Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier: hMsuVuvVpZ8FYuIi8mHJyDrd5CSF9TPTWuYauEzumj4=
Subject key identifier: 16:A0:5F:19:3E:D8:9C:3E:1B:4C:F0:99:BE:75:24:FC:EA:29:CD:EF
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 019A4E4FCDE3E04BE09FA1379D43D0D10175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:44 +0000
Manifest this update: Tue 04 Nov 2025 10:00:44 +0000
Manifest next update: Wed 05 Nov 2025 10:00:44 +0000
Files and hashes: 1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=)
2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=)
3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: 04HZ3tv9CLRLIBmk+4bjSCkL6snCjD+640h+vynvOFY=)
4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=)
5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cd:e3:e0:4b:e0:9f:a1:37:9d:43:d0:d1:01:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Nov 4 10:00:44 2025 GMT
Not After : Nov 5 10:00:44 2025 GMT
Subject: CN=16a05f193ed89c3e1b4cf099be7524fcea29cdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:98:5e:9d:74:32:2e:65:ed:19:d1:59:82:
b2:fe:87:56:79:7e:96:dc:a0:87:dc:15:bc:f9:77:
a0:83:2e:27:5d:fd:1f:3f:5a:50:67:a1:7c:da:e8:
eb:f6:41:8d:22:37:27:06:f4:07:a7:5c:98:f0:52:
77:6f:a7:1c:21:9e:fe:e7:07:3d:a5:76:1a:a4:f4:
bc:fb:ee:af:40:3d:15:6a:10:af:69:06:70:ad:bc:
eb:11:87:16:0d:e8:5e:45:46:cb:34:6b:bd:b9:d7:
20:e5:04:01:eb:af:68:51:52:b4:8e:ac:42:c4:32:
3f:f5:3e:ea:ad:88:09:d7:cc:03:59:d4:e7:c6:ae:
fa:78:ab:e6:b4:8c:8b:91:fe:0d:c2:93:ec:12:15:
8d:19:cc:ec:90:43:99:09:e6:46:b8:02:cf:07:be:
ad:1a:a3:ef:a3:79:93:00:da:80:45:da:dd:da:fb:
04:52:7b:05:fd:c1:12:7c:83:95:43:b0:06:ad:5f:
cc:66:fd:ea:16:ad:88:e7:91:5c:df:27:f0:bd:cf:
b4:6f:07:47:4d:c8:3b:54:86:24:1f:30:ee:0d:a7:
47:69:de:35:56:8c:1d:ee:b5:e2:98:13:e0:39:52:
ff:fa:55:49:63:7f:c7:3c:0f:6a:3f:38:1c:b7:58:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:5F:19:3E:D8:9C:3E:1B:4C:F0:99:BE:75:24:FC:EA:29:CD:EF
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f0:43:e5:43:a4:36:7c:4e:51:6b:d2:67:bb:4a:1b:3f:ce:
2c:e1:06:4e:4f:b3:48:df:c8:47:d0:ee:d1:61:68:d5:2a:0a:
03:67:a1:27:1a:df:58:43:7a:21:4c:8f:5e:2b:a5:d4:27:50:
75:88:78:68:42:07:31:15:8a:34:f4:75:9b:6f:1b:72:2a:44:
67:09:06:4a:ae:aa:92:ff:9b:64:d4:ea:20:06:b7:e2:34:d8:
b0:54:bd:f4:c3:a3:56:70:0a:90:59:32:72:08:d3:a3:f5:f6:
9f:db:cb:f3:98:22:ff:92:a8:f7:87:40:a5:cd:53:28:90:84:
34:df:07:f3:a3:c6:71:22:89:6e:4c:ec:90:8e:f8:35:19:bc:
af:60:b8:ee:12:89:02:59:e5:69:33:17:f8:88:55:86:0d:4b:
5b:08:d5:65:b8:d4:98:dd:68:f5:99:d1:c7:61:fe:f1:f5:3d:
45:71:d2:14:0f:c5:39:fb:e0:ce:e5:77:47:b6:cb:48:49:79:
c3:44:a2:9b:2d:aa:51:26:bf:22:b2:03:9c:d6:1d:06:55:86:
d8:c8:4b:d6:3b:f4:1c:48:8a:b1:55:8a:86:9b:36:9f:a7:19:
e0:e0:96:01:be:81:b7:cf:e5:51:e2:bd:8d:8c:14:cb:b4:85:
0b:db:4b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT83j4Evgn6E3nUPQ0QF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj
OGJjZDUwHhcNMjUxMTA0MTAwMDQ0WhcNMjUxMTA1MTAwMDQ0WjAzMTEwLwYDVQQD
EygxNmEwNWYxOTNlZDg5YzNlMWI0Y2YwOTliZTc1MjRmY2VhMjljZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEaYXp10Mi5l7RnRWYKy/odWeX6W
3KCH3BW8+Xeggy4nXf0fP1pQZ6F82ujr9kGNIjcnBvQHp1yY8FJ3b6ccIZ7+5wc9
pXYapPS8++6vQD0VahCvaQZwrbzrEYcWDeheRUbLNGu9udcg5QQB669oUVK0jqxC
xDI/9T7qrYgJ18wDWdTnxq76eKvmtIyLkf4NwpPsEhWNGczskEOZCeZGuALPB76t
GqPvo3mTANqARdrd2vsEUnsF/cESfIOVQ7AGrV/MZv3qFq2I55Fc3yfwvc+0bwdH
Tcg7VIYkHzDuDadHad41Vowd7rXimBPgOVL/+lVJY3/HPA9qPzgct1hw6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBagXxk+2Jw+G0zwmb51JPzqKc3vMB8GA1UdIwQY
MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt
NGJlZjQzZDNmYjE3LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUtNGJlZjQzZDNmYjE3
LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPBD5UOk
NnxOUWvSZ7tKGz/OLOEGTk+zSN/IR9Du0WFo1SoKA2ehJxrfWEN6IUyPXiul1CdQ
dYh4aEIHMRWKNPR1m28bcipEZwkGSq6qkv+bZNTqIAa34jTYsFS99MOjVnAKkFky
cgjTo/X2n9vL85gi/5Ko94dApc1TKJCENN8H86PGcSKJbkzskI74NRm8r2C47hKJ
AlnlaTMX+IhVhg1LWwjVZbjUmN1o9ZnRx2H+8fU9RXHSFA/FOfvgzuV3R7bLSEl5
w0Simy2qUSa/IrIDnNYdBlWG2MhL1jv0HEiKsVWKhps2n6cZ4OCWAb6Bt8/lUeK9
jYwUy7SFC9tL5w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:59 2025 by rpki-client