Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: dliANtlUFOQtovnQR0d/GyADJWPMoeqRS1AP+TW1qHI=
Subject key identifier: 20:45:37:6C:E2:67:D0:67:EB:29:9D:08:D7:D5:23:03:46:DF:69:F9
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019A71EED33ADB492DFA5B3A847482042CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: EZ/OB1tQLVD+BjapZWzQ37rMOq/YcQD+h5cfO64iQwE=)
2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d3:3a:db:49:2d:fa:5b:3a:84:74:82:04:2c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=2045376ce267d067eb299d08d7d5230346df69f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:33:4b:63:22:be:c2:7b:56:05:42:ba:4f:
70:8a:04:2e:9a:df:4e:9b:b7:6f:fb:3f:40:01:af:
83:a2:f9:2b:5f:a3:d8:7c:ce:dc:f6:0e:e7:65:e0:
95:b6:55:5e:f8:b2:93:3e:b7:fa:9a:05:73:5e:61:
37:5d:66:12:b2:76:ab:93:fe:d1:0e:bd:ef:64:96:
88:21:6d:1e:e7:ec:c7:1e:e5:db:6d:1a:07:a9:e6:
ea:77:f2:3a:51:22:52:22:78:0b:1a:16:39:b2:1a:
ba:a3:e0:8d:e5:92:1a:36:50:4e:44:66:97:15:89:
8c:a4:e0:d6:55:3a:44:1f:c7:5b:7d:4d:41:df:2f:
3b:85:4a:f6:31:10:34:81:27:98:fe:45:87:f8:15:
81:8a:c7:f9:49:f3:3a:4c:a8:b3:8d:a6:c1:01:fd:
dc:62:69:5b:d1:cf:c6:ce:22:4b:73:3c:08:3a:77:
d5:fe:97:1b:38:7c:90:6b:0c:64:70:d5:e5:62:fa:
9c:a5:50:08:ef:d4:28:fa:54:c7:40:7c:90:58:f4:
e0:5b:3c:66:cd:d8:20:68:e5:2f:d0:8a:a1:e5:27:
33:1e:53:49:e7:8f:06:7d:39:0c:cc:00:89:4f:bc:
58:a9:46:47:e7:76:ff:40:88:24:57:95:d4:c7:a2:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:45:37:6C:E2:67:D0:67:EB:29:9D:08:D7:D5:23:03:46:DF:69:F9
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3a:a1:89:89:75:46:0f:0f:f9:ff:ad:da:8a:de:1d:6a:0b:
7f:2b:03:cc:8e:9a:4f:00:26:5b:7c:fc:05:12:e4:e9:5e:94:
bb:62:91:8b:b9:27:06:aa:7c:f5:b1:f5:dc:ac:9b:bc:e6:63:
33:9a:13:fd:af:be:29:4a:a0:5f:bb:86:2a:98:45:e3:0a:d5:
8a:60:e0:8e:dd:cc:6b:56:0c:6b:81:55:61:6d:b2:7c:e1:10:
d4:21:5e:1f:12:39:33:e7:ca:09:da:36:ea:0b:85:e6:52:bb:
ee:22:dd:33:82:c3:2a:cf:50:12:ad:8c:39:6d:47:e6:36:97:
19:d1:f5:fc:77:46:de:68:e4:59:00:1a:b0:62:cc:8a:c4:78:
8a:ef:29:3f:d4:2a:a7:1a:64:fd:58:bc:c3:31:db:cc:c2:b6:
85:59:35:99:11:70:1d:28:e2:c9:5e:31:8f:9e:14:fe:7b:70:
92:16:27:79:1a:77:e6:67:05:13:1d:e4:db:97:5d:89:3b:1e:
f2:8e:35:df:98:85:35:83:19:ce:d8:49:c5:fd:6d:0c:4b:44:
a3:79:88:14:0a:41:9f:07:32:3a:57:fe:20:4d:15:59:da:40:
86:61:bf:5e:a4:a0:52:43:bd:1e:de:34:3b:79:9d:c8:a3:bc:
4c:19:f1:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7tM620kt+ls6hHSCBCzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFkYTMyNzYyYTZmOWMxMjZkNjNiYTcwNWQ2MmMwNTBi
ODQ4NGUwHhcNMjUxMTExMDgwMTA4WhcNMjUxMTEyMDgwMTA4WjAzMTEwLwYDVQQD
EygyMDQ1Mzc2Y2UyNjdkMDY3ZWIyOTlkMDhkN2Q1MjMwMzQ2ZGY2OWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VEzS2MivsJ7VgVCuk9wigQumt9O
m7dv+z9AAa+DovkrX6PYfM7c9g7nZeCVtlVe+LKTPrf6mgVzXmE3XWYSsnark/7R
Dr3vZJaIIW0e5+zHHuXbbRoHqebqd/I6USJSIngLGhY5shq6o+CN5ZIaNlBORGaX
FYmMpODWVTpEH8dbfU1B3y87hUr2MRA0gSeY/kWH+BWBisf5SfM6TKizjabBAf3c
Ymlb0c/GziJLczwIOnfV/pcbOHyQawxkcNXlYvqcpVAI79Qo+lTHQHyQWPTgWzxm
zdggaOUv0Iqh5SczHlNJ548GfTkMzACJT7xYqUZH53b/QIgkV5XUx6IsewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBFN2ziZ9Bn6ymdCNfVIwNG32n5MB8GA1UdIwQY
MBaAFN5R2jJ2Km+cEm1junBdYsBQuEhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTkt
Y2RmYTYwMTIyNjkwLzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTktY2RmYTYwMTIyNjkw
LzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijqhiYl1
Rg8P+f+t2oreHWoLfysDzI6aTwAmW3z8BRLk6V6Uu2KRi7knBqp89bH13KybvOZj
M5oT/a++KUqgX7uGKphF4wrVimDgjt3Ma1YMa4FVYW2yfOEQ1CFeHxI5M+fKCdo2
6guF5lK77iLdM4LDKs9QEq2MOW1H5jaXGdH1/HdG3mjkWQAasGLMisR4iu8pP9Qq
pxpk/Vi8wzHbzMK2hVk1mRFwHSjiyV4xj54U/ntwkhYneRp35mcFEx3k25ddiTse
8o4135iFNYMZzthJxf1tDEtEo3mIFApBnwcyOlf+IE0VWdpAhmG/XqSgUkO9Ht40
O3mdyKO8TBnxhg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:03 2025 by rpki-client