Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: vEzP+r3bP+3E1ipKQXAjDRJIgzXXVvKeGi0RWqEh+p0=
Subject key identifier: FB:E6:97:D1:05:0A:47:77:E3:45:90:73:E2:EF:AB:C3:B7:8F:C4:E7
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019A533F4BCDB7B8E4EBD4AACC0B818567B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 059E
Signing time: Wed 05 Nov 2025 09:00:48 +0000
Manifest this update: Wed 05 Nov 2025 09:00:48 +0000
Manifest next update: Thu 06 Nov 2025 09:00:48 +0000
Files and hashes: 1: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: XFzCVXnjz1NswBvg8ss0A3KLMADILGXut4IKnq5MJqU=)
2: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (hash: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=)
3: sllzpkHFh9mOLjlCML4tbQK0pwU.roa (hash: E6feljoCdpMR0hz/J2bpGEFeQDlLz1z/a780M0tQTGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:4b:cd:b7:b8:e4:eb:d4:aa:cc:0b:81:85:67:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Nov 5 09:00:48 2025 GMT
Not After : Nov 6 09:00:48 2025 GMT
Subject: CN=fbe697d1050a4777e3459073e2efabc3b78fc4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:3f:4b:79:c6:9a:22:3d:36:a1:39:1b:88:
00:ae:69:0a:30:16:66:f7:3d:56:99:d1:f5:63:0a:
cf:ca:71:c5:db:01:f3:c6:54:7d:da:2e:73:12:a8:
b3:61:8e:d8:5f:b5:fc:f3:33:cd:b8:13:b9:2d:35:
9b:1f:a2:ce:80:e2:8c:6f:03:eb:ae:56:5f:bf:84:
ab:f8:72:e8:a5:7a:94:67:cf:5f:25:84:73:01:10:
98:53:35:7e:8b:b1:00:1e:69:da:3e:3f:65:e4:ab:
81:b4:08:b8:d4:ea:4a:16:53:c8:a7:22:fd:22:89:
13:c9:e4:6d:46:d9:0f:7d:0a:63:93:49:ba:31:e5:
e2:aa:ae:af:1b:2e:66:f3:8e:38:b5:31:c8:5e:22:
29:20:81:38:25:94:b1:5e:83:65:01:05:71:e0:f6:
1f:72:d7:77:96:bd:a7:21:16:40:ad:e6:28:ae:80:
d0:80:6e:e0:f1:0f:46:e2:76:1c:49:18:ea:2e:95:
1a:31:d3:cd:1a:07:17:e2:26:d1:7e:0a:73:52:45:
cc:17:4d:1a:d3:90:92:ea:c4:57:cf:3f:da:ff:9c:
c6:f6:cf:b9:63:2c:03:fe:da:92:7d:31:ad:c7:49:
38:4c:8b:14:b6:86:9e:ac:73:50:a9:91:db:98:5e:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:97:D1:05:0A:47:77:E3:45:90:73:E2:EF:AB:C3:B7:8F:C4:E7
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:60:34:25:9f:01:d7:c3:aa:98:8d:f1:cc:88:93:40:e7:88:
6a:7b:7f:2b:d5:cb:ea:62:22:46:30:65:94:27:44:0a:5f:3b:
fc:a5:18:b4:3f:6a:09:7c:91:61:22:69:61:68:a5:8d:34:36:
b1:46:5f:65:b4:95:36:90:64:a5:70:b8:7c:40:37:62:5b:b1:
80:f6:b9:cc:d4:71:be:12:fe:45:d0:a7:45:9f:d4:40:15:2d:
8e:00:09:4a:2b:49:fd:02:7e:82:b4:53:ab:18:42:3a:98:d0:
28:db:d6:13:e1:f5:9f:1b:93:a0:1f:72:b3:5e:3c:6a:57:6a:
57:77:17:e1:4f:67:3c:44:4a:9b:0d:29:7c:e2:02:5d:7c:bf:
a6:53:bc:3c:07:7f:f8:7e:e4:88:24:91:ba:41:a5:fb:c8:79:
88:5b:62:c9:66:77:7b:39:d9:0d:02:8b:4b:9a:30:b2:11:45:
3f:ab:c3:bd:ca:0c:0f:e5:50:c4:71:6c:07:32:af:ae:b1:50:
41:0b:17:27:ba:c5:6e:7b:b5:11:4e:4b:1b:d5:1f:80:c5:97:
18:c2:4a:fb:31:fb:77:63:50:66:e1:3e:d3:d8:0c:7f:75:d8:
cc:0c:98:9e:61:ec:a1:85:0a:17:b2:66:2c:2b:46:47:c3:09:
0b:16:24:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP0vNt7jk69SqzAuBhWewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzRlNWFmMmZhNzIxNWNhNDY5YjI3YzEwNzlmMWZmZDVm
Y2FlZjgwHhcNMjUxMTA1MDkwMDQ4WhcNMjUxMTA2MDkwMDQ4WjAzMTEwLwYDVQQD
EyhmYmU2OTdkMTA1MGE0Nzc3ZTM0NTkwNzNlMmVmYWJjM2I3OGZjNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufM/S3nGmiI9NqE5G4gArmkKMBZm
9z1WmdH1YwrPynHF2wHzxlR92i5zEqizYY7YX7X88zPNuBO5LTWbH6LOgOKMbwPr
rlZfv4Sr+HLopXqUZ89fJYRzARCYUzV+i7EAHmnaPj9l5KuBtAi41OpKFlPIpyL9
IokTyeRtRtkPfQpjk0m6MeXiqq6vGy5m8444tTHIXiIpIIE4JZSxXoNlAQVx4PYf
ctd3lr2nIRZAreYoroDQgG7g8Q9G4nYcSRjqLpUaMdPNGgcX4ibRfgpzUkXMF00a
05CS6sRXzz/a/5zG9s+5YywD/tqSfTGtx0k4TIsUtoaerHNQqZHbmF7aUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvml9EFCkd340WQc+Lvq8O3j8TnMB8GA1UdIwQY
MBaAFA905a8vpyFcpGmyfBB58f/V/K74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUt
ZWFiY2JjMDgzZjliLzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUtZWFiY2JjMDgzZjli
LzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGA0JZ8B
18OqmI3xzIiTQOeIant/K9XL6mIiRjBllCdECl87/KUYtD9qCXyRYSJpYWiljTQ2
sUZfZbSVNpBkpXC4fEA3YluxgPa5zNRxvhL+RdCnRZ/UQBUtjgAJSitJ/QJ+grRT
qxhCOpjQKNvWE+H1nxuToB9ys148aldqV3cX4U9nPERKmw0pfOICXXy/plO8PAd/
+H7kiCSRukGl+8h5iFtiyWZ3eznZDQKLS5owshFFP6vDvcoMD+VQxHFsBzKvrrFQ
QQsXJ7rFbnu1EU5LG9UfgMWXGMJK+zH7d2NQZuE+09gMf3XYzAyYnmHsoYUKF7Jm
LCtGR8MJCxYkAg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:49 2025 by rpki-client