Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: 4ZsAIS5IPBgCJaKzLNsFkTkKsf9XALpuGhQZyAUQj9Y=
Subject key identifier: 9B:46:AA:2B:D3:04:D5:44:34:3E:EA:E5:2F:DD:6D:56:68:F1:E4:0C
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019A4D3CE353D2738EF108734DDE50CBDB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 0ACB
Signing time: Tue 04 Nov 2025 05:00:27 +0000
Manifest this update: Tue 04 Nov 2025 05:00:27 +0000
Manifest next update: Wed 05 Nov 2025 05:00:27 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: ww0q8+XKdkoyH9VI4wfGJ4QguyvZaFYUJWan3DVjW7s=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e3:53:d2:73:8e:f1:08:73:4d:de:50:cb:db:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Nov 4 05:00:27 2025 GMT
Not After : Nov 5 05:00:27 2025 GMT
Subject: CN=9b46aa2bd304d544343eeae52fdd6d5668f1e40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:44:49:75:17:bd:05:db:7a:95:ae:f1:64:
0d:33:84:bc:f8:e6:0e:2c:b4:71:c2:04:52:a9:6f:
18:46:96:4e:ef:a7:ef:88:24:de:92:9f:3d:cc:fe:
f0:4f:cb:39:d0:26:5a:01:68:8e:36:3a:ee:28:dd:
26:80:ef:07:42:19:78:3b:d0:42:23:93:78:fd:a4:
1d:98:ce:dc:d2:25:4a:2e:2c:5e:0b:04:8c:42:0d:
d5:45:33:4f:e0:f2:5a:d0:01:63:97:88:64:94:d8:
b6:cb:b4:8c:e5:a2:5a:1f:69:41:20:d3:4f:bb:a2:
31:b0:8b:4e:ab:36:dd:eb:0b:71:3d:12:26:74:71:
fc:0b:c0:8a:a8:c9:95:87:c8:7a:38:c8:33:b9:52:
2d:30:17:0c:57:3a:c0:ec:55:27:73:72:87:d9:3a:
06:cd:cc:cd:5a:3b:bd:1e:fe:d9:c2:5c:32:4a:64:
c8:d3:0e:a8:ea:75:c1:bd:bf:a4:98:b6:cc:f4:fc:
ab:97:42:c4:c2:d9:da:7d:45:cc:f9:18:b8:dc:1e:
c5:b4:0d:44:71:84:bd:04:f6:ef:b7:c2:07:21:31:
19:2b:cc:f4:a4:1e:4f:30:9a:41:b2:62:a6:e1:04:
d9:aa:19:24:c0:90:e3:35:b1:ea:e1:39:92:31:0a:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:46:AA:2B:D3:04:D5:44:34:3E:EA:E5:2F:DD:6D:56:68:F1:E4:0C
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:70:0b:35:52:1c:21:62:bd:90:e2:39:7a:f4:7c:e7:d2:
ac:30:3a:26:8e:b7:97:02:fe:12:c4:e0:e4:37:5f:1e:1e:cd:
e0:32:5b:2d:5b:6d:40:59:c5:b4:73:07:90:ea:fd:aa:1d:a2:
60:ad:b2:21:5b:60:14:1d:13:c8:54:81:1d:44:cb:05:b4:b3:
46:9e:72:ec:15:c6:03:4d:7f:8e:cd:cc:03:4b:15:cb:85:56:
a1:d8:be:8e:58:60:f6:59:b7:14:a8:e7:8a:cd:8a:d4:d2:ac:
5c:a4:cc:bd:43:77:92:15:8f:a1:53:d3:f1:1f:89:48:3f:48:
1f:cc:59:9d:00:78:36:83:7e:1c:90:d9:d0:c2:b3:2b:72:18:
dd:cf:94:76:32:ed:bb:e4:e8:dc:c0:50:d5:1e:d4:eb:4f:2d:
91:a0:58:49:db:07:5f:39:0b:86:83:59:a0:52:36:6c:85:73:
fc:8a:c1:97:ca:91:80:73:88:11:e9:1f:81:b3:ff:22:9d:b0:
71:59:80:45:50:3e:b7:1a:9b:e5:1f:38:77:4f:f3:19:d6:7c:
a7:c5:f6:fc:ec:ef:76:e0:96:93:47:d7:65:cb:a9:90:13:22:
d4:0d:db:be:17:9f:75:62:31:fb:52:d5:ca:d3:bb:34:81:56:
0a:c2:9e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPONT0nOO8QhzTd5Qy9uaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWZhY2IzNzQ0MWRkMTkxODNiZDFjYjU3ZGI1ZWU1NTQ3
N2E3YTcwHhcNMjUxMTA0MDUwMDI3WhcNMjUxMTA1MDUwMDI3WjAzMTEwLwYDVQQD
Eyg5YjQ2YWEyYmQzMDRkNTQ0MzQzZWVhZTUyZmRkNmQ1NjY4ZjFlNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKtESXUXvQXbepWu8WQNM4S8+OYO
LLRxwgRSqW8YRpZO76fviCTekp89zP7wT8s50CZaAWiONjruKN0mgO8HQhl4O9BC
I5N4/aQdmM7c0iVKLixeCwSMQg3VRTNP4PJa0AFjl4hklNi2y7SM5aJaH2lBINNP
u6IxsItOqzbd6wtxPRImdHH8C8CKqMmVh8h6OMgzuVItMBcMVzrA7FUnc3KH2ToG
zczNWju9Hv7ZwlwySmTI0w6o6nXBvb+kmLbM9Pyrl0LEwtnafUXM+Ri43B7FtA1E
cYS9BPbvt8IHITEZK8z0pB5PMJpBsmKm4QTZqhkkwJDjNbHq4TmSMQqFTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtGqivTBNVEND7q5S/dbVZo8eQMMB8GA1UdIwQY
MBaAFAzvrLN0Qd0ZGDvRy1fbXuVUd6enMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQt
ZTNkZDUyNzk5YmRhLzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQtZTNkZDUyNzk5YmRh
LzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNlwCzVS
HCFivZDiOXr0fOfSrDA6Jo63lwL+EsTg5DdfHh7N4DJbLVttQFnFtHMHkOr9qh2i
YK2yIVtgFB0TyFSBHUTLBbSzRp5y7BXGA01/js3MA0sVy4VWodi+jlhg9lm3FKjn
is2K1NKsXKTMvUN3khWPoVPT8R+JSD9IH8xZnQB4NoN+HJDZ0MKzK3IY3c+UdjLt
u+To3MBQ1R7U608tkaBYSdsHXzkLhoNZoFI2bIVz/IrBl8qRgHOIEekfgbP/Ip2w
cVmARVA+txqb5R84d0/zGdZ8p8X2/OzvduCWk0fXZcupkBMi1A3bvhefdWIx+1LV
ytO7NIFWCsKeng==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:42 2025 by rpki-client