Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: xu/U1v28HpsRvIQG3UnmvCH41AfodF9eVsanvtFAxuU=
Subject key identifier: 01:4B:36:1D:2F:61:21:1B:A4:D0:95:5A:3B:87:C9:E4:49:E8:21:97
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 019A5119B177DEED3BC11C90EC346C285050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 111D
Signing time: Tue 04 Nov 2025 23:00:29 +0000
Manifest this update: Tue 04 Nov 2025 23:00:29 +0000
Manifest next update: Wed 05 Nov 2025 23:00:29 +0000
Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: OfOS9wBR7pbNoVSUOdK7ziEHhBnVOnhI726aQMmkw18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:b1:77:de:ed:3b:c1:1c:90:ec:34:6c:28:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Nov 4 23:00:29 2025 GMT
Not After : Nov 5 23:00:29 2025 GMT
Subject: CN=014b361d2f61211ba4d0955a3b87c9e449e82197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:79:91:78:60:56:e3:bb:73:5f:82:03:47:
62:bd:60:e0:f2:64:0e:ab:30:1b:cd:93:ff:8a:44:
b3:a4:0f:99:10:a3:a2:f5:33:03:9e:8c:f0:ea:71:
8c:88:80:3e:ef:5d:0b:9d:ff:16:de:5e:bb:62:2d:
b8:b5:b0:5b:3d:ce:83:bf:12:ee:03:cc:a8:2c:01:
54:13:f4:96:20:7e:43:52:6c:f4:d9:45:30:99:ac:
5e:b5:75:4d:f3:4c:b9:12:a4:a7:7d:aa:64:51:34:
a7:2e:8c:e6:f6:8c:bd:26:bb:5c:6c:fc:0e:40:d6:
2f:fc:aa:e0:56:10:da:fe:86:b0:c5:5a:4c:c3:71:
e0:36:df:31:f4:21:87:10:e1:c3:3b:78:2b:8c:f2:
e8:8c:33:67:11:88:c2:70:26:45:17:16:d4:85:5c:
d6:07:42:70:bc:2c:02:75:cb:bc:c4:50:08:a4:bd:
e9:58:b1:e0:2c:23:9f:10:1e:44:1e:9b:0c:f6:f2:
82:71:02:79:50:02:6d:34:88:5d:db:d2:80:ba:e4:
04:f9:8f:8a:c6:de:ec:a5:78:4c:f6:06:b0:df:77:
94:ee:ca:b1:f5:0b:ec:30:2d:c0:36:88:28:12:17:
3c:ce:f7:ea:99:55:ee:16:43:3c:2d:09:25:f1:d4:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4B:36:1D:2F:61:21:1B:A4:D0:95:5A:3B:87:C9:E4:49:E8:21:97
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:48:4e:02:50:ec:11:7d:e3:c9:2e:d4:81:30:53:db:79:fd:
29:74:e7:8d:84:9a:4e:9d:6b:f9:b2:00:66:5e:41:d3:e7:de:
5a:45:87:57:03:67:9c:d4:02:fb:1a:f0:7b:b1:92:3d:ad:eb:
a9:48:e8:3a:51:da:72:e6:35:f5:f7:ff:0a:61:53:0d:59:44:
e7:00:68:12:98:cb:85:95:da:0c:f9:18:10:47:57:0b:4f:97:
c3:e2:b9:75:15:04:59:f2:67:97:c8:88:0d:ef:2e:fe:23:8e:
05:f5:3f:d7:75:e8:cb:bb:7b:c0:4b:8a:bc:c5:e4:5a:9c:20:
2b:8b:43:24:57:39:fc:13:c6:e0:82:50:a9:49:e0:e2:ff:c2:
7e:44:69:52:e6:f8:90:dd:46:27:68:a6:27:56:89:3e:64:90:
88:cc:45:89:8a:b3:40:cf:8a:cc:ff:8d:1d:e3:f0:41:9a:7a:
a1:1f:e6:67:f2:66:88:40:31:92:57:44:d2:30:fb:d2:5d:48:
7b:23:65:af:9c:1f:06:97:1c:6a:7f:b5:b5:9f:c2:04:a4:cc:
ab:38:93:cc:20:b5:80:1b:3f:3f:17:d2:fe:eb:99:ea:66:ac:
43:a1:9a:0d:4e:fd:72:3f:31:69:46:03:e7:6d:b1:1b:d4:18:
49:1f:8c:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGbF33u07wRyQ7DRsKFBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5
YTUyNzcwHhcNMjUxMTA0MjMwMDI5WhcNMjUxMTA1MjMwMDI5WjAzMTEwLwYDVQQD
EygwMTRiMzYxZDJmNjEyMTFiYTRkMDk1NWEzYjg3YzllNDQ5ZTgyMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHB5kXhgVuO7c1+CA0divWDg8mQO
qzAbzZP/ikSzpA+ZEKOi9TMDnozw6nGMiIA+710Lnf8W3l67Yi24tbBbPc6DvxLu
A8yoLAFUE/SWIH5DUmz02UUwmaxetXVN80y5EqSnfapkUTSnLozm9oy9JrtcbPwO
QNYv/KrgVhDa/oawxVpMw3HgNt8x9CGHEOHDO3grjPLojDNnEYjCcCZFFxbUhVzW
B0JwvCwCdcu8xFAIpL3pWLHgLCOfEB5EHpsM9vKCcQJ5UAJtNIhd29KAuuQE+Y+K
xt7spXhM9gaw33eU7sqx9QvsMC3ANogoEhc8zvfqmVXuFkM8LQkl8dS81wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFLNh0vYSEbpNCVWjuHyeRJ6CGXMB8GA1UdIwQY
MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et
MThlOGI5ODE0Njk1LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1
LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUhOAlDs
EX3jyS7UgTBT23n9KXTnjYSaTp1r+bIAZl5B0+feWkWHVwNnnNQC+xrwe7GSPa3r
qUjoOlHacuY19ff/CmFTDVlE5wBoEpjLhZXaDPkYEEdXC0+Xw+K5dRUEWfJnl8iI
De8u/iOOBfU/13Xoy7t7wEuKvMXkWpwgK4tDJFc5/BPG4IJQqUng4v/CfkRpUub4
kN1GJ2imJ1aJPmSQiMxFiYqzQM+KzP+NHePwQZp6oR/mZ/JmiEAxkldE0jD70l1I
eyNlr5wfBpccan+1tZ/CBKTMqziTzCC1gBs/PxfS/uuZ6masQ6GaDU79cj8xaUYD
522xG9QYSR+MCQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:27 2025 by rpki-client