Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: 1c4w58O2kPKwlq6FFIF9uO2I/YrLhSSB4wvJ4J89WS4=
Subject key identifier: 66:6B:9B:EB:C5:C3:FE:FF:A1:F2:00:34:F2:2F:0F:36:68:49:F2:3C
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019A5187A5074CC7ED756BB1E35FDA75C8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 11A5
Signing time: Wed 05 Nov 2025 01:00:35 +0000
Manifest this update: Wed 05 Nov 2025 01:00:35 +0000
Manifest next update: Thu 06 Nov 2025 01:00:35 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: sS0zv0JkZlyRLUxYz0NOsPo0JVFtrSgJs7FFCYM8Tis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:a5:07:4c:c7:ed:75:6b:b1:e3:5f:da:75:c8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Nov 5 01:00:35 2025 GMT
Not After : Nov 6 01:00:35 2025 GMT
Subject: CN=666b9bebc5c3feffa1f20034f22f0f366849f23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:a1:b2:13:ed:1d:39:90:b9:05:9c:5a:55:
7b:b9:8a:e5:b2:95:79:46:35:f8:c9:31:41:54:8f:
ac:2f:c6:7c:c4:0b:b7:43:13:fe:31:ff:90:a2:41:
df:40:a1:de:97:77:2e:a2:8b:64:d6:9d:53:d5:4c:
39:87:b0:90:cf:b3:2e:e5:c1:18:4b:98:6a:0d:8b:
a2:9a:ee:95:8b:71:4a:59:11:d4:67:d4:2d:c9:82:
41:54:34:e1:f8:73:0b:c1:a9:7c:50:10:1d:0a:b2:
8f:5e:7d:dd:35:e3:82:a3:ef:0a:13:e2:cc:d4:13:
36:0c:fe:1e:8d:c5:bd:ee:d6:32:9b:2d:5e:58:8d:
bc:15:1f:88:2e:93:a6:a4:76:47:2a:da:48:3a:d1:
2a:18:04:98:9b:9e:0b:23:42:12:7f:41:08:a6:46:
16:57:54:fd:48:0f:69:3a:b8:ac:6e:c2:63:8e:08:
e3:ed:ba:8a:80:1a:ab:0b:77:64:a7:b5:c9:dd:a0:
d1:75:6b:d9:9b:59:5e:69:37:18:29:3f:dd:0f:d8:
ef:24:4c:a1:ee:c3:67:6d:20:bc:1b:0b:41:56:5f:
1b:b6:5c:50:11:45:7d:67:92:56:5d:6f:82:d5:be:
47:3c:66:b5:a1:88:d7:03:c7:49:51:33:db:cc:b7:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6B:9B:EB:C5:C3:FE:FF:A1:F2:00:34:F2:2F:0F:36:68:49:F2:3C
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d2:c6:44:ff:13:94:11:6d:fb:49:95:c4:38:82:21:d8:17:
35:51:57:b3:90:b0:34:34:94:54:48:82:4d:e0:06:31:43:f2:
25:68:de:29:6d:48:68:ea:b6:e9:24:2b:9a:82:f0:e1:74:7f:
6c:5d:66:02:b1:6d:92:54:a9:1b:28:99:43:13:6b:8a:d7:0f:
80:5c:b8:f3:a1:12:6f:fe:6e:00:de:20:01:4f:c0:0b:93:4f:
4b:4c:93:f1:bc:df:fe:a1:75:d3:c5:7b:a6:b6:91:ca:85:09:
bc:11:4f:49:c2:70:02:40:94:2a:f4:68:69:1f:6f:ab:18:ee:
ae:3e:81:0b:34:75:b2:67:29:af:e7:1e:a0:13:76:73:a6:2a:
ae:89:83:ea:3c:73:95:df:b0:74:c6:97:0b:62:dd:2f:59:5f:
24:dd:03:51:5f:09:ca:c5:44:7f:33:c0:70:76:a7:2f:f1:de:
60:a9:0a:77:db:2f:d3:12:c8:8a:c2:8e:1f:7d:36:57:81:d2:
3f:44:92:db:5f:8f:50:60:d1:c2:f7:7d:9d:26:b3:a5:b5:40:
a3:29:00:2d:23:79:a3:12:16:46:b2:93:d6:b7:96:b2:53:a5:
d4:ed:1f:ec:ad:1a:9f:79:04:b0:91:86:75:e0:64:b7:60:db:
1d:3e:8e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh6UHTMftdWux41/adcjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx
ODE3ZmEwHhcNMjUxMTA1MDEwMDM1WhcNMjUxMTA2MDEwMDM1WjAzMTEwLwYDVQQD
Eyg2NjZiOWJlYmM1YzNmZWZmYTFmMjAwMzRmMjJmMGYzNjY4NDlmMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4WhshPtHTmQuQWcWlV7uYrlspV5
RjX4yTFBVI+sL8Z8xAu3QxP+Mf+QokHfQKHel3cuootk1p1T1Uw5h7CQz7Mu5cEY
S5hqDYuimu6Vi3FKWRHUZ9QtyYJBVDTh+HMLwal8UBAdCrKPXn3dNeOCo+8KE+LM
1BM2DP4ejcW97tYymy1eWI28FR+ILpOmpHZHKtpIOtEqGASYm54LI0ISf0EIpkYW
V1T9SA9pOrisbsJjjgjj7bqKgBqrC3dkp7XJ3aDRdWvZm1leaTcYKT/dD9jvJEyh
7sNnbSC8GwtBVl8btlxQEUV9Z5JWXW+C1b5HPGa1oYjXA8dJUTPbzLew1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZrm+vFw/7/ofIANPIvDzZoSfI8MB8GA1UdIwQY
MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt
YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5
LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdLGRP8T
lBFt+0mVxDiCIdgXNVFXs5CwNDSUVEiCTeAGMUPyJWjeKW1IaOq26SQrmoLw4XR/
bF1mArFtklSpGyiZQxNritcPgFy486ESb/5uAN4gAU/AC5NPS0yT8bzf/qF108V7
praRyoUJvBFPScJwAkCUKvRoaR9vqxjurj6BCzR1smcpr+ceoBN2c6YqromD6jxz
ld+wdMaXC2LdL1lfJN0DUV8JysVEfzPAcHanL/HeYKkKd9sv0xLIisKOH302V4HS
P0SS21+PUGDRwvd9nSazpbVAoykALSN5oxIWRrKT1reWslOl1O0f7K0an3kEsJGG
deBkt2DbHT6ODQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:52 2025 by rpki-client