Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: R+4XXSZExZCIWXBFKj5iCFMXjg+HHgJXP7gkC6tkyVI=
Subject key identifier: 55:1D:B5:95:ED:C8:60:73:FE:4D:E3:97:EF:4F:F5:95:21:0B:B1:42
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 019A51504AF2A6326988C9601B694D2E93C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 08BA
Signing time: Wed 05 Nov 2025 00:00:07 +0000
Manifest this update: Wed 05 Nov 2025 00:00:07 +0000
Manifest next update: Thu 06 Nov 2025 00:00:07 +0000
Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: A8a2gVTk+XrG+tEKZXHPq374IZsXXD+4Z/TQC+tfdjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:4a:f2:a6:32:69:88:c9:60:1b:69:4d:2e:93:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Nov 5 00:00:07 2025 GMT
Not After : Nov 6 00:00:07 2025 GMT
Subject: CN=551db595edc86073fe4de397ef4ff595210bb142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:90:b0:6a:61:65:98:c8:c1:fc:c8:30:ac:
58:2b:f6:e3:55:28:85:a5:33:f7:3a:95:3c:3f:7d:
1d:1a:b0:8c:33:3b:48:9d:92:38:5e:fe:90:b2:64:
e3:ad:1c:8f:6d:7f:bd:92:c7:a7:18:e9:3c:7f:bb:
6f:d4:70:d3:9c:58:c9:1a:75:d4:c6:49:27:b6:a0:
eb:0d:ac:0f:1c:e2:46:0d:a8:cd:84:23:bb:24:28:
db:09:3b:ce:c2:28:34:79:46:0e:48:86:bb:8c:39:
4b:8a:9d:73:da:52:cb:00:09:0d:9c:48:cc:3c:0d:
09:4a:a2:18:49:a8:52:36:ce:f1:bb:31:17:f6:cf:
36:58:bd:c7:14:cc:59:fb:ef:a2:df:61:d5:14:6f:
74:4c:14:cb:b4:e9:68:53:31:94:16:ea:7c:c9:96:
a4:56:ec:a3:d0:6c:45:1e:5d:a4:37:91:47:d9:d6:
0d:14:1f:f8:f1:10:b4:97:d0:ea:26:e9:d9:8d:90:
25:6d:9c:8c:54:fc:af:72:b8:6c:49:ea:a6:11:49:
5f:01:bf:40:49:28:e0:a8:5e:a9:89:65:e1:6f:69:
80:7d:e6:0c:aa:c6:56:5b:b6:4f:52:ee:d3:ff:ab:
89:8f:41:f3:4f:25:20:b7:b9:4d:83:54:54:cc:66:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1D:B5:95:ED:C8:60:73:FE:4D:E3:97:EF:4F:F5:95:21:0B:B1:42
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:25:b4:a5:34:68:51:6c:93:a8:73:08:1b:08:fc:63:fb:a4:
e5:b2:94:19:d8:d1:19:60:17:ff:f0:7d:73:1f:c1:a0:35:6b:
8d:b5:32:9c:88:89:79:fc:90:81:73:61:4e:a1:b0:c5:aa:af:
10:b9:b0:e7:0f:e7:28:da:4f:06:26:65:ec:0e:2f:a0:c8:0d:
e9:a2:3a:79:36:55:45:49:63:2c:8e:3a:b4:61:4c:b3:b5:3b:
12:d8:67:c1:6b:18:e9:f1:ef:09:e7:1e:f5:06:60:86:da:49:
d5:45:11:77:9c:d3:b1:8c:6f:6e:39:3a:36:15:49:bf:b2:0b:
f7:c1:de:54:a7:96:47:16:41:7a:ba:77:e3:e4:ee:d8:8f:69:
63:d9:1e:8e:66:97:e0:32:7e:ef:6c:7e:30:a9:d0:70:07:30:
1c:d2:63:19:19:f1:74:b9:ee:5f:c0:15:04:73:b1:6c:d0:38:
5a:d2:f6:18:d8:83:09:19:16:43:40:89:f2:44:30:32:23:ae:
16:7f:f7:0b:8e:f6:32:52:1b:a3:81:b6:5b:5b:37:c8:da:1f:
ba:f5:e9:50:a9:b0:f5:b3:d6:fb:7a:ca:bd:18:c4:3b:60:6e:
f3:85:27:e6:aa:f6:40:26:50:ab:bb:e0:83:8e:85:df:02:51:
3e:6e:a4:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUErypjJpiMlgG2lNLpPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm
ZDk4MjgwHhcNMjUxMTA1MDAwMDA3WhcNMjUxMTA2MDAwMDA3WjAzMTEwLwYDVQQD
Eyg1NTFkYjU5NWVkYzg2MDczZmU0ZGUzOTdlZjRmZjU5NTIxMGJiMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwaQsGphZZjIwfzIMKxYK/bjVSiF
pTP3OpU8P30dGrCMMztInZI4Xv6QsmTjrRyPbX+9ksenGOk8f7tv1HDTnFjJGnXU
xkkntqDrDawPHOJGDajNhCO7JCjbCTvOwig0eUYOSIa7jDlLip1z2lLLAAkNnEjM
PA0JSqIYSahSNs7xuzEX9s82WL3HFMxZ+++i32HVFG90TBTLtOloUzGUFup8yZak
Vuyj0GxFHl2kN5FH2dYNFB/48RC0l9DqJunZjZAlbZyMVPyvcrhsSeqmEUlfAb9A
SSjgqF6piWXhb2mAfeYMqsZWW7ZPUu7T/6uJj0HzTyUgt7lNg1RUzGYEGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUdtZXtyGBz/k3jl+9P9ZUhC7FCMB8GA1UdIwQY
MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt
MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4
LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiW0pTRo
UWyTqHMIGwj8Y/uk5bKUGdjRGWAX//B9cx/BoDVrjbUynIiJefyQgXNhTqGwxaqv
ELmw5w/nKNpPBiZl7A4voMgN6aI6eTZVRUljLI46tGFMs7U7EthnwWsY6fHvCece
9QZghtpJ1UURd5zTsYxvbjk6NhVJv7IL98HeVKeWRxZBerp34+Tu2I9pY9kejmaX
4DJ+72x+MKnQcAcwHNJjGRnxdLnuX8AVBHOxbNA4WtL2GNiDCRkWQ0CJ8kQwMiOu
Fn/3C472MlIbo4G2W1s3yNofuvXpUKmw9bPW+3rKvRjEO2Bu84Un5qr2QCZQq7vg
g46F3wJRPm6kPA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:15 2025 by rpki-client