Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: HQ2jHeBw5QV6lLgRUsQbmtG6xgUZ6c/ZERioEqmojlE=
Subject key identifier: 87:1F:83:82:6E:D2:D2:DC:EF:E8:3A:45:CC:A6:F1:29:86:35:7B:6F
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 019A2D43D17D8799B444A86DC1F3F73F1AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0B65
Signing time: Wed 29 Oct 2025 00:00:10 +0000
Manifest this update: Wed 29 Oct 2025 00:00:10 +0000
Manifest next update: Thu 30 Oct 2025 00:00:10 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: PqIW21SfqqMFIgrtapT6QMmGFjJ/Fb7/bmi3Dlg4GtE=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:d1:7d:87:99:b4:44:a8:6d:c1:f3:f7:3f:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Oct 29 00:00:10 2025 GMT
Not After : Oct 30 00:00:10 2025 GMT
Subject: CN=871f83826ed2d2dcefe83a45cca6f12986357b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:e5:e3:c3:dd:5a:87:35:8d:18:48:30:f2:
44:d2:ed:cb:5f:9f:ca:11:9f:8c:36:1b:2f:68:11:
4e:cf:18:c5:fc:58:c4:b8:3c:f0:46:40:01:fd:ae:
4a:82:71:0d:e2:fc:9e:39:d5:5f:33:1e:63:43:3b:
61:c1:e3:76:e2:38:e4:4d:dc:ec:62:50:3f:e9:12:
98:8b:39:af:85:22:55:a2:b6:0c:3f:03:2c:ed:fa:
2d:3e:da:34:05:73:8a:47:ab:85:95:a7:32:df:ea:
b7:1d:37:8b:de:6c:4b:83:f8:e0:db:94:b3:7b:9b:
8b:63:29:34:b5:36:f7:0f:27:c5:02:28:03:27:d2:
89:a6:5d:5a:68:62:8c:43:20:b1:ca:8e:e2:57:69:
8e:5e:bc:46:15:15:6a:58:79:23:62:d6:1a:3f:0b:
a6:13:d1:1e:2b:a7:b6:e7:05:13:a1:bc:70:dc:41:
cc:95:05:8b:8f:6e:67:25:19:dd:a4:40:3c:b1:69:
6a:1e:4d:c0:b3:ee:84:3f:da:f8:4d:91:23:15:4f:
1c:e1:e1:e4:e9:d3:8d:0c:a0:b9:3e:99:6f:13:47:
d7:dc:06:6a:1d:bf:fa:85:d6:03:25:48:54:9c:c9:
93:5a:95:7a:24:7f:2b:7d:85:ad:bb:c9:87:1e:8a:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1F:83:82:6E:D2:D2:DC:EF:E8:3A:45:CC:A6:F1:29:86:35:7B:6F
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:34:30:d6:c2:cb:4e:20:ce:d0:21:81:c1:77:1c:ab:fe:e1:
8a:58:c7:2a:ca:6b:42:9b:bc:33:ee:6f:84:77:ce:84:7a:b5:
4d:ed:40:e5:41:87:ac:65:12:92:85:b3:bf:8a:e2:d6:86:1a:
1b:da:66:7e:86:da:74:a4:f4:9d:49:6f:05:8d:ae:b8:db:b6:
2c:4e:13:f8:24:8e:04:a2:bc:a4:e2:22:72:6c:6b:25:f5:1c:
20:88:7e:59:7f:17:96:17:db:c3:0a:57:8b:5c:53:8b:3d:8f:
7f:47:69:b8:e9:66:83:70:cc:64:77:ad:3d:ee:92:81:c6:d0:
2e:57:38:bc:1f:fd:5c:ae:19:76:f8:f0:11:2c:92:e6:68:db:
b2:5a:b3:0e:41:88:84:a2:7c:33:18:f0:5c:3e:7b:e1:33:8d:
aa:4e:40:0c:4c:f8:cd:b9:17:f5:87:60:8d:b1:80:a1:c8:ca:
f4:bc:30:39:ba:8d:45:aa:94:8e:3e:23:66:86:12:c8:90:4f:
2d:11:80:bc:f0:5f:3e:7e:32:99:4e:44:bf:1a:c5:fe:81:4c:
66:3c:35:7f:e8:22:d4:d7:3a:fb:be:52:34:2c:1e:d6:80:4b:
f8:b7:a6:fb:91:45:1d:ef:78:d2:de:0a:87:ba:b0:2f:88:e5:
f7:a5:66:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotQ9F9h5m0RKhtwfP3PxrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy
NWNiNTEwHhcNMjUxMDI5MDAwMDEwWhcNMjUxMDMwMDAwMDEwWjAzMTEwLwYDVQQD
Eyg4NzFmODM4MjZlZDJkMmRjZWZlODNhNDVjY2E2ZjEyOTg2MzU3YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAzl48PdWoc1jRhIMPJE0u3LX5/K
EZ+MNhsvaBFOzxjF/FjEuDzwRkAB/a5KgnEN4vyeOdVfMx5jQzthweN24jjkTdzs
YlA/6RKYizmvhSJVorYMPwMs7fotPto0BXOKR6uFlacy3+q3HTeL3mxLg/jg25Sz
e5uLYyk0tTb3DyfFAigDJ9KJpl1aaGKMQyCxyo7iV2mOXrxGFRVqWHkjYtYaPwum
E9EeK6e25wUTobxw3EHMlQWLj25nJRndpEA8sWlqHk3As+6EP9r4TZEjFU8c4eHk
6dONDKC5PplvE0fX3AZqHb/6hdYDJUhUnMmTWpV6JH8rfYWtu8mHHooyqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcfg4Ju0tLc7+g6Rcym8SmGNXtvMB8GA1UdIwQY
MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt
MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw
LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDQw1sLL
TiDO0CGBwXccq/7hiljHKsprQpu8M+5vhHfOhHq1Te1A5UGHrGUSkoWzv4ri1oYa
G9pmfobadKT0nUlvBY2uuNu2LE4T+CSOBKK8pOIicmxrJfUcIIh+WX8XlhfbwwpX
i1xTiz2Pf0dpuOlmg3DMZHetPe6SgcbQLlc4vB/9XK4ZdvjwESyS5mjbslqzDkGI
hKJ8MxjwXD574TONqk5ADEz4zbkX9YdgjbGAocjK9LwwObqNRaqUjj4jZoYSyJBP
LRGAvPBfPn4ymU5EvxrF/oFMZjw1f+gi1Nc6+75SNCwe1oBL+Lem+5FFHe940t4K
h7qwL4jl96VmgQ==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:40:09 2025 by rpki-client