Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: 0uDe8kR2nQ6ZZW1MZvj1J7THO2Z6bmxZx5T2cPXloZw=
Subject key identifier: 53:88:3D:B7:8B:BA:6A:96:A9:E1:AC:89:88:3B:4B:13:C8:CC:DF:13
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 019A4DE170B5C22D68A94EF7B999396C364A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:11 +0000
Manifest this update: Tue 04 Nov 2025 08:00:11 +0000
Manifest next update: Wed 05 Nov 2025 08:00:11 +0000
Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: LjJWRB35ysC4DQm16zQscHkZpi1IHcMqF2eJTLiHUNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:70:b5:c2:2d:68:a9:4e:f7:b9:99:39:6c:36:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Nov 4 08:00:11 2025 GMT
Not After : Nov 5 08:00:11 2025 GMT
Subject: CN=53883db78bba6a96a9e1ac89883b4b13c8ccdf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:88:d0:44:8f:dc:a5:70:fc:ef:08:56:d1:
5d:97:cc:63:e2:d7:a5:80:f3:c8:c2:e4:61:15:dc:
dd:6f:dc:06:52:cd:44:9b:ad:68:d2:a2:75:10:b2:
82:4a:61:6f:e5:36:66:dc:b3:3e:67:8c:34:ee:30:
7d:13:d6:70:9c:a6:42:97:51:60:0b:ce:1e:17:67:
ad:55:cc:ef:02:46:f9:6d:bc:fc:de:4f:69:e8:4f:
bd:bf:03:a3:f1:5d:85:48:ce:24:63:fe:d1:1c:cd:
b5:c8:40:14:e1:db:9b:a5:ef:8d:84:eb:e1:a6:db:
f1:34:f1:d0:9c:fc:22:dd:92:5f:34:de:f1:0b:10:
c8:a2:bd:6a:f4:ff:89:fe:dd:cf:c2:93:8d:3b:bd:
5d:8c:4f:d1:1c:6f:95:59:52:20:6f:76:c4:53:81:
e0:f6:62:3b:3f:c6:97:11:40:55:ee:46:24:73:ac:
f6:a1:2d:dc:f4:05:04:b5:c6:ad:87:64:8b:a9:56:
21:34:f2:f3:e8:d5:67:db:82:50:fa:b2:60:24:1e:
61:5a:19:ed:24:57:44:3f:37:c2:e7:7e:98:31:2c:
76:e9:9b:d7:f3:5f:4b:9e:af:da:61:de:28:4b:f1:
db:1c:72:da:b1:cf:2e:a9:b8:9f:23:10:8c:14:f0:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:88:3D:B7:8B:BA:6A:96:A9:E1:AC:89:88:3B:4B:13:C8:CC:DF:13
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d0:3f:95:cf:86:79:9f:a5:72:dd:03:f5:43:45:52:2f:5e:
34:95:de:93:90:cf:d2:40:32:74:ed:86:bf:51:b0:af:e1:4f:
75:d6:3e:49:2c:c1:4e:fb:7b:28:80:a5:2e:a6:bc:5d:e2:e3:
f4:75:44:b3:50:5a:fa:09:74:45:12:fc:8d:0f:2c:07:c2:2f:
da:b1:6e:73:3c:f4:72:95:ca:a1:96:17:28:bc:99:b1:4a:d3:
0d:08:a8:1a:c3:9d:b7:38:ac:a0:d9:18:31:7f:da:ca:47:8a:
9d:35:10:1c:3a:a1:88:7b:a8:6f:7f:4b:cd:75:de:81:49:70:
20:c1:0f:f3:fa:f6:f0:f3:04:dd:cd:f7:96:39:2a:c0:05:0a:
a3:7f:aa:df:d4:ae:98:5d:52:88:9d:1e:5e:06:c8:f7:04:49:
7c:84:48:60:8e:e1:cc:22:47:d9:7e:b3:90:b1:02:e0:c0:d3:
9e:2c:8a:7a:78:9e:89:6b:ed:31:a2:4f:68:86:0a:70:34:ca:
5d:ed:e1:50:c5:3a:f5:74:12:17:fc:3c:0a:f4:44:9b:47:f8:
4c:a6:ff:a5:c3:08:88:bb:55:4d:46:b7:8c:08:28:10:cf:da:
da:61:ae:d9:f7:4d:06:f1:2a:39:40:8f:d7:41:f6:92:9d:a9:
89:2f:4a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4XC1wi1oqU73uZk5bDZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzVhMmM5NTg4ZmM2OTVkMjc1NDI4M2RjZDNkMTIzZDFm
Nzc4MTEwHhcNMjUxMTA0MDgwMDExWhcNMjUxMTA1MDgwMDExWjAzMTEwLwYDVQQD
Eyg1Mzg4M2RiNzhiYmE2YTk2YTllMWFjODk4ODNiNGIxM2M4Y2NkZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBOI0ESP3KVw/O8IVtFdl8xj4tel
gPPIwuRhFdzdb9wGUs1Em61o0qJ1ELKCSmFv5TZm3LM+Z4w07jB9E9ZwnKZCl1Fg
C84eF2etVczvAkb5bbz83k9p6E+9vwOj8V2FSM4kY/7RHM21yEAU4dubpe+NhOvh
ptvxNPHQnPwi3ZJfNN7xCxDIor1q9P+J/t3PwpONO71djE/RHG+VWVIgb3bEU4Hg
9mI7P8aXEUBV7kYkc6z2oS3c9AUEtcath2SLqVYhNPLz6NVn24JQ+rJgJB5hWhnt
JFdEPzfC536YMSx26ZvX819Lnq/aYd4oS/HbHHLasc8uqbifIxCMFPA6WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOIPbeLumqWqeGsiYg7SxPIzN8TMB8GA1UdIwQY
MBaAFHR1oslYj8aV0nVCg9zT0SPR93gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQt
NDBiZTBjNDYzYjkwLzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQtNDBiZTBjNDYzYjkw
LzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltA/lc+G
eZ+lct0D9UNFUi9eNJXek5DP0kAydO2Gv1Gwr+FPddY+SSzBTvt7KIClLqa8XeLj
9HVEs1Ba+gl0RRL8jQ8sB8Iv2rFuczz0cpXKoZYXKLyZsUrTDQioGsOdtzisoNkY
MX/aykeKnTUQHDqhiHuob39LzXXegUlwIMEP8/r28PME3c33ljkqwAUKo3+q39Su
mF1SiJ0eXgbI9wRJfIRIYI7hzCJH2X6zkLEC4MDTniyKenieiWvtMaJPaIYKcDTK
Xe3hUMU69XQSF/w8CvREm0f4TKb/pcMIiLtVTUa3jAgoEM/a2mGu2fdNBvEqOUCP
10H2kp2piS9K9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:25 2025 by rpki-client