Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: r8yEwPq4LeTaXGlVsl3b1T84ZqxeyNvG1Lw9zDBLymk=
Subject key identifier: 59:DB:C4:8F:18:6F:D7:41:A8:73:95:73:5E:E5:CE:C3:C6:1C:2A:82
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 019A7293857D2F3026C1CED8652029D719E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 15A1
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: jGF1u8cbINvklvPsbf1eZNoQHAYfdRPyWhWpNZRJrv4=)
2: KgwBKHljj7pwEemei4izTFatz2I.roa (hash: eVDUYtbHqOXwc5M3emIOpC/IOXEvGmty2120RNJjtQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:85:7d:2f:30:26:c1:ce:d8:65:20:29:d7:19:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=59dbc48f186fd741a87395735ee5cec3c61c2a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:12:e3:a6:23:77:bd:24:38:f8:09:88:dd:
50:d8:03:03:40:1f:dc:93:67:af:92:be:14:8d:1d:
f2:62:93:9f:0f:1a:c6:04:54:bb:cb:01:b9:d5:d7:
7c:c7:69:20:1e:39:bb:03:59:59:4b:40:52:cb:3b:
24:17:ef:65:f3:74:3d:60:93:e8:2b:13:cc:fa:50:
33:d5:20:64:49:14:32:7d:36:88:0d:e1:44:da:72:
02:41:99:93:dd:8c:e6:9b:c6:8a:2b:e7:61:41:e8:
f0:f4:37:00:3c:ca:0a:40:9f:4d:47:2e:55:c6:e2:
26:8b:fd:d5:29:ca:d0:57:f1:83:02:fb:44:72:be:
7c:b6:3f:97:ac:84:d2:98:92:eb:f5:0f:c9:7c:53:
75:c0:d4:70:74:ee:00:3c:ae:ab:63:1b:e4:c9:14:
b1:be:64:6f:d9:40:bc:c5:ce:f0:5c:bf:41:b3:d2:
28:c2:38:29:dc:ab:43:98:01:50:e7:df:a3:4c:cb:
d2:3b:1b:f4:7b:66:f8:99:54:6c:c9:06:5a:de:1f:
2e:88:41:b7:30:55:9c:02:5e:3c:2a:6a:8c:af:fc:
47:63:d9:06:1d:d8:ea:60:84:cf:59:ba:92:b9:f5:
7d:3a:da:8b:b5:23:bb:84:77:36:4d:76:67:fb:b2:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:C4:8F:18:6F:D7:41:A8:73:95:73:5E:E5:CE:C3:C6:1C:2A:82
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9f:c9:2c:1d:0e:fd:16:7c:66:56:e3:3a:fe:f7:81:1d:44:
95:8c:3e:47:94:27:ff:b5:d4:11:e6:81:e5:04:c0:6b:d5:9c:
6b:28:f0:5c:23:c1:c4:86:bb:73:23:f9:b9:7c:91:2f:55:5d:
f0:0d:a5:69:fb:a2:2f:64:05:5c:22:8a:34:71:ee:aa:20:e1:
60:39:c0:9d:33:a4:f9:64:d2:c5:7e:2c:f9:80:84:91:63:03:
0b:ec:71:42:00:be:d4:0a:bd:d7:c9:a4:f4:e8:82:ba:d1:75:
1a:20:26:4a:de:cf:be:c8:f6:d4:49:3e:d9:de:45:ce:c5:40:
2f:cc:58:39:03:b4:ad:b1:42:6c:20:6f:a2:a7:bd:11:09:fe:
6c:db:5b:57:5c:f5:34:f0:74:d9:41:0c:b8:65:3e:30:61:c0:
b6:3e:0d:7e:63:14:23:9a:25:19:73:ce:b0:de:6e:e5:ae:5e:
5e:0b:6b:42:2e:f3:b0:89:02:52:33:97:80:a2:03:eb:d6:59:
9b:2c:c8:52:67:dc:ea:80:e4:48:27:00:90:78:f2:0f:2d:b0:
39:db:06:e2:86:a5:a0:a5:72:f6:f0:a0:29:2c:69:d3:f6:95:
48:44:62:6d:a5:4f:23:56:28:75:b5:7c:8f:52:31:f7:36:70:
13:28:42:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4V9LzAmwc7YZSAp1xnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjljMzcwNDYwYmVjNzUzMDEwZmM3ZTY4MzY1YzU3NzBi
ZjQ1ZTQwHhcNMjUxMTExMTEwMTAxWhcNMjUxMTEyMTEwMTAxWjAzMTEwLwYDVQQD
Eyg1OWRiYzQ4ZjE4NmZkNzQxYTg3Mzk1NzM1ZWU1Y2VjM2M2MWMyYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFQS46Yjd70kOPgJiN1Q2AMDQB/c
k2evkr4UjR3yYpOfDxrGBFS7ywG51dd8x2kgHjm7A1lZS0BSyzskF+9l83Q9YJPo
KxPM+lAz1SBkSRQyfTaIDeFE2nICQZmT3Yzmm8aKK+dhQejw9DcAPMoKQJ9NRy5V
xuImi/3VKcrQV/GDAvtEcr58tj+XrITSmJLr9Q/JfFN1wNRwdO4APK6rYxvkyRSx
vmRv2UC8xc7wXL9Bs9Iowjgp3KtDmAFQ59+jTMvSOxv0e2b4mVRsyQZa3h8uiEG3
MFWcAl48KmqMr/xHY9kGHdjqYITPWbqSufV9OtqLtSO7hHc2TXZn+7JvoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnbxI8Yb9dBqHOVc17lzsPGHCqCMB8GA1UdIwQY
MBaAFN0pw3BGC+x1MBD8fmg2XFdwv0XkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYt
MTM0YzQ3Yjk0OTEzLzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYtMTM0YzQ3Yjk0OTEz
LzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ/JLB0O
/RZ8ZlbjOv73gR1ElYw+R5Qn/7XUEeaB5QTAa9WcayjwXCPBxIa7cyP5uXyRL1Vd
8A2lafuiL2QFXCKKNHHuqiDhYDnAnTOk+WTSxX4s+YCEkWMDC+xxQgC+1Aq918mk
9OiCutF1GiAmSt7Pvsj21Ek+2d5FzsVAL8xYOQO0rbFCbCBvoqe9EQn+bNtbV1z1
NPB02UEMuGU+MGHAtj4NfmMUI5olGXPOsN5u5a5eXgtrQi7zsIkCUjOXgKID69ZZ
myzIUmfc6oDkSCcAkHjyDy2wOdsG4oaloKVy9vCgKSxp0/aVSERibaVPI1YodbV8
j1Ix9zZwEyhCVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:08 2025 by rpki-client