Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: AKuUr9PfozOdYAfQS+LSQlob1InIodjUxxjuWQuQBIs=
Subject key identifier: 94:EB:7E:35:62:A4:BC:F6:D7:DE:91:63:4E:0C:CD:B3:F0:EA:57:11
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 019A4EF4F091C896DB1DD288CA3EF9AA5B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0E84
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: 3v/t+uRX6DdU7A61M7+QIwKXqfYV4zD/LJNk0h7eWg8=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f0:91:c8:96:db:1d:d2:88:ca:3e:f9:aa:5b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=94eb7e3562a4bcf6d7de91634e0ccdb3f0ea5711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:60:24:46:2f:59:fb:c9:b1:32:7d:4a:05:
7d:29:a1:5e:c7:09:3a:bd:e4:b9:56:4e:e3:1c:6e:
bf:d7:61:1f:18:da:19:e6:e2:01:5e:0b:ba:da:e6:
3d:6b:b2:d1:3e:9e:a7:a4:b1:47:78:8d:8e:b5:71:
24:6b:5d:2b:2c:9b:bb:e0:e3:0e:bb:47:af:0b:4b:
f2:49:0c:76:41:ea:b5:bd:55:be:a4:dd:f9:23:cf:
09:85:db:dc:0e:cd:89:5b:f3:ec:38:aa:5c:50:ba:
fd:2b:97:c6:0f:20:87:11:04:75:a2:08:c0:87:14:
a4:d8:71:a6:e2:f1:30:66:f1:9a:ef:43:9e:6f:28:
bf:2e:58:bb:81:b4:70:c0:ed:d9:5e:58:01:c9:d9:
16:84:5c:0c:c4:28:2f:2d:a0:8b:84:40:d4:6d:d6:
14:ac:bd:0e:a8:6e:3c:90:26:d9:0f:ab:99:44:18:
ea:50:46:ce:50:33:14:ed:df:53:1e:76:31:64:c6:
95:4c:f5:54:a0:de:1e:63:36:dc:95:2c:e3:3c:cd:
7a:ce:1a:21:41:1f:b2:91:29:eb:9e:d9:c4:75:a9:
f1:c5:8e:69:78:c4:30:a5:8e:42:7d:0f:56:d9:d0:
46:1c:d7:40:7a:c3:bb:44:3a:e6:8a:00:13:83:5a:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EB:7E:35:62:A4:BC:F6:D7:DE:91:63:4E:0C:CD:B3:F0:EA:57:11
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:e7:0a:47:ef:21:9f:af:b6:a1:d5:52:e2:8c:81:71:c4:
8f:dd:6f:47:5a:85:88:b0:25:e1:06:ad:74:24:ec:fa:7b:83:
f2:11:82:e3:53:8a:87:1d:52:cb:68:9b:77:b3:41:90:e4:97:
b1:9b:7a:86:f6:22:91:a8:de:58:2b:ca:6c:bc:84:ab:a3:63:
a9:52:e4:94:d0:e2:d0:7b:31:07:e9:92:c3:e6:3f:c6:5b:fe:
5d:f1:df:51:c6:57:3b:de:ba:aa:39:de:e0:8b:6b:8d:ca:59:
e0:fe:8b:eb:dc:3b:1e:84:b1:78:d5:ec:d5:34:88:23:6b:7f:
88:e8:a1:87:e7:7b:3e:17:56:37:2c:ec:24:67:fb:fb:09:c9:
a4:53:fd:99:65:de:33:57:35:e3:60:0b:1d:66:47:57:87:b3:
eb:53:7c:60:9b:90:d6:b1:3c:76:46:ae:a9:5a:24:55:4f:23:
4c:ea:48:16:c3:b0:a8:7e:db:5c:5b:0a:2f:12:09:50:64:55:
a9:8d:43:67:17:50:bf:9b:9d:60:ec:de:78:8d:bc:03:a6:6f:
37:5c:46:02:f1:31:2e:01:1f:8a:54:1c:33:b0:72:34:13:9c:
7d:85:a1:fb:e0:06:62:a6:d9:55:3a:6d:ff:a7:fd:52:1e:67:
01:db:c7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9PCRyJbbHdKIyj75qltOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx
NjYwMDgwHhcNMjUxMTA0MTMwMTA2WhcNMjUxMTA1MTMwMTA2WjAzMTEwLwYDVQQD
Eyg5NGViN2UzNTYyYTRiY2Y2ZDdkZTkxNjM0ZTBjY2RiM2YwZWE1NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRBgJEYvWfvJsTJ9SgV9KaFexwk6
veS5Vk7jHG6/12EfGNoZ5uIBXgu62uY9a7LRPp6npLFHeI2OtXEka10rLJu74OMO
u0evC0vySQx2Qeq1vVW+pN35I88JhdvcDs2JW/PsOKpcULr9K5fGDyCHEQR1ogjA
hxSk2HGm4vEwZvGa70Oebyi/Lli7gbRwwO3ZXlgBydkWhFwMxCgvLaCLhEDUbdYU
rL0OqG48kCbZD6uZRBjqUEbOUDMU7d9THnYxZMaVTPVUoN4eYzbclSzjPM16zhoh
QR+ykSnrntnEdanxxY5peMQwpY5CfQ9W2dBGHNdAesO7RDrmigATg1qaXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTrfjVipLz2196RY04MzbPw6lcRMB8GA1UdIwQY
MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt
NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh
LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLbnCkfv
IZ+vtqHVUuKMgXHEj91vR1qFiLAl4QatdCTs+nuD8hGC41OKhx1Sy2ibd7NBkOSX
sZt6hvYikajeWCvKbLyEq6NjqVLklNDi0HsxB+mSw+Y/xlv+XfHfUcZXO966qjne
4ItrjcpZ4P6L69w7HoSxeNXs1TSII2t/iOihh+d7PhdWNyzsJGf7+wnJpFP9mWXe
M1c142ALHWZHV4ez61N8YJuQ1rE8dkauqVokVU8jTOpIFsOwqH7bXFsKLxIJUGRV
qY1DZxdQv5udYOzeeI28A6ZvN1xGAvExLgEfilQcM7ByNBOcfYWh++AGYqbZVTpt
/6f9Uh5nAdvH/g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:36 2025 by rpki-client