Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: Z2207U30BE6Alx3LFUZRSigbK4wWjeMqmOsqPHbISZQ=
Subject key identifier: 84:2D:51:6B:FA:DD:8A:D4:EE:01:1F:09:04:30:06:88:9B:FA:11:51
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019A503E0254C5ABE52034CC559E00D9146F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 10FD
Signing time: Tue 04 Nov 2025 19:00:32 +0000
Manifest this update: Tue 04 Nov 2025 19:00:32 +0000
Manifest next update: Wed 05 Nov 2025 19:00:32 +0000
Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=)
2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: yGF2/qJLSJz4PV0UnALU31XRGoyyv9KGNGHsHjwztoo=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:02:54:c5:ab:e5:20:34:cc:55:9e:00:d9:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Nov 4 19:00:32 2025 GMT
Not After : Nov 5 19:00:32 2025 GMT
Subject: CN=842d516bfadd8ad4ee011f09043006889bfa1151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:f0:f9:cf:52:9f:b3:ce:0b:2b:15:ac:c4:
c2:bf:a6:1c:c8:a1:c6:61:f3:51:25:32:19:a7:da:
fb:0a:24:9d:1d:d6:11:1e:eb:10:14:fe:71:c3:c4:
85:bd:83:66:77:22:d3:1c:a0:a0:2d:f9:bb:a0:61:
49:49:a6:4e:b6:68:66:be:63:f1:53:f3:2e:67:55:
d9:76:8d:28:4f:b7:77:d3:8e:94:38:24:8d:83:2c:
cb:56:5a:07:f7:1f:5a:19:0d:f2:91:57:00:66:b0:
3d:8e:cd:d2:b4:66:a6:10:a8:cc:b7:46:9b:49:a4:
2e:4f:ec:b1:5c:23:1b:7a:7a:11:8b:7d:b8:13:ce:
b5:04:b5:8f:c9:6d:50:41:39:42:c9:e5:6d:b1:c4:
dd:9d:e9:f3:4e:62:89:5b:4b:6b:0b:f8:69:5b:54:
cb:37:0d:26:15:62:ec:7b:d6:1e:30:f6:ac:50:07:
20:05:62:91:5e:8f:d6:08:97:78:78:34:41:b7:c6:
b9:9f:4a:b2:b9:f0:42:45:16:05:4a:9a:36:ab:5f:
5e:e1:09:bc:90:dd:49:89:67:7d:8a:2f:4c:0b:30:
69:cd:71:e0:97:66:be:22:ad:4d:dd:c5:e8:df:aa:
a7:df:ce:05:dd:28:c2:58:ca:41:84:58:e3:47:ef:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:51:6B:FA:DD:8A:D4:EE:01:1F:09:04:30:06:88:9B:FA:11:51
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:17:e1:f7:bd:b6:7b:33:bb:f2:b6:7e:99:69:b2:7e:68:7f:
39:7e:29:b1:5d:19:ef:94:a1:25:71:64:ef:05:bf:29:f5:6e:
0a:07:ed:f5:b5:ca:c3:f9:59:9f:6a:ff:73:43:55:fa:6d:13:
7e:c5:32:a6:78:e7:a3:f5:b2:42:86:e0:f7:cb:8b:84:95:ee:
ce:39:84:ba:86:85:03:4a:9b:7d:6d:d1:61:82:02:72:45:d0:
6b:85:ee:b3:a3:66:87:de:eb:3e:61:82:de:7a:0e:b7:e6:c2:
77:59:04:e5:3c:85:b9:68:fd:80:07:d4:17:76:8c:d9:10:5a:
16:c7:52:f4:e2:eb:f5:89:31:1a:8d:fa:97:41:2c:c1:58:46:
67:23:58:74:0b:bc:ef:67:23:ef:8f:82:56:f4:fe:08:2e:74:
70:cb:b5:6a:d4:a1:65:45:e0:d4:10:fa:a0:ff:8f:cf:4d:f0:
77:42:52:ac:e0:7f:58:fc:c6:9c:9c:8d:8e:ac:0e:76:d8:81:
e0:f7:0f:10:b5:dd:0a:0d:63:cc:ad:4d:96:04:32:ed:54:e3:
ea:cc:49:c2:53:15:3a:87:5b:79:4f:62:f3:49:92:a3:45:4a:
cb:60:d8:b9:76:fd:ad:3e:c5:2f:5f:0e:41:a1:04:b5:3b:c5:
43:8a:db:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPgJUxavlIDTMVZ4A2RRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjUxMTA0MTkwMDMyWhcNMjUxMTA1MTkwMDMyWjAzMTEwLwYDVQQD
Eyg4NDJkNTE2YmZhZGQ4YWQ0ZWUwMTFmMDkwNDMwMDY4ODliZmExMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkHw+c9Sn7POCysVrMTCv6YcyKHG
YfNRJTIZp9r7CiSdHdYRHusQFP5xw8SFvYNmdyLTHKCgLfm7oGFJSaZOtmhmvmPx
U/MuZ1XZdo0oT7d3046UOCSNgyzLVloH9x9aGQ3ykVcAZrA9js3StGamEKjMt0ab
SaQuT+yxXCMbenoRi324E861BLWPyW1QQTlCyeVtscTdnenzTmKJW0trC/hpW1TL
Nw0mFWLse9YeMPasUAcgBWKRXo/WCJd4eDRBt8a5n0qyufBCRRYFSpo2q19e4Qm8
kN1JiWd9ii9MCzBpzXHgl2a+Iq1N3cXo36qn384F3SjCWMpBhFjjR+8x5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQtUWv63YrU7gEfCQQwBoib+hFRMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxfh9722
ezO78rZ+mWmyfmh/OX4psV0Z75ShJXFk7wW/KfVuCgft9bXKw/lZn2r/c0NV+m0T
fsUypnjno/WyQobg98uLhJXuzjmEuoaFA0qbfW3RYYICckXQa4Xus6Nmh97rPmGC
3noOt+bCd1kE5TyFuWj9gAfUF3aM2RBaFsdS9OLr9YkxGo36l0EswVhGZyNYdAu8
72cj74+CVvT+CC50cMu1atShZUXg1BD6oP+Pz03wd0JSrOB/WPzGnJyNjqwOdtiB
4PcPELXdCg1jzK1NlgQy7VTj6sxJwlMVOodbeU9i80mSo0VKy2DYuXb9rT7FL18O
QaEEtTvFQ4rb7w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:12:03 2025 by rpki-client