Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: I/4PjHyAQhXjp2FZvgh0FpvVPSHC9DBUjiexgInAbkY=
Subject key identifier: D9:1A:F8:70:FA:81:A6:40:E4:8E:89:BB:87:06:D8:85:7F:87:F1:BC
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019A51F5A01BF21EBD53177DDDF523504420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:42 +0000
Manifest this update: Wed 05 Nov 2025 03:00:42 +0000
Manifest next update: Thu 06 Nov 2025 03:00:42 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: MP94K+Q3bPV2qJI5wFoG5BbJO3fMn0BRs8GW77AKAeI=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a0:1b:f2:1e:bd:53:17:7d:dd:f5:23:50:44:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Nov 5 03:00:42 2025 GMT
Not After : Nov 6 03:00:42 2025 GMT
Subject: CN=d91af870fa81a640e48e89bb8706d8857f87f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:b9:75:17:e8:ff:47:9c:cf:52:28:54:17:
9f:0e:bd:c3:86:00:50:24:58:52:a4:d7:6d:28:42:
12:87:19:07:6d:e0:7b:81:35:01:36:f3:0c:cf:28:
84:a1:af:f1:53:61:34:66:2c:6e:f5:0d:e1:c1:95:
af:a0:04:d2:a1:63:10:e6:5d:03:e5:09:94:35:16:
0a:a6:41:a1:5e:e6:54:d7:cf:31:54:a6:9d:eb:ca:
96:4d:bd:fb:af:27:05:92:9f:81:22:a3:3d:d7:aa:
be:58:0a:ee:dd:71:3c:6e:1a:a6:53:9e:b8:ea:c7:
8b:90:c3:45:63:c7:ef:a7:c2:c8:6c:bb:04:d9:5e:
0c:42:d4:3d:e9:bd:4f:c8:8b:4e:fc:d1:63:2f:4f:
fb:e5:69:b0:c8:79:f0:bf:39:f5:1a:77:62:48:b5:
68:94:00:2a:13:c7:3f:41:fc:be:94:31:49:08:f9:
3e:ad:57:68:64:44:05:08:5d:f3:40:74:ca:43:6e:
50:18:07:bb:35:15:5c:dc:fc:3a:03:dd:b9:b9:18:
f9:d3:3d:93:00:31:de:e3:7e:ae:d2:a8:79:f2:27:
9a:69:d4:53:99:fb:d7:eb:7f:2c:28:67:89:eb:b2:
0b:86:d3:3e:b8:12:9e:fc:78:33:90:ad:43:e9:52:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1A:F8:70:FA:81:A6:40:E4:8E:89:BB:87:06:D8:85:7F:87:F1:BC
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:a9:eb:d3:cc:eb:4d:ee:b3:95:ac:7d:de:65:fa:98:c1:
37:29:53:7f:a4:53:b6:ef:53:46:ea:9e:ce:b5:0f:59:ab:59:
c4:0e:5d:42:29:08:17:c4:e4:f9:eb:34:d9:5c:07:e2:e6:c3:
ce:d2:10:d5:10:fc:ba:7d:16:6d:80:fa:e5:d6:d5:f3:e6:c3:
a4:45:8f:b2:fa:98:79:d0:68:14:b9:3b:eb:32:93:19:80:3d:
c7:76:e4:d2:ce:d2:0b:e7:e1:68:f4:a3:fa:df:f7:6f:ed:4c:
24:e1:61:62:e7:85:b2:e1:d9:70:7b:f9:4b:e9:2e:20:ab:21:
80:d4:55:fc:dd:1e:77:0b:a8:b4:81:fc:91:e6:61:9f:ba:9e:
eb:e2:fa:bf:21:5d:2a:f7:55:64:08:f9:25:da:79:e3:5a:ee:
aa:f9:e7:c2:e1:4f:8e:c6:4d:f5:85:c3:77:94:fb:c6:2b:a4:
ea:6e:37:c2:21:48:e5:2e:4c:00:be:b8:51:7f:2f:52:8e:70:
33:be:4f:74:68:cc:cc:4d:f9:64:06:3d:24:59:44:6a:c6:fe:
c4:2e:bb:38:16:e4:7b:f6:39:af:9b:10:6b:e7:98:4b:bc:93:
59:e4:87:ba:e1:80:63:2c:df:d6:01:6b:4c:00:9a:71:da:ab:
77:80:b9:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9aAb8h69Uxd93fUjUEQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWU4NzBkMzFjYTcwMTk5NTEzNzBjYjIyMWYxOGYxZjA5
ZmE1OGEwHhcNMjUxMTA1MDMwMDQyWhcNMjUxMTA2MDMwMDQyWjAzMTEwLwYDVQQD
EyhkOTFhZjg3MGZhODFhNjQwZTQ4ZTg5YmI4NzA2ZDg4NTdmODdmMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQS5dRfo/0ecz1IoVBefDr3DhgBQ
JFhSpNdtKEIShxkHbeB7gTUBNvMMzyiEoa/xU2E0Zixu9Q3hwZWvoATSoWMQ5l0D
5QmUNRYKpkGhXuZU188xVKad68qWTb37rycFkp+BIqM916q+WAru3XE8bhqmU564
6seLkMNFY8fvp8LIbLsE2V4MQtQ96b1PyItO/NFjL0/75WmwyHnwvzn1GndiSLVo
lAAqE8c/Qfy+lDFJCPk+rVdoZEQFCF3zQHTKQ25QGAe7NRVc3Pw6A925uRj50z2T
ADHe436u0qh58ieaadRTmfvX638sKGeJ67ILhtM+uBKe/HgzkK1D6VJ2KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNka+HD6gaZA5I6Ju4cG2IV/h/G8MB8GA1UdIwQY
MBaAFAxehw0xynAZlRNwyyIfGPHwn6WKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQt
MzVjZjc3MGRjOGI5LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQtMzVjZjc3MGRjOGI5
LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlep69PM
603us5Wsfd5l+pjBNylTf6RTtu9TRuqezrUPWatZxA5dQikIF8Tk+es02VwH4ubD
ztIQ1RD8un0WbYD65dbV8+bDpEWPsvqYedBoFLk76zKTGYA9x3bk0s7SC+fhaPSj
+t/3b+1MJOFhYueFsuHZcHv5S+kuIKshgNRV/N0edwuotIH8keZhn7qe6+L6vyFd
KvdVZAj5Jdp541ruqvnnwuFPjsZN9YXDd5T7xiuk6m43wiFI5S5MAL64UX8vUo5w
M75PdGjMzE35ZAY9JFlEasb+xC67OBbke/Y5r5sQa+eYS7yTWeSHuuGAYyzf1gFr
TACacdqrd4C5Zw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:32 2025 by rpki-client