Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: VdKT0cQVphI/3FIuPbcMOgnKVwf8c0QyzLHJF6JUTBA=
Subject key identifier: DC:D7:31:DA:D5:B8:EB:5F:90:73:BC:B7:1A:7A:73:1C:91:A0:4A:D5
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019A4FD02D535E71578DBA1F48FF58750F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0680
Signing time: Tue 04 Nov 2025 17:00:34 +0000
Manifest this update: Tue 04 Nov 2025 17:00:34 +0000
Manifest next update: Wed 05 Nov 2025 17:00:34 +0000
Files and hashes: 1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: BVGnV9pmlwS4D8/mpLoKSntOGaclQrEocYh066C6Mek=)
2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:2d:53:5e:71:57:8d:ba:1f:48:ff:58:75:0f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Nov 4 17:00:34 2025 GMT
Not After : Nov 5 17:00:34 2025 GMT
Subject: CN=dcd731dad5b8eb5f9073bcb71a7a731c91a04ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:09:47:bc:6b:a7:ae:d8:c8:42:74:ca:ed:
78:4e:4a:fa:55:a3:62:71:a6:69:9e:a9:36:c0:0f:
ad:4b:7a:78:e4:f0:0e:25:ba:8e:d7:a3:33:99:75:
2a:c1:1a:86:a5:11:55:61:05:2e:96:5a:72:57:20:
7b:cd:96:3f:40:e5:4d:c7:cc:dc:2f:9f:ea:da:94:
e7:6a:2a:72:42:30:7e:37:f2:3d:00:43:ff:6e:ab:
fe:27:09:fe:d9:f4:0c:30:f0:59:7e:3d:38:75:e6:
f1:fa:e5:df:81:3c:32:5f:8f:25:89:0a:3e:24:30:
cd:18:f1:e0:ff:7e:b0:9e:ba:b1:ea:e3:4b:f1:ff:
17:cc:5e:f0:06:71:9d:0c:5c:2f:a0:8a:ba:d3:eb:
f4:90:56:4a:fd:ec:80:3d:6c:9b:9f:de:98:9e:bb:
d2:a8:b2:99:da:a7:18:6d:8c:fd:0c:62:27:f4:53:
c3:f4:f5:e9:e7:e3:90:5e:a6:a4:04:1a:db:5d:ff:
e0:7d:84:61:1e:0c:1a:0f:63:3b:67:eb:fe:a2:03:
1a:86:91:54:23:c8:32:20:e4:5d:b0:76:f5:1b:bf:
ad:50:1f:de:03:64:e1:76:6b:ce:5c:6d:be:80:ce:
54:e6:b1:b9:2a:e9:48:c4:c2:61:2e:d5:2b:ca:7e:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:31:DA:D5:B8:EB:5F:90:73:BC:B7:1A:7A:73:1C:91:A0:4A:D5
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:db:40:51:92:06:f3:a1:36:0c:b7:66:58:0b:d9:98:ab:a0:
84:5e:d1:ea:7e:f2:bf:30:99:11:80:3d:6b:4e:90:fe:4a:4b:
aa:be:aa:8b:49:1f:13:5e:b0:59:e7:08:ab:42:08:03:4e:13:
57:52:82:3e:aa:f2:78:6e:aa:af:42:49:27:e4:7e:57:7a:6b:
5e:bd:26:08:1d:02:12:61:dc:f8:06:29:52:16:67:eb:bc:93:
6b:0c:37:5b:72:18:55:6b:e2:ae:ab:be:3c:70:71:1e:20:6c:
43:7f:00:b6:1a:1d:4b:d1:bd:7d:8d:dd:ab:58:c3:77:30:45:
67:9d:18:85:85:63:99:fb:f7:c5:2b:bc:71:ed:25:c4:88:92:
8f:04:99:2d:70:c2:b6:12:f2:c3:64:17:d5:5b:a1:fc:5d:70:
56:98:de:c1:28:dd:5c:28:0d:b6:6f:18:ea:58:e7:49:68:e4:
43:46:75:24:fe:40:d2:c6:59:b5:34:8d:1e:c0:f6:d9:e7:8d:
1d:38:b7:cc:32:bc:bd:8d:23:59:af:6e:bd:c0:02:78:03:5b:
ef:17:6c:49:b6:29:bd:56:b3:b2:37:6f:fc:b5:21:7d:a9:28:
a9:d2:96:ac:a6:f1:04:49:bf:bf:61:b7:70:44:3b:1e:5c:20:
ac:9b:28:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0C1TXnFXjbofSP9YdQ9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1
M2IzZTQwHhcNMjUxMTA0MTcwMDM0WhcNMjUxMTA1MTcwMDM0WjAzMTEwLwYDVQQD
EyhkY2Q3MzFkYWQ1YjhlYjVmOTA3M2JjYjcxYTdhNzMxYzkxYTA0YWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCMJR7xrp67YyEJ0yu14Tkr6VaNi
caZpnqk2wA+tS3p45PAOJbqO16MzmXUqwRqGpRFVYQUullpyVyB7zZY/QOVNx8zc
L5/q2pTnaipyQjB+N/I9AEP/bqv+Jwn+2fQMMPBZfj04debx+uXfgTwyX48liQo+
JDDNGPHg/36wnrqx6uNL8f8XzF7wBnGdDFwvoIq60+v0kFZK/eyAPWybn96YnrvS
qLKZ2qcYbYz9DGIn9FPD9PXp5+OQXqakBBrbXf/gfYRhHgwaD2M7Z+v+ogMahpFU
I8gyIORdsHb1G7+tUB/eA2ThdmvOXG2+gM5U5rG5KulIxMJhLtUryn7xkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzXMdrVuOtfkHO8txp6cxyRoErVMB8GA1UdIwQY
MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt
ZDY0N2RjOGE1NmI2LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2
LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9tAUZIG
86E2DLdmWAvZmKughF7R6n7yvzCZEYA9a06Q/kpLqr6qi0kfE16wWecIq0IIA04T
V1KCPqryeG6qr0JJJ+R+V3prXr0mCB0CEmHc+AYpUhZn67yTaww3W3IYVWvirqu+
PHBxHiBsQ38AthodS9G9fY3dq1jDdzBFZ50YhYVjmfv3xSu8ce0lxIiSjwSZLXDC
thLyw2QX1Vuh/F1wVpjewSjdXCgNtm8Y6ljnSWjkQ0Z1JP5A0sZZtTSNHsD22eeN
HTi3zDK8vY0jWa9uvcACeANb7xdsSbYpvVazsjdv/LUhfakoqdKWrKbxBEm/v2G3
cEQ7HlwgrJsoEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:10 2025 by rpki-client