Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: hEm/T2knHRYA66iwKIm1txV8sk4QgOw3/ytDuT5yfqc=
Subject key identifier: 37:1E:D5:13:26:7D:D8:7C:18:B5:06:A3:96:39:D2:67:E7:5D:6C:8A
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019A4EF5B64C0F4941896A9C32D385DDFAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: pvtepbOpR3jLbngqZzzPMRejJh/CKPcLncAXMipaz6U=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b6:4c:0f:49:41:89:6a:9c:32:d3:85:dd:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=371ed513267dd87c18b506a39639d267e75d6c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:42:3d:91:9d:99:34:38:f2:32:5d:2c:a5:
4e:6f:24:8f:5f:7f:d5:0c:a5:0b:b9:04:d0:84:50:
56:b9:2f:2d:bd:8a:1c:49:43:ba:75:35:41:c5:14:
53:7a:c5:cd:e3:88:e4:0e:3c:16:0d:f0:fc:af:bf:
8f:f4:17:cb:0e:32:ef:13:73:37:25:54:5b:b2:78:
68:85:5b:ab:3c:3f:4e:13:dc:36:51:67:61:a6:54:
34:ed:c4:2b:46:b3:84:f1:f8:c0:97:94:8f:c1:60:
28:04:08:ca:08:0d:28:9d:f7:12:db:78:8e:58:a0:
6a:4f:c3:8e:33:ee:2c:ae:61:8d:c6:fa:52:54:b6:
6a:1a:80:eb:1a:92:db:bf:a1:68:e1:c7:df:08:76:
46:59:9d:23:3a:14:20:04:09:96:d5:b3:eb:9f:88:
a9:3c:2b:42:2b:c7:9f:67:36:f3:9f:5a:50:8e:f9:
a5:49:cf:d7:40:95:c7:25:1b:97:0c:5e:60:5e:ad:
44:91:79:11:e7:b1:f2:94:99:03:08:17:42:39:f9:
54:d5:af:51:78:cc:28:c3:00:4e:e1:89:3e:b6:43:
28:4f:e7:dc:e3:cf:a0:0b:f9:a0:63:67:3d:2b:e4:
38:61:b7:35:eb:17:f2:c4:8a:4e:e3:59:65:4b:6c:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:D5:13:26:7D:D8:7C:18:B5:06:A3:96:39:D2:67:E7:5D:6C:8A
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4d:83:6e:b0:01:2a:ac:4e:13:18:89:48:8c:5d:63:26:62:
5f:3e:6b:52:22:81:59:21:af:1d:a3:3e:fd:91:d9:21:ce:6b:
81:cd:82:63:ac:5a:8c:af:a2:01:a3:20:cb:72:19:65:e2:19:
23:d8:3a:9e:dd:58:7b:12:bc:6d:5c:cf:94:c6:67:32:e8:82:
fe:69:75:a5:fc:1b:5c:d7:31:ad:af:43:e3:6a:f4:47:f9:c3:
34:18:25:b2:c3:d1:5f:3d:1f:5d:b6:fd:1d:40:40:bd:dd:9c:
60:64:84:ee:07:c8:b3:7b:d9:c2:8d:68:0b:2d:bf:75:9d:60:
f5:18:62:c3:0e:e2:62:ed:25:ef:4f:ff:4b:99:dd:f4:87:76:
2d:67:6b:a6:60:1a:15:6d:6b:31:11:15:3b:6f:de:37:f4:af:
a3:a4:f2:38:2d:3d:a5:76:11:e5:cc:76:71:7a:54:d9:c9:19:
f0:e0:5e:81:f6:d9:90:77:9b:9c:5e:d5:5d:98:a1:d6:06:b2:
02:7a:6a:c5:a3:20:c2:6d:20:1f:6c:04:d7:22:c8:c4:84:a0:
e4:ea:5e:8a:25:95:e4:50:f1:a0:16:b0:1f:6d:67:6c:ac:d6:
5c:74:d8:27:af:2e:ff:7e:a8:8a:1b:b1:01:94:3d:6c:c4:48:
71:8a:aa:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9bZMD0lBiWqcMtOF3frtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4
NWQyYzgwHhcNMjUxMTA0MTMwMTU3WhcNMjUxMTA1MTMwMTU3WjAzMTEwLwYDVQQD
EygzNzFlZDUxMzI2N2RkODdjMThiNTA2YTM5NjM5ZDI2N2U3NWQ2YzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M5CPZGdmTQ48jJdLKVObySPX3/V
DKULuQTQhFBWuS8tvYocSUO6dTVBxRRTesXN44jkDjwWDfD8r7+P9BfLDjLvE3M3
JVRbsnhohVurPD9OE9w2UWdhplQ07cQrRrOE8fjAl5SPwWAoBAjKCA0onfcS23iO
WKBqT8OOM+4srmGNxvpSVLZqGoDrGpLbv6Fo4cffCHZGWZ0jOhQgBAmW1bPrn4ip
PCtCK8efZzbzn1pQjvmlSc/XQJXHJRuXDF5gXq1EkXkR57HylJkDCBdCOflU1a9R
eMwowwBO4Yk+tkMoT+fc48+gC/mgY2c9K+Q4Ybc16xfyxIpO41llS2x4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDce1RMmfdh8GLUGo5Y50mfnXWyKMB8GA1UdIwQY
MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt
Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj
LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt02DbrAB
KqxOExiJSIxdYyZiXz5rUiKBWSGvHaM+/ZHZIc5rgc2CY6xajK+iAaMgy3IZZeIZ
I9g6nt1YexK8bVzPlMZnMuiC/ml1pfwbXNcxra9D42r0R/nDNBglssPRXz0fXbb9
HUBAvd2cYGSE7gfIs3vZwo1oCy2/dZ1g9Rhiww7iYu0l70//S5nd9Id2LWdrpmAa
FW1rMREVO2/eN/Svo6TyOC09pXYR5cx2cXpU2ckZ8OBegfbZkHebnF7VXZih1gay
AnpqxaMgwm0gH2wE1yLIxISg5OpeiiWV5FDxoBawH21nbKzWXHTYJ68u/36oihux
AZQ9bMRIcYqq8g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:13:37 2025 by rpki-client