Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier: 6uCy06cVa8G5pcRjzywDXVIZpZAj+xJ9IQLty45aei8=
Subject key identifier: DF:E1:E7:6E:A1:10:CA:95:91:04:67:51:1D:C6:87:18:69:F1:03:80
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 019A4DAB157E16371C0E18AE7FBD7C388863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:48 +0000
Manifest this update: Tue 04 Nov 2025 07:00:48 +0000
Manifest next update: Wed 05 Nov 2025 07:00:48 +0000
Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: YZPaBN11KLgSpFRhKZNgp015KDqWISlYt9cC3sOrtjU=)
2: Z9dAkp6DWkibOyxuZSYF8JC0FP8.roa (hash: Di2cqBcEpf6hgxQLLA7v+y+JplI7ajbTFP4r/fEMeKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:15:7e:16:37:1c:0e:18:ae:7f:bd:7c:38:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Nov 4 07:00:48 2025 GMT
Not After : Nov 5 07:00:48 2025 GMT
Subject: CN=dfe1e76ea110ca95910467511dc6871869f10380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:a8:ed:4f:cf:09:05:82:c0:b4:77:44:54:
fc:2e:9e:d5:af:10:69:fe:b6:91:c4:89:07:8b:da:
43:c0:21:e7:3d:c4:82:ce:ad:44:39:e0:d5:65:aa:
8c:01:e3:90:86:72:5a:cb:de:fb:de:56:10:83:f0:
cb:dd:c1:3e:76:14:e8:68:dd:bb:8e:8b:b9:f9:1a:
c6:0e:1a:6c:2d:85:47:77:58:47:e4:2f:53:5c:7a:
13:fe:da:3a:3a:71:60:94:9a:fa:ef:19:da:13:d7:
5c:2c:b4:55:3a:a4:3f:b5:79:08:4d:a2:62:af:bb:
91:0b:8e:08:67:a5:ca:ec:7f:54:cd:6f:36:48:bf:
b5:73:da:a9:81:e2:02:b9:a5:ab:27:a6:21:a7:ee:
2f:b6:a3:3a:d8:f9:25:31:0d:07:6c:82:37:44:e9:
d5:b1:a6:6e:d2:9f:68:f6:67:91:8b:92:39:52:8e:
46:52:c0:ec:60:dd:fe:e7:97:5a:3d:e6:2a:75:4c:
59:10:7e:c8:87:a3:0f:f7:21:92:b0:91:7e:54:3a:
98:6a:6b:95:4e:c6:f2:6c:ed:2f:fa:f9:93:99:6a:
8c:0b:61:fd:f9:f2:51:7b:9f:f1:c0:2a:33:fe:cd:
61:95:79:84:19:aa:1b:1a:a2:18:d3:04:e8:46:d3:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E1:E7:6E:A1:10:CA:95:91:04:67:51:1D:C6:87:18:69:F1:03:80
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:09:ac:91:72:70:c5:c5:a2:4f:bd:5a:24:5b:6d:7c:a4:88:
47:12:3c:08:37:51:01:7a:21:73:25:af:7a:75:74:52:7b:9d:
66:60:e4:b0:02:74:2c:d7:c3:88:58:01:36:e1:01:59:82:cd:
01:8e:f2:4d:98:2e:e2:58:0f:43:b1:ca:fd:0c:b5:c6:6f:b3:
64:de:0f:40:72:3b:85:6e:f4:3c:62:ca:61:ef:cb:cc:8f:22:
3e:55:f7:00:d2:60:dc:28:98:cf:19:e5:64:61:10:d7:65:88:
b9:b8:b2:ff:54:37:d1:b2:1a:98:00:e0:09:ac:b2:19:88:b5:
b6:2c:d0:d5:00:e1:5e:ee:1d:c9:5e:b8:f0:b8:10:bb:a9:a2:
3c:dc:20:da:2c:be:f6:75:06:48:e4:63:97:ce:ef:a5:fd:db:
66:57:05:3c:86:6d:41:88:20:ad:60:25:bc:6e:20:75:0d:94:
1b:25:f0:7d:2f:89:5d:dd:93:57:19:a8:08:98:15:dd:61:7b:
7d:01:23:b8:f7:36:94:bf:02:86:eb:02:bd:03:a9:0e:60:0e:
25:f8:c8:75:de:c6:2b:c2:2c:38:24:3b:31:5a:6f:01:9f:f1:
4b:4b:65:12:13:47:94:0a:a0:62:35:52:e8:75:a8:57:01:7f:
0a:4b:ac:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqxV+FjccDhiuf718OIhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzYxNzhmYjAzNDkwNTEzMGFmMGNlMWNkMjc1MTU0ZjJi
NTliNzgwHhcNMjUxMTA0MDcwMDQ4WhcNMjUxMTA1MDcwMDQ4WjAzMTEwLwYDVQQD
EyhkZmUxZTc2ZWExMTBjYTk1OTEwNDY3NTExZGM2ODcxODY5ZjEwMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtio7U/PCQWCwLR3RFT8Lp7VrxBp
/raRxIkHi9pDwCHnPcSCzq1EOeDVZaqMAeOQhnJay9773lYQg/DL3cE+dhToaN27
jou5+RrGDhpsLYVHd1hH5C9TXHoT/to6OnFglJr67xnaE9dcLLRVOqQ/tXkITaJi
r7uRC44IZ6XK7H9UzW82SL+1c9qpgeICuaWrJ6Yhp+4vtqM62PklMQ0HbII3ROnV
saZu0p9o9meRi5I5Uo5GUsDsYN3+55daPeYqdUxZEH7Ih6MP9yGSsJF+VDqYamuV
TsbybO0v+vmTmWqMC2H9+fJRe5/xwCoz/s1hlXmEGaobGqIY0wToRtMpvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/h526hEMqVkQRnUR3Ghxhp8QOAMB8GA1UdIwQY
MBaAFNPGF4+wNJBRMK8M4c0nUVTytZt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzct
YTdjNGIyZjZlMjc2LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzctYTdjNGIyZjZlMjc2
LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQmskXJw
xcWiT71aJFttfKSIRxI8CDdRAXohcyWvenV0UnudZmDksAJ0LNfDiFgBNuEBWYLN
AY7yTZgu4lgPQ7HK/Qy1xm+zZN4PQHI7hW70PGLKYe/LzI8iPlX3ANJg3CiYzxnl
ZGEQ12WIubiy/1Q30bIamADgCayyGYi1tizQ1QDhXu4dyV648LgQu6miPNwg2iy+
9nUGSORjl87vpf3bZlcFPIZtQYggrWAlvG4gdQ2UGyXwfS+JXd2TVxmoCJgV3WF7
fQEjuPc2lL8ChusCvQOpDmAOJfjIdd7GK8IsOCQ7MVpvAZ/xS0tlEhNHlAqgYjVS
6HWoVwF/CkusJg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:49 2025 by rpki-client