Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: iHWuAh32DWhhTwmmbt+8q03LxeiQ9gOReidXemdS+5U=
Subject key identifier: 14:47:77:8C:7A:4A:0E:1C:27:53:C0:36:F5:B7:CD:49:45:7B:56:9F
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 019A4D3D3A7FC3133A3FDCCBA87BB273538C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:49 +0000
Manifest this update: Tue 04 Nov 2025 05:00:49 +0000
Manifest next update: Wed 05 Nov 2025 05:00:49 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: OTrC5N3RMJTlaT0UO3VuMzCd1MBRqngqBjEceA5PYvs=)
2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3a:7f:c3:13:3a:3f:dc:cb:a8:7b:b2:73:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Nov 4 05:00:49 2025 GMT
Not After : Nov 5 05:00:49 2025 GMT
Subject: CN=1447778c7a4a0e1c2753c036f5b7cd49457b569f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:7f:8b:f5:f7:20:33:51:8b:7f:de:02:9d:
19:31:e6:95:9f:73:42:57:4e:c7:1c:c2:10:30:e3:
81:f5:0a:8b:ce:4a:69:d7:54:b6:38:aa:81:0f:e4:
be:6e:52:2e:8a:f8:43:ac:5e:17:46:7b:10:5e:86:
b4:4e:e8:18:33:54:5b:d5:07:81:42:a0:f4:f1:d2:
25:05:0f:b2:6e:29:cc:7f:02:41:a9:92:83:ac:d3:
e8:7b:15:46:4b:8d:b8:2f:44:61:d7:c8:10:19:6a:
34:19:37:3d:a9:92:f8:94:d3:af:bd:8f:f7:3b:93:
c7:c5:40:a8:73:70:fd:ed:cb:34:86:ca:35:d3:37:
f3:74:2f:16:7d:ce:7d:d2:98:28:04:03:df:94:b3:
42:07:5a:60:a6:7f:2f:f2:58:76:a3:cb:d4:21:cb:
6a:91:be:3f:eb:69:66:e2:86:bc:4c:8e:31:e8:cc:
43:ef:70:44:a8:43:4f:dc:c8:0f:96:86:b6:29:41:
de:6c:90:40:62:87:4b:ce:27:4d:c7:e6:51:e0:f6:
14:ba:cb:54:10:9c:b0:01:53:d4:c6:d8:0f:f1:8f:
94:f4:9a:21:21:ee:4a:f3:59:f7:dd:2f:80:5e:84:
f2:7e:f0:de:db:3e:5d:13:bd:c8:3f:0f:28:cc:fc:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:47:77:8C:7A:4A:0E:1C:27:53:C0:36:F5:B7:CD:49:45:7B:56:9F
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:65:d3:98:65:bb:b9:36:b0:2b:fe:93:3d:46:56:c9:94:b5:
eb:b9:fd:82:18:9f:4a:ba:24:f8:fb:92:14:58:03:eb:8f:9c:
51:4d:6e:91:41:87:c1:d6:dc:b7:40:60:d3:1c:27:7c:21:a7:
0d:01:fe:15:c2:9a:b4:66:53:a9:ed:d5:f5:8d:e5:e2:e3:6f:
33:20:5d:b9:7d:dc:f1:4c:14:36:f1:62:a5:e0:4f:15:a1:18:
10:c3:ac:7b:7d:a0:c9:30:6a:df:f1:e8:73:8d:42:ec:7a:61:
28:b5:28:15:60:26:2d:5e:ef:9c:82:cb:d0:2f:b6:25:87:d1:
30:e8:63:71:80:42:5e:91:fb:0a:61:0e:54:61:a0:40:2c:ac:
83:df:ef:d5:22:52:db:eb:f0:a7:d1:96:45:29:4a:f0:ed:51:
57:f5:fe:35:07:49:56:45:07:00:b8:f7:fd:9f:d2:f6:68:be:
52:ce:a2:e1:e7:a6:df:a9:1b:f6:68:9a:cc:f6:c6:79:8c:16:
11:da:d6:72:1e:b7:ed:2e:cd:69:11:ee:c0:c0:da:9b:65:f9:
34:7c:6a:1f:dc:84:49:16:f6:49:e9:dd:6a:51:18:65:78:c1:
94:89:fb:db:94:0c:b4:ce:8d:dd:3e:0a:de:01:02:98:f7:80:
b9:d1:90:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPTp/wxM6P9zLqHuyc1OMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx
MzIxNGUwHhcNMjUxMTA0MDUwMDQ5WhcNMjUxMTA1MDUwMDQ5WjAzMTEwLwYDVQQD
EygxNDQ3Nzc4YzdhNGEwZTFjMjc1M2MwMzZmNWI3Y2Q0OTQ1N2I1NjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yl/i/X3IDNRi3/eAp0ZMeaVn3NC
V07HHMIQMOOB9QqLzkpp11S2OKqBD+S+blIuivhDrF4XRnsQXoa0TugYM1Rb1QeB
QqD08dIlBQ+ybinMfwJBqZKDrNPoexVGS424L0Rh18gQGWo0GTc9qZL4lNOvvY/3
O5PHxUCoc3D97cs0hso10zfzdC8Wfc590pgoBAPflLNCB1pgpn8v8lh2o8vUIctq
kb4/62lm4oa8TI4x6MxD73BEqENP3MgPloa2KUHebJBAYodLzidNx+ZR4PYUustU
EJywAVPUxtgP8Y+U9JohIe5K81n33S+AXoTyfvDe2z5dE73IPw8ozPwmPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRHd4x6Sg4cJ1PANvW3zUlFe1afMB8GA1UdIwQY
MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt
Nzc4NjlhNmJmZTU0LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0
LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWXTmGW7
uTawK/6TPUZWyZS167n9ghifSrok+PuSFFgD64+cUU1ukUGHwdbct0Bg0xwnfCGn
DQH+FcKatGZTqe3V9Y3l4uNvMyBduX3c8UwUNvFipeBPFaEYEMOse32gyTBq3/Ho
c41C7HphKLUoFWAmLV7vnILL0C+2JYfRMOhjcYBCXpH7CmEOVGGgQCysg9/v1SJS
2+vwp9GWRSlK8O1RV/X+NQdJVkUHALj3/Z/S9mi+Us6i4eem36kb9miazPbGeYwW
EdrWch637S7NaRHuwMDam2X5NHxqH9yESRb2SendalEYZXjBlIn725QMtM6N3T4K
3gECmPeAudGQZA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:54 2025 by rpki-client