Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
File: a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json)
Hash identifier: NGB7hpWUhFEVW/GE/d+bsm/pu7tOZkssciA4N+gfFq8=
Subject key identifier: DD:95:F7:24:69:40:90:D4:38:8B:E0:4D:EB:DD:68:85:F4:67:17:7C
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial: 019A4DAAF469B35CF2FE15A5FBCCFFD0F1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
Manifest number: 0D49
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa (hash: VtX3ApkZgzYiR7CYiCSZq34MU+2YZHhoSAVs9vYdqbA=)
2: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: Q0dFXDUIoS0gO9uaPuQpR3KuD6C/CVHpSznEnZl1FNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f4:69:b3:5c:f2:fe:15:a5:fb:cc:ff:d0:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=dd95f724694090d4388be04debdd6885f467177c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:54:f1:42:ca:69:b3:6c:e8:34:ee:73:d0:
0e:8a:49:fe:58:5b:6d:2f:1d:52:2d:76:ee:5b:25:
8d:98:df:eb:2d:50:72:44:48:be:8d:70:71:9f:97:
99:88:b9:0e:45:39:78:94:0e:f0:84:12:29:86:7c:
2d:85:68:56:e6:16:2b:fd:af:50:8a:4d:3e:36:c7:
82:eb:54:53:3f:81:4d:4e:99:2f:fc:11:4d:91:9e:
39:15:75:8b:90:f5:db:c3:b2:6b:3b:16:fb:f8:69:
d8:6a:df:0b:f2:97:cd:00:f8:2f:68:4d:71:56:8f:
91:be:bf:be:73:50:95:3d:6a:5e:06:7e:8c:05:13:
91:79:2b:7d:e5:b8:0c:c5:f7:8a:fd:62:36:89:14:
75:b2:65:4d:1b:6c:07:9f:0f:25:c3:cf:74:2d:b1:
cb:25:00:b4:b4:de:35:37:02:22:27:6b:47:c1:c4:
aa:62:20:21:fe:1b:5c:4b:15:58:8f:fb:d5:52:dd:
ac:ba:eb:92:e4:2c:09:24:f5:7b:43:7f:6e:df:47:
06:e0:85:ad:ef:6a:f6:03:b6:48:62:89:2f:0b:4e:
a2:83:eb:f4:45:b6:17:7b:e8:1c:d7:ab:47:11:94:
33:5f:9f:25:96:fd:03:66:9f:1e:a9:8f:93:f6:99:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:F7:24:69:40:90:D4:38:8B:E0:4D:EB:DD:68:85:F4:67:17:7C
X509v3 Authority Key Identifier:
keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:59:b7:7a:f6:2a:8a:fd:66:25:69:d4:dd:1f:11:c6:0b:59:
2e:ed:61:cf:c2:88:0a:9b:ea:5c:40:8a:c1:e1:e3:a8:5c:60:
49:d7:91:1a:6d:7f:c8:65:80:ff:d9:2f:95:f9:d9:f9:cc:16:
d2:39:fb:b2:eb:bd:14:94:38:83:b2:9a:cb:04:41:94:1a:9b:
9b:28:7b:e7:ac:ac:d6:aa:80:f1:45:bf:bc:5d:8e:4d:a2:ca:
d3:eb:69:86:bc:b4:57:ad:e4:c1:2d:3b:d5:4d:91:0e:fc:06:
8b:3b:1e:87:fc:91:1d:3d:dd:0a:a6:36:6f:58:5d:59:11:50:
cf:5b:d5:54:7c:93:8c:58:8d:4d:ce:2a:da:2f:66:46:a4:65:
1a:d0:b7:32:86:be:d9:22:10:25:e1:47:0e:05:64:52:23:92:
2b:42:6c:2a:1e:ff:d6:e6:5a:af:7d:df:06:1a:7d:8c:3a:56:
a0:8e:2d:b7:3a:c2:d0:fd:89:5c:5c:f2:65:3f:eb:25:01:ca:
fa:3c:46:22:01:62:71:86:5c:1c:b2:32:ca:60:84:21:27:b0:
37:bf:4b:9b:1d:b4:d4:b8:33:90:78:59:09:63:c3:25:a8:ac:
53:b0:77:e5:34:52:41:84:34:03:1c:d1:cc:4f:be:2b:9c:14:
ce:ea:d5:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqvRps1zy/hWl+8z/0PHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWU0NzBlOTBkNWViZGRjY2FhOWNmNmJiMjJlODlkZTBk
OWYyMDcwHhcNMjUxMTA0MDcwMDQwWhcNMjUxMTA1MDcwMDQwWjAzMTEwLwYDVQQD
EyhkZDk1ZjcyNDY5NDA5MGQ0Mzg4YmUwNGRlYmRkNjg4NWY0NjcxNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ZU8ULKabNs6DTuc9AOikn+WFtt
Lx1SLXbuWyWNmN/rLVByREi+jXBxn5eZiLkORTl4lA7whBIphnwthWhW5hYr/a9Q
ik0+NseC61RTP4FNTpkv/BFNkZ45FXWLkPXbw7JrOxb7+GnYat8L8pfNAPgvaE1x
Vo+Rvr++c1CVPWpeBn6MBROReSt95bgMxfeK/WI2iRR1smVNG2wHnw8lw890LbHL
JQC0tN41NwIiJ2tHwcSqYiAh/htcSxVYj/vVUt2suuuS5CwJJPV7Q39u30cG4IWt
72r2A7ZIYokvC06ig+v0RbYXe+gc16tHEZQzX58llv0DZp8eqY+T9pmCDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2V9yRpQJDUOIvgTevdaIX0Zxd8MB8GA1UdIwQY
MBaAFGteRw6Q1evdzKqc9rsi6J3g2fIHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQt
ZWViNmRhYTc1ZWM1LzEvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQtZWViNmRhYTc1ZWM1
LzEvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlm3evYq
iv1mJWnU3R8RxgtZLu1hz8KICpvqXECKweHjqFxgSdeRGm1/yGWA/9kvlfnZ+cwW
0jn7suu9FJQ4g7KaywRBlBqbmyh756ys1qqA8UW/vF2OTaLK0+tphry0V63kwS07
1U2RDvwGizseh/yRHT3dCqY2b1hdWRFQz1vVVHyTjFiNTc4q2i9mRqRlGtC3Moa+
2SIQJeFHDgVkUiOSK0JsKh7/1uZar33fBhp9jDpWoI4ttzrC0P2JXFzyZT/rJQHK
+jxGIgFicYZcHLIyymCEISewN79Lmx201LgzkHhZCWPDJaisU7B35TRSQYQ0AxzR
zE++K5wUzurVig==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:50 2025 by rpki-client