Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: GKKnZ7rVAihVzHNGbF5SmyohIGFntfIVl8u9X1ewBYA=
Subject key identifier: 83:7B:ED:63:C6:F3:82:35:A0:AD:B8:74:57:B2:B7:2E:4D:7C:0B:A6
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019A4F622D03FD0C6CB903B6CCF05B929519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 132E
Signing time: Tue 04 Nov 2025 15:00:25 +0000
Manifest this update: Tue 04 Nov 2025 15:00:25 +0000
Manifest next update: Wed 05 Nov 2025 15:00:25 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: K11L4qNy016ovoWNYAZC6yEpuJxyUQMEQyGg8D7ayOY=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2d:03:fd:0c:6c:b9:03:b6:cc:f0:5b:92:95:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Nov 4 15:00:25 2025 GMT
Not After : Nov 5 15:00:25 2025 GMT
Subject: CN=837bed63c6f38235a0adb87457b2b72e4d7c0ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:b2:7f:45:80:00:6c:cd:cc:bb:59:e1:e8:
2a:50:7c:66:3e:12:f3:7e:91:9e:36:52:6c:f9:10:
67:0b:44:67:63:3b:b9:af:50:ab:82:ed:dd:1f:c2:
ff:59:0e:aa:3d:27:42:70:c3:30:65:01:0b:ba:38:
00:45:1d:16:20:bb:7f:cf:f8:67:4d:5b:7c:20:22:
50:e6:b2:69:d5:90:9a:d0:0a:41:8f:8d:38:58:39:
41:7a:81:ac:b9:2f:a9:75:c1:6e:b4:88:a4:06:01:
ec:e9:26:72:57:fe:18:58:85:a0:de:7b:3f:12:fc:
1b:39:61:7a:6a:4c:25:af:5f:93:76:bc:eb:ef:35:
77:fb:0a:31:d1:f1:bf:71:ea:de:f9:77:b6:17:ca:
74:9d:71:6e:4d:00:fe:e9:0c:05:b2:7b:57:ae:ae:
df:ba:12:75:0d:0c:b5:a6:52:6a:b6:1e:62:6e:49:
d4:ac:74:23:84:08:44:1a:83:7e:11:a9:05:e2:8c:
fe:64:a7:01:f6:55:14:ad:43:57:df:a8:b2:70:38:
94:df:04:4c:f7:66:80:7d:6e:fa:4f:74:fe:c0:72:
a3:1d:3e:67:6d:1b:88:2f:90:66:fe:0c:b6:0c:a6:
b8:a3:af:84:6a:06:98:6c:77:14:3c:03:92:83:ce:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:ED:63:C6:F3:82:35:A0:AD:B8:74:57:B2:B7:2E:4D:7C:0B:A6
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9a:1f:e1:c4:3f:ac:aa:19:67:8e:30:56:44:9c:2d:f1:ca:
dc:6e:a9:e7:1a:45:5b:e7:23:41:0d:77:f9:17:0a:c8:51:22:
c7:2a:78:dd:08:72:6a:f9:6b:4b:87:36:30:55:a0:34:5b:3e:
52:46:35:72:80:a4:38:b9:bd:59:e5:50:5d:04:dc:df:97:17:
af:f3:e2:52:d0:9c:4e:dd:cb:c4:c1:dc:28:7e:e9:44:5b:d9:
4f:95:cd:da:c9:2a:4d:be:43:1c:96:8f:09:04:93:d2:88:63:
f9:35:52:3c:38:a7:e2:58:6f:c8:17:94:d8:2d:5b:03:6b:71:
3d:e3:74:b7:83:14:22:aa:0c:be:eb:7b:08:86:53:77:2b:5c:
e3:71:dc:81:b6:20:e2:1a:4c:16:58:c6:12:8b:b5:41:a5:33:
e3:9a:aa:f7:99:ad:c8:37:fe:fc:35:5c:6c:9f:02:5f:4a:66:
42:09:36:01:b7:f0:a9:50:d9:e8:5c:78:9e:2a:69:21:6f:15:
6d:5c:69:47:54:b2:71:55:92:cd:91:73:b2:7d:7a:ba:b6:43:
d8:b7:1d:cf:38:f9:d1:77:f1:af:9b:39:92:47:79:9c:af:a6:
03:67:d4:21:2a:e7:d6:db:1e:f5:37:f9:62:0d:63:79:31:42:
ce:da:70:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYi0D/QxsuQO2zPBbkpUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjUxMTA0MTUwMDI1WhcNMjUxMTA1MTUwMDI1WjAzMTEwLwYDVQQD
Eyg4MzdiZWQ2M2M2ZjM4MjM1YTBhZGI4NzQ1N2IyYjcyZTRkN2MwYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3iyf0WAAGzNzLtZ4egqUHxmPhLz
fpGeNlJs+RBnC0RnYzu5r1Crgu3dH8L/WQ6qPSdCcMMwZQELujgARR0WILt/z/hn
TVt8ICJQ5rJp1ZCa0ApBj404WDlBeoGsuS+pdcFutIikBgHs6SZyV/4YWIWg3ns/
EvwbOWF6akwlr1+Tdrzr7zV3+wox0fG/cere+Xe2F8p0nXFuTQD+6QwFsntXrq7f
uhJ1DQy1plJqth5ibknUrHQjhAhEGoN+EakF4oz+ZKcB9lUUrUNX36iycDiU3wRM
92aAfW76T3T+wHKjHT5nbRuIL5Bm/gy2DKa4o6+EagaYbHcUPAOSg862HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN77WPG84I1oK24dFeyty5NfAumMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZof4cQ/
rKoZZ44wVkScLfHK3G6p5xpFW+cjQQ13+RcKyFEixyp43QhyavlrS4c2MFWgNFs+
UkY1coCkOLm9WeVQXQTc35cXr/PiUtCcTt3LxMHcKH7pRFvZT5XN2skqTb5DHJaP
CQST0ohj+TVSPDin4lhvyBeU2C1bA2txPeN0t4MUIqoMvut7CIZTdytc43HcgbYg
4hpMFljGEou1QaUz45qq95mtyDf+/DVcbJ8CX0pmQgk2AbfwqVDZ6Fx4nippIW8V
bVxpR1SycVWSzZFzsn16urZD2Lcdzzj50Xfxr5s5kkd5nK+mA2fUISrn1tse9Tf5
Yg1jeTFCztpw9g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:55:15 2025 by rpki-client