Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: y5bbVeZMHfiuRqiWKsNaTYGqt1qSM4vUmXD4cOKgQM4=
Subject key identifier: 85:5E:26:00:80:64:FD:D2:23:57:0D:EE:E0:26:12:00:DD:E3:A1:77
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 019A4EF4474B8F134E355D27887024F7E25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 08D1
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: Abi5pH7cUtL8rs9zrgavPjQRxnI.roa (hash: 7ApJuHPbwwQ8ZW2QLt3m10DbTaxlvMl9pvX3Esbaw0s=)
2: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: tvjUatTtSgVCkXpD/AS+GivDUXdirap4RnDOkvVSL28=)
3: rub7QgF_m8ViZ2zh8TifmWsv33k.roa (hash: D3MkLEEj8OyFp5olxebWk6+e8+j7slJr87cSCNkpbeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:47:4b:8f:13:4e:35:5d:27:88:70:24:f7:e2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=855e26008064fdd223570deee0261200dde3a177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:1c:6c:8b:05:a2:14:33:ad:79:f4:64:b6:
db:07:18:33:a8:59:21:7e:42:97:e6:0e:e4:e2:f6:
09:60:45:06:67:66:3e:8c:35:9c:f4:f0:a6:10:5c:
7e:03:25:b3:ce:36:22:44:e8:04:33:96:93:11:bf:
5f:96:a0:ef:86:76:01:e0:02:eb:0a:b1:6c:98:27:
a3:64:b4:83:0e:fe:86:c8:20:1b:0b:06:fc:09:a7:
10:b1:49:5a:37:42:1a:c0:88:c9:74:66:36:25:05:
59:14:c6:32:aa:a2:38:e0:fe:5f:16:0d:45:38:43:
53:08:9a:56:63:f6:95:b3:f6:66:e1:11:1f:4a:9a:
e3:a9:04:51:80:ca:1b:b1:01:d6:d5:e8:28:b7:41:
d1:7d:84:80:68:05:db:8c:bf:a7:9b:b2:29:3d:11:
63:28:f1:ad:11:6f:96:87:69:21:b9:e8:a7:f8:48:
12:87:9c:84:e8:ef:d4:56:d7:c5:47:3c:ce:a0:b9:
f0:ba:f4:01:9a:45:17:e5:ac:bc:ad:e6:b0:1d:a6:
64:92:ee:13:47:bd:30:71:bc:0b:34:cd:83:a1:d7:
79:48:20:6e:bf:16:92:75:c2:b1:b4:b8:75:7f:9c:
89:09:2c:93:b2:3d:45:ef:0f:57:7e:b9:7b:35:89:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:26:00:80:64:FD:D2:23:57:0D:EE:E0:26:12:00:DD:E3:A1:77
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:28:69:8e:b1:0b:9b:49:f1:d3:22:98:cf:54:47:93:f0:52:
c1:15:ee:ac:8f:52:a8:99:bc:1e:ae:b6:7f:b4:46:ce:0e:e4:
3d:ff:f5:9e:a9:e7:cc:77:98:46:b3:02:94:91:7b:0e:1f:a9:
c4:cd:46:b1:ee:ec:4a:f0:db:9e:f9:b5:4e:5f:e5:36:02:7d:
b7:4b:00:0f:dc:2a:40:75:3e:f3:c7:7a:fa:ba:5c:a5:93:02:
37:7c:60:3d:fd:43:21:42:8f:b8:76:06:e5:e1:ae:ff:57:ed:
de:5f:f6:ca:4e:b4:a5:7a:69:c5:47:62:7d:ff:76:c5:f5:90:
ec:2f:33:4d:76:e8:46:68:47:67:15:98:e1:1d:95:56:2e:50:
a2:2f:2a:ea:eb:2e:b8:66:3d:8e:a6:33:98:c6:21:26:20:a6:
f1:33:d0:87:f7:bd:bd:b6:5e:50:88:da:ac:11:78:c9:dc:64:
88:24:3b:83:32:60:05:c0:1a:47:6e:24:b7:e9:d3:24:b6:28:
ef:6f:aa:ff:95:9a:18:51:e9:99:f9:87:91:41:18:c5:14:27:
5e:c2:29:eb:46:7b:bd:7f:d9:67:7e:2a:04:d6:43:31:29:45:
06:c1:60:7e:04:aa:c9:1f:b0:df:42:23:6c:b9:e9:8f:93:da:
7a:a6:2f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EdLjxNONV0niHAk9+JeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYmU5MWViNjNhNDRmMWU5ZjFhODNlZGQyMThhMWVjNzVj
MjVlOTEwHhcNMjUxMTA0MTMwMDIzWhcNMjUxMTA1MTMwMDIzWjAzMTEwLwYDVQQD
Eyg4NTVlMjYwMDgwNjRmZGQyMjM1NzBkZWVlMDI2MTIwMGRkZTNhMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ikcbIsFohQzrXn0ZLbbBxgzqFkh
fkKX5g7k4vYJYEUGZ2Y+jDWc9PCmEFx+AyWzzjYiROgEM5aTEb9flqDvhnYB4ALr
CrFsmCejZLSDDv6GyCAbCwb8CacQsUlaN0IawIjJdGY2JQVZFMYyqqI44P5fFg1F
OENTCJpWY/aVs/Zm4REfSprjqQRRgMobsQHW1egot0HRfYSAaAXbjL+nm7IpPRFj
KPGtEW+Wh2khuein+EgSh5yE6O/UVtfFRzzOoLnwuvQBmkUX5ay8reawHaZkku4T
R70wcbwLNM2Dodd5SCBuvxaSdcKxtLh1f5yJCSyTsj1F7w9Xfrl7NYk/WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVeJgCAZP3SI1cN7uAmEgDd46F3MB8GA1UdIwQY
MBaAFAy+ketjpE8enxqD7dIYoex1wl6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTUxYjQtMGFiNC00NzE5LWIzMzAt
YmRjNWFlOGFiZGIxLzEvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZTUxYjQtMGFiNC00NzE5LWIzMzAtYmRjNWFlOGFiZGIx
LzEvREw2UjYyT2tUeDZmR29QdDBoaWg3SFhDWHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARShpjrEL
m0nx0yKYz1RHk/BSwRXurI9SqJm8Hq62f7RGzg7kPf/1nqnnzHeYRrMClJF7Dh+p
xM1Gse7sSvDbnvm1Tl/lNgJ9t0sAD9wqQHU+88d6+rpcpZMCN3xgPf1DIUKPuHYG
5eGu/1ft3l/2yk60pXppxUdiff92xfWQ7C8zTXboRmhHZxWY4R2VVi5Qoi8q6usu
uGY9jqYzmMYhJiCm8TPQh/e9vbZeUIjarBF4ydxkiCQ7gzJgBcAaR24kt+nTJLYo
72+q/5WaGFHpmfmHkUEYxRQnXsIp60Z7vX/ZZ34qBNZDMSlFBsFgfgSqyR+w30Ij
bLnpj5PaeqYvxg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:35 2025 by rpki-client