c:a8:6f:b1:f4:aa:86:7c:dd:
65:e0:47:be:4f:9c:86:9d:3b:f1:92:02:7b:77:85:
07:91:9d:99:a1:d1:34:28:f8:99:7d:5b:d6:56:fe:
6a:c7:d8:35:72:bc:c1:f1:e1:48:4d:53:d8:b4:b1:
ae:c2:f5:1c:01:ad:09:a0:2e:07:c2:dd:b3:b0:40:
79:7b:86:e7:ac:76:de:1a:67:48:fd:3f:e0:9c:e3:
fa:00:2f:b3:0a:9f:75:9b:0f:29:7a:f1:14:15:c6:
50:a9:65:2f:de:69:23:06:93:6a:b6:71:f0:e5:db:
83:cf:f8:ef:cd:10:6d:2b:9d:63:78:b2:f4:f8:7e:
e8:f5:b2:96:42:09:99:23:7a:db:b5:3a:57:9a:af:
36:f8:e9:1b:11:33:52:b8:b5:cd:46:3c:7d:81:57:
e9:8c:36:fe:d1:72:b1:9d:77:30:d7:61:7e:29:6a:
15:1d:2f:53:fc:3f:ec:57:df:f5:ba:74:b6:52:20:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AE:21:77:F7:C0:9B:81:53:FC:69:1B:6E:E1:F2:4A:30:7A:BF:FC
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:25:3b:0d:68:7c:c5:08:a5:7d:f9:3b:ee:2a:21:3f:44:e1:
c3:8f:81:f5:8f:c8:89:f2:c6:67:b0:6e:91:dd:06:a1:90:9a:
03:33:fe:43:a8:7c:98:d7:5f:51:dd:ac:43:cf:b5:87:e4:a9:
19:c9:cd:d4:db:a3:34:e7:6c:29:99:fc:ab:b2:f3:c6:27:1c:
ad:bb:de:30:0a:7f:02:25:86:ae:7b:86:1d:b4:c5:c3:bb:c5:
51:25:05:71:e2:e6:4a:9f:42:7f:a0:f5:15:cd:a1:3b:a6:90:
83:3a:10:20:8b:2e:72:64:3e:68:5b:fd:21:80:d1:88:07:02:
e3:7e:0a:a9:2d:b0:9c:6a:4b:0c:e9:7c:30:a2:d0:59:85:ad:
85:81:d8:ab:d6:1a:91:12:fb:2a:05:da:90:4b:0f:5a:1c:e9:
c4:8c:e2:14:84:f6:ed:72:59:05:48:e1:4b:b2:5d:9e:97:ce:
01:07:31:92:0b:e6:f7:ae:40:b5:be:cc:97:65:88:a4:7d:f3:
6b:8b:50:71:4d:86:57:8f:7a:12:8e:49:ce:9e:6f:ea:51:54:
c3:b0:73:5f:a6:4c:d3:20:9b:8d:76:9f:b7:c2:49:5c:31:34:
51:e0:78:30:a1:a6:78:47:a9:d9:5f:ef:90:75:69:4f:0f:19:
16:82:06:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeC0FJxz5MM8Gy1qG6duvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDNlYTJjZDA3OTk3ZWNkZmUxNzE4ODg3MjcwODY1MmUx
NzJkZjIwHhcNMjUxMDI3MDcwMDQ2WhcNMjUxMDI4MDcwMDQ2WjAzMTEwLwYDVQQD
EygzOWFlMjE3N2Y3YzA5YjgxNTNmYzY5MWI2ZWUxZjI0YTMwN2FiZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g0Jf3HR6e5dfLbVzLv5kmsjeb6v
BWMr6LcM7DRMdwKImxtG9NQAsgto1TR44SnXXM79UequjiRXsDHh646tAudsqG+x
9KqGfN1l4Ee+T5yGnTvxkgJ7d4UHkZ2ZodE0KPiZfVvWVv5qx9g1crzB8eFITVPY
tLGuwvUcAa0JoC4Hwt2zsEB5e4bnrHbeGmdI/T/gnOP6AC+zCp91mw8pevEUFcZQ
qWUv3mkjBpNqtnHw5duDz/jvzRBtK51jeLL0+H7o9bKWQgmZI3rbtTpXmq82+Okb
ETNSuLXNRjx9gVfpjDb+0XKxnXcw12F+KWoVHS9T/D/sV9/1unS2UiB0FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmuIXf3wJuBU/xpG27h8kower/8MB8GA1UdIwQY
MBaAFNxD6izQeZfs3+FxiIcnCGUuFy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2Yt
NDQ2NDRkZDVlZDQ0LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2YtNDQ2NDRkZDVlZDQ0
LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCU7DWh8
xQilffk77iohP0Thw4+B9Y/IifLGZ7Bukd0GoZCaAzP+Q6h8mNdfUd2sQ8+1h+Sp
GcnN1NujNOdsKZn8q7LzxiccrbveMAp/AiWGrnuGHbTFw7vFUSUFceLmSp9Cf6D1
Fc2hO6aQgzoQIIsucmQ+aFv9IYDRiAcC434KqS2wnGpLDOl8MKLQWYWthYHYq9Ya
kRL7KgXakEsPWhzpxIziFIT27XJZBUjhS7JdnpfOAQcxkgvm965Atb7Ml2WIpH3z
a4tQcU2GV496Eo5Jzp5v6lFUw7BzX6ZM0yCbjXaft8JJXDE0UeB4MKGmeEep2V/v
kHVpTw8ZFoIGCA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:44:13 2025 by rpki-client