Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: k0XlZ+jcF/spO9TIkFmW1cQPh+3Pcz/YZHfT+rlkhBs=
Subject key identifier: 16:9A:45:AE:CE:24:64:B3:BB:67:CD:1F:B6:4C:3D:A0:D1:13:D2:53
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019A4F6239D3675740F7DAEB681677083891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0F07
Signing time: Tue 04 Nov 2025 15:00:28 +0000
Manifest this update: Tue 04 Nov 2025 15:00:28 +0000
Manifest next update: Wed 05 Nov 2025 15:00:28 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: 4qY/4I7zVUWhJij29HJosW0HvrsA7pLSNfTiZcHXft0=)
2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=)
3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:39:d3:67:57:40:f7:da:eb:68:16:77:08:38:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Nov 4 15:00:28 2025 GMT
Not After : Nov 5 15:00:28 2025 GMT
Subject: CN=169a45aece2464b3bb67cd1fb64c3da0d113d253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:36:07:2b:dc:52:f6:5e:eb:df:4c:36:3c:
25:ab:2c:4b:82:bb:07:5e:60:46:d2:e2:d3:8a:b2:
86:9e:e8:9a:ac:f9:3b:b2:d8:93:2e:34:68:25:2c:
87:20:8d:6b:a4:64:cf:f3:68:04:3a:c9:04:2d:b7:
b0:05:66:56:5c:14:68:3f:ab:a2:ff:e2:c1:4f:54:
1a:74:83:a6:72:6e:75:29:61:c1:a0:dc:e6:aa:ee:
43:9e:2c:ec:79:19:45:9c:fb:b4:22:64:25:cc:2d:
03:2e:56:2f:70:1d:64:1b:be:a5:69:01:7a:05:98:
9f:9e:45:e1:ad:44:6a:96:73:41:2c:e6:ac:40:ca:
9b:6a:c8:76:c6:d3:46:c2:b0:4f:f6:e2:cc:2f:9e:
44:b9:fa:a7:bb:b1:e8:6c:ab:a6:7a:57:3a:0f:8d:
d6:1b:ba:fe:bb:15:4b:b2:ce:a8:e1:25:37:77:98:
57:d7:d4:36:9b:ef:9c:92:d0:14:02:da:d7:4c:e5:
0b:97:9d:3c:20:a0:2d:f9:ca:b6:fe:37:be:3c:eb:
ab:64:3f:c9:04:3a:cc:72:2e:35:17:97:d1:75:99:
2f:d8:57:04:33:83:f0:b0:df:b3:e8:5f:d6:28:f2:
3b:68:b0:14:b9:b7:75:e7:b8:43:a2:82:7b:fe:4b:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9A:45:AE:CE:24:64:B3:BB:67:CD:1F:B6:4C:3D:A0:D1:13:D2:53
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fd:cd:94:99:f7:77:97:a9:fe:d6:94:aa:ba:64:64:c9:d8:
f6:96:60:24:f2:43:83:40:e7:91:46:9a:9a:de:ba:0c:97:b5:
fb:94:a0:17:e2:6a:98:72:91:4f:1f:72:76:5a:74:94:57:b6:
d6:94:54:58:cb:61:7f:02:c2:3b:d3:06:ef:0f:55:17:01:27:
6a:04:4e:86:4a:92:ee:7e:85:96:54:f8:87:ae:ac:af:39:38:
a8:b5:7f:4e:5f:be:9a:29:24:af:b5:88:16:36:40:7f:7a:38:
03:49:b3:92:55:84:d7:b6:1a:91:90:ca:aa:9e:4c:f0:27:d5:
84:c7:4b:18:a8:0b:10:4c:29:aa:99:18:0e:c3:0c:be:a9:06:
a4:45:bd:73:30:1b:0c:41:74:ef:33:60:13:09:71:09:12:81:
0f:ac:02:5b:58:b1:da:0f:4c:bd:eb:1d:fe:d3:e4:4d:db:3a:
cc:26:bd:83:8d:15:3b:67:3a:bc:09:95:b5:21:2d:82:e1:0b:
ad:47:31:f1:33:16:8a:4f:e7:a8:06:e4:8b:0e:31:f5:74:36:
12:49:a9:66:f7:cb:48:44:ca:fc:38:7c:eb:cd:e3:0e:b6:72:
26:0c:b4:71:f7:93:ed:41:02:a6:14:13:38:37:fd:cb:fc:41:
7d:92:e7:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYjnTZ1dA99rraBZ3CDiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh
MDNhYjkwHhcNMjUxMTA0MTUwMDI4WhcNMjUxMTA1MTUwMDI4WjAzMTEwLwYDVQQD
EygxNjlhNDVhZWNlMjQ2NGIzYmI2N2NkMWZiNjRjM2RhMGQxMTNkMjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt42ByvcUvZe699MNjwlqyxLgrsH
XmBG0uLTirKGnuiarPk7stiTLjRoJSyHII1rpGTP82gEOskELbewBWZWXBRoP6ui
/+LBT1QadIOmcm51KWHBoNzmqu5DnizseRlFnPu0ImQlzC0DLlYvcB1kG76laQF6
BZifnkXhrURqlnNBLOasQMqbash2xtNGwrBP9uLML55Eufqnu7HobKumelc6D43W
G7r+uxVLss6o4SU3d5hX19Q2m++cktAUAtrXTOULl508IKAt+cq2/je+POurZD/J
BDrMci41F5fRdZkv2FcEM4PwsN+z6F/WKPI7aLAUubd157hDooJ7/ks4TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaaRa7OJGSzu2fNH7ZMPaDRE9JTMB8GA1UdIwQY
MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt
MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh
LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQP3NlJn3
d5ep/taUqrpkZMnY9pZgJPJDg0DnkUaamt66DJe1+5SgF+JqmHKRTx9ydlp0lFe2
1pRUWMthfwLCO9MG7w9VFwEnagROhkqS7n6FllT4h66srzk4qLV/Tl++mikkr7WI
FjZAf3o4A0mzklWE17YakZDKqp5M8CfVhMdLGKgLEEwpqpkYDsMMvqkGpEW9czAb
DEF07zNgEwlxCRKBD6wCW1ix2g9Mvesd/tPkTds6zCa9g40VO2c6vAmVtSEtguEL
rUcx8TMWik/nqAbkiw4x9XQ2EkmpZvfLSETK/Dh8683jDrZyJgy0cfeT7UECphQT
ODf9y/xBfZLnrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:57:44 2025 by rpki-client