Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: nVI5Q0WEvqyATq0J0PMe3fTWknmw1Eq5KpS86hIBGlU=
Subject key identifier: 7E:95:45:4A:53:BF:E4:9E:FA:D6:26:6F:B9:CF:06:68:69:C3:47:F2
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019A50E3115DADF6EC71FAA686E22472C492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 22:00:49 +0000
Manifest this update: Tue 04 Nov 2025 22:00:49 +0000
Manifest next update: Wed 05 Nov 2025 22:00:49 +0000
Files and hashes: 1: 7i8JH2gDDE50EmzV6j2wTHTOrXc.roa (hash: N1lOwseUmLTmn9OgnciUdbf6hlxuHBxxnuvg8UgK1o8=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: uiGOIaftbFEnazud10lIX52iB/OwHOTVzXoUz/y8Fmc=)
3: Q5TavcFKtR_0I79BfhZ4NkPDGaA.roa (hash: EO/fBdrumGLJMFUy0n9hpgnFqYeN6WeBPt+jfe8wV+o=)
4: pLsgoPgZwon5ItvVTFUsJaF7654.roa (hash: GzKHsFlhzzykyT0JK5oyDh4dgIyu8uoam0jj3L6SzGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:11:5d:ad:f6:ec:71:fa:a6:86:e2:24:72:c4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Nov 4 22:00:49 2025 GMT
Not After : Nov 5 22:00:49 2025 GMT
Subject: CN=7e95454a53bfe49efad6266fb9cf066869c347f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:4a:0e:ca:17:9a:fc:86:9b:e7:dc:6f:1a:
72:35:f7:ee:b0:d4:ba:dc:fa:1b:8c:20:d0:84:83:
41:f0:cb:73:ab:33:75:2b:3f:be:12:aa:ad:be:9b:
fa:22:f4:bf:2b:4f:b9:cb:25:c4:dc:2a:e1:25:d1:
be:01:e0:6c:bd:a2:fa:27:47:20:06:b1:db:7b:93:
da:d5:d0:53:51:50:4b:a0:05:10:98:79:fe:b8:64:
77:68:8e:da:c0:b7:54:58:6e:21:39:48:72:ee:90:
25:5f:03:f1:4e:0d:72:c5:bf:d5:bc:0a:dc:b7:83:
e5:e9:c2:c2:55:21:de:a4:d3:83:bf:3a:08:5a:d7:
e4:8d:e2:8c:f0:ca:f7:2a:e4:91:d6:dd:25:5b:04:
2d:a4:11:ef:a1:bd:06:37:46:d7:aa:df:85:db:b9:
c1:01:b4:71:d8:50:a4:18:23:de:29:54:ca:37:f6:
1e:85:3c:fa:87:6a:f2:42:5c:2b:02:5f:fd:a8:f2:
c1:47:c0:a5:59:04:03:c0:46:ed:1c:47:14:2f:37:
6c:b3:28:b9:2b:8f:cf:7b:0c:3a:00:04:b7:3b:05:
35:43:af:9a:1a:48:e1:2c:8b:95:f0:de:54:9a:d2:
75:6e:a3:92:ef:bc:81:a5:9e:86:7e:af:73:27:2b:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:45:4A:53:BF:E4:9E:FA:D6:26:6F:B9:CF:06:68:69:C3:47:F2
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:48:f8:a6:14:61:53:fb:f2:2d:d3:1a:f7:d7:04:cc:b1:
a9:41:96:9d:09:13:65:29:e5:74:db:ed:c7:9e:d6:f1:14:71:
07:d4:c1:02:9d:93:07:c1:88:31:64:d3:2c:b4:cd:91:17:e9:
ec:41:5d:7d:d5:52:2b:8e:c8:00:ff:e2:82:51:c6:4c:cf:52:
b2:04:06:15:99:af:8d:64:9e:7e:6c:c7:ed:ac:81:7c:2d:47:
5d:92:41:30:33:43:32:29:29:88:26:d7:d5:49:cf:de:61:59:
14:3a:11:43:e3:81:d0:e3:14:8b:53:fd:31:72:84:85:a2:09:
a7:6c:0b:7a:30:ab:2c:94:f2:74:d4:fe:e3:f8:b4:e1:6a:f6:
b4:69:03:7c:2e:4f:e0:df:68:b9:85:d9:10:fd:c4:4c:9e:37:
74:23:b8:e0:23:b8:73:79:93:cf:51:8a:c4:e0:9b:c3:58:ea:
f3:d8:07:ff:1c:8f:bc:4a:2d:f9:f9:4b:63:5f:d3:3a:fe:92:
49:59:8e:4e:a9:68:17:c7:4b:a8:ee:ca:47:ca:0a:ee:65:d6:
a7:9d:8f:c1:b5:05:5e:b1:bc:cd:0e:1d:15:58:d7:b1:85:e0:
08:52:a4:f3:2b:83:dc:bf:43:2c:a5:42:86:9b:17:34:77:00:
64:0b:f9:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4xFdrfbscfqmhuIkcsSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDkxYmRjNjY2YjhhNTk0MzNjNjhkOTBlMGQ4Y2MzN2Fj
ZGNlOTIwHhcNMjUxMTA0MjIwMDQ5WhcNMjUxMTA1MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZTk1NDU0YTUzYmZlNDllZmFkNjI2NmZiOWNmMDY2ODY5YzM0N2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR1KDsoXmvyGm+fcbxpyNffusNS6
3PobjCDQhINB8MtzqzN1Kz++Eqqtvpv6IvS/K0+5yyXE3CrhJdG+AeBsvaL6J0cg
BrHbe5Pa1dBTUVBLoAUQmHn+uGR3aI7awLdUWG4hOUhy7pAlXwPxTg1yxb/VvArc
t4Pl6cLCVSHepNODvzoIWtfkjeKM8Mr3KuSR1t0lWwQtpBHvob0GN0bXqt+F27nB
AbRx2FCkGCPeKVTKN/YehTz6h2ryQlwrAl/9qPLBR8ClWQQDwEbtHEcULzdssyi5
K4/Peww6AAS3OwU1Q6+aGkjhLIuV8N5UmtJ1bqOS77yBpZ6Gfq9zJyvbfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6VRUpTv+Se+tYmb7nPBmhpw0fyMB8GA1UdIwQY
MBaAFA8JG9xma4pZQzxo2Q4NjMN6zc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjkt
YTM0YThiODA2ODMyLzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjktYTM0YThiODA2ODMy
LzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/RI+KYU
YVP78i3TGvfXBMyxqUGWnQkTZSnldNvtx57W8RRxB9TBAp2TB8GIMWTTLLTNkRfp
7EFdfdVSK47IAP/iglHGTM9SsgQGFZmvjWSefmzH7ayBfC1HXZJBMDNDMikpiCbX
1UnP3mFZFDoRQ+OB0OMUi1P9MXKEhaIJp2wLejCrLJTydNT+4/i04Wr2tGkDfC5P
4N9ouYXZEP3ETJ43dCO44CO4c3mTz1GKxOCbw1jq89gH/xyPvEot+flLY1/TOv6S
SVmOTqloF8dLqO7KR8oK7mXWp52PwbUFXrG8zQ4dFVjXsYXgCFKk8yuD3L9DLKVC
hpsXNHcAZAv5Qg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:21 2025 by rpki-client