Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier: SCmHcEBKCfhJT74tbMeyjS+KBa8o3m7MKAMUzOtiidg=
Subject key identifier: 2A:A4:68:32:44:30:69:F9:B7:07:DA:6F:87:F0:AB:DF:2F:98:84:5F
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 019A71B912D1F4AEF36034773D1C1095E2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number: 04AD
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: WsaBV6C+FvdaEUA7nt1RlkO5cf9hzcyh1nSwph1DxCc=)
2: uqWPOGEjKAK6cva-7ggQuyGZx84.roa (hash: LmiTjnCPg8ISEkh3ESWU5kwDHzMqe3y8V1474zgHE24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:12:d1:f4:ae:f3:60:34:77:3d:1c:10:95:e2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=2aa46832443069f9b707da6f87f0abdf2f98845f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:17:01:84:00:0d:9a:dd:73:94:00:8e:9e:
b7:44:19:9b:21:d1:e4:d9:5e:b0:6c:bc:aa:b9:a3:
e7:91:5d:ed:db:ab:df:00:bd:3e:91:7d:f2:19:cc:
99:2f:a1:84:db:62:c7:e9:ee:fa:e8:92:dc:a4:3e:
26:22:f5:89:76:cf:61:58:d2:af:38:0f:4b:03:e2:
fc:92:31:0e:da:66:7b:23:0c:2c:9b:8c:8b:ca:25:
1c:e1:d4:37:32:0d:13:c0:26:c7:14:59:5d:fa:ee:
70:6f:90:4a:40:9a:a5:c8:06:a0:c7:5b:fd:46:2a:
93:9c:ba:4d:11:3d:61:a5:40:89:be:3c:d7:2a:a8:
38:63:b9:14:3b:25:6b:e5:87:0a:53:e6:59:9a:44:
80:7b:58:77:5f:93:b8:4d:0d:31:e8:b1:a5:be:1e:
71:ad:20:e4:63:1b:e4:57:2d:5c:25:84:25:44:c5:
8d:b0:36:05:d7:b3:69:6f:94:b2:68:f4:a8:a5:47:
27:3c:01:03:fb:8e:29:04:52:73:3b:34:21:bb:81:
20:bc:c1:ce:af:88:f1:c4:fb:bc:de:49:a5:c9:ef:
c0:4e:a3:ea:bc:75:a0:ee:9a:5e:68:1f:fc:54:be:
7d:90:9a:30:f8:f6:9b:1f:67:ab:d1:41:15:3a:a8:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:68:32:44:30:69:F9:B7:07:DA:6F:87:F0:AB:DF:2F:98:84:5F
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8c:44:2e:04:5a:74:01:c7:f3:24:06:b5:1b:6a:4f:d2:4e:
a6:43:41:00:c0:b5:73:d4:8a:f0:4f:3f:4b:88:2b:ed:7d:db:
3d:a1:88:f9:fd:80:e8:fe:97:25:ba:a7:1a:51:17:86:43:dd:
2a:72:b2:91:4d:71:06:b2:94:59:2f:7d:63:b1:37:ea:6f:8c:
c8:73:7b:f6:94:34:47:71:39:47:f8:5b:da:bb:d7:cb:5e:10:
60:1f:de:33:86:a7:99:6d:7d:13:e0:84:dd:3b:4d:54:53:00:
79:30:04:f2:ba:13:34:dc:98:9a:bf:9c:d4:fe:8e:05:81:87:
06:72:02:e4:f8:08:63:e1:f0:9a:60:fe:86:b2:87:3b:e1:d2:
5c:5f:d3:44:ef:8a:12:93:39:f8:94:64:86:12:16:44:df:35:
14:85:d1:07:ad:d5:67:86:6c:2c:89:dd:24:13:ab:6c:31:83:
c6:d4:74:98:a6:8f:5c:6e:83:89:17:b9:02:2d:a7:9a:16:0e:
96:68:d1:a2:1e:d9:99:93:63:3d:57:10:75:15:04:5e:da:39:
62:13:20:a1:97:d4:4f:a5:e9:57:db:5d:e1:3c:63:22:cc:7c:
83:8e:23:2b:a8:d1:51:c9:f2:70:2b:e0:fc:38:4d:e9:5d:d1:
84:d8:81:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRLR9K7zYDR3PRwQleK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWRmMTE3NzRmNDQwN2FkZGJkZjNjZmJhNGMxZTdhYTAy
NDIyMjMwHhcNMjUxMTExMDcwMjI1WhcNMjUxMTEyMDcwMjI1WjAzMTEwLwYDVQQD
EygyYWE0NjgzMjQ0MzA2OWY5YjcwN2RhNmY4N2YwYWJkZjJmOTg4NDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOkXAYQADZrdc5QAjp63RBmbIdHk
2V6wbLyquaPnkV3t26vfAL0+kX3yGcyZL6GE22LH6e766JLcpD4mIvWJds9hWNKv
OA9LA+L8kjEO2mZ7Iwwsm4yLyiUc4dQ3Mg0TwCbHFFld+u5wb5BKQJqlyAagx1v9
RiqTnLpNET1hpUCJvjzXKqg4Y7kUOyVr5YcKU+ZZmkSAe1h3X5O4TQ0x6LGlvh5x
rSDkYxvkVy1cJYQlRMWNsDYF17Npb5SyaPSopUcnPAED+44pBFJzOzQhu4EgvMHO
r4jxxPu83kmlye/ATqPqvHWg7ppeaB/8VL59kJow+PabH2er0UEVOqix4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqkaDJEMGn5twfab4fwq98vmIRfMB8GA1UdIwQY
MBaAFLPt8Rd09EB63b3zz7pMHnqgJCIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgt
YWRjYTFhNTdhYjBjLzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgtYWRjYTFhNTdhYjBj
LzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4xELgRa
dAHH8yQGtRtqT9JOpkNBAMC1c9SK8E8/S4gr7X3bPaGI+f2A6P6XJbqnGlEXhkPd
KnKykU1xBrKUWS99Y7E36m+MyHN79pQ0R3E5R/hb2rvXy14QYB/eM4anmW19E+CE
3TtNVFMAeTAE8roTNNyYmr+c1P6OBYGHBnIC5PgIY+HwmmD+hrKHO+HSXF/TRO+K
EpM5+JRkhhIWRN81FIXRB63VZ4ZsLIndJBOrbDGDxtR0mKaPXG6DiRe5Ai2nmhYO
lmjRoh7ZmZNjPVcQdRUEXto5YhMgoZfUT6XpV9td4TxjIsx8g44jK6jRUcnycCvg
/DhN6V3RhNiBmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:32 2025 by rpki-client