Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier: 3WcJoIThgHElrnww6cOkMWgqvjxJMDGQQ3KbPcII14I=
Subject key identifier: 82:7E:A5:D7:12:EE:4C:30:76:92:08:BD:AF:2F:95:F6:F7:41:6D:50
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 019A4EF59C2F9F0E76756F4A3A3B1B584FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number: 09D4
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: inNdBRnMlmVUJEmM1LAwj6c7M4ZaTM8WBG++9z9LCRw=)
2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9c:2f:9f:0e:76:75:6f:4a:3a:3b:1b:58:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=827ea5d712ee4c30769208bdaf2f95f6f7416d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:6f:6d:37:0d:e0:88:13:5a:d1:59:f2:6d:
6f:40:92:5b:e5:09:e6:a1:df:e5:40:62:71:2e:3b:
72:77:a5:c1:ec:63:cb:a5:94:4f:cf:7b:e9:96:cf:
cf:d7:54:4d:bd:cb:ed:71:b7:9f:2c:34:c7:52:a4:
25:82:74:fe:0f:f2:4e:17:2d:c4:aa:6b:7f:3d:95:
d9:45:94:af:c6:53:32:be:f0:65:b6:e6:17:d2:17:
60:be:3f:0e:87:58:07:46:41:6c:79:b0:3f:75:2f:
42:56:a5:8b:3f:dd:5f:66:5c:38:65:ce:14:17:7f:
d0:28:44:cd:1e:35:26:01:cb:e7:5b:58:69:8c:37:
e6:a6:a2:22:e2:94:70:a4:09:f3:0b:f4:da:b0:18:
75:76:91:c1:5a:e5:94:21:9e:96:73:cb:c8:6f:b2:
c7:09:43:d5:3b:61:53:b6:f6:4d:32:2b:4c:4d:67:
f8:77:31:b3:d1:ef:3f:2b:65:38:27:45:4b:34:76:
e9:2f:53:92:bb:cd:7d:30:d2:b7:09:38:23:25:15:
16:4a:90:b1:a4:2b:72:a8:42:52:c1:0b:4e:60:d7:
1f:fe:05:4d:2d:46:ce:c8:ac:72:cb:e7:56:45:c7:
d0:e0:f5:c7:d2:a4:9e:e3:22:cb:89:b3:a6:24:bf:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7E:A5:D7:12:EE:4C:30:76:92:08:BD:AF:2F:95:F6:F7:41:6D:50
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cd:7a:41:bb:37:6c:2c:62:9f:c0:53:ee:5f:63:1d:20:ae:
08:d6:b8:08:86:c8:60:d0:a0:6e:6e:67:9d:a8:81:f4:c6:a8:
71:d5:51:77:d8:c5:9e:e2:17:a2:a7:17:ba:aa:db:89:67:c6:
d7:c9:0d:84:cc:c0:77:a4:3e:71:b0:9c:8d:68:a7:55:6c:eb:
38:ec:b8:2d:02:87:ca:f0:d8:6b:30:13:0d:6f:67:8b:00:d0:
2b:1f:0d:17:0e:3c:09:55:92:43:58:86:5c:12:8b:dd:ef:fc:
a9:93:72:23:cc:e5:7d:6b:dd:dc:6f:81:9a:44:eb:1e:5b:7d:
30:81:2b:bf:12:fa:98:5c:07:be:87:fc:cf:4f:d5:ac:22:9c:
e8:97:f6:c8:38:19:13:c2:6a:e1:7d:d6:52:4e:ae:9b:6e:c8:
9d:37:90:9e:93:ce:16:81:71:06:d4:af:0b:75:83:8f:ea:dd:
10:74:1c:b3:c6:29:85:fc:10:b3:c2:06:a6:11:29:26:52:d7:
e8:bd:c7:d6:ec:74:e9:0f:c6:f9:3f:77:46:12:44:8d:1a:27:
c3:8b:34:97:3d:39:79:73:18:37:92:26:36:20:c5:ab:79:4d:
c3:e8:e0:f2:52:6d:76:4c:d3:89:14:a0:42:0b:af:3a:71:25:
4a:63:61:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Zwvnw52dW9KOjsbWE/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDI2YTUxODk0N2RkNWJkMzk4MWVkMDY2OWMxMWM1NjIx
ZDA0NzUwHhcNMjUxMTA0MTMwMTUwWhcNMjUxMTA1MTMwMTUwWjAzMTEwLwYDVQQD
Eyg4MjdlYTVkNzEyZWU0YzMwNzY5MjA4YmRhZjJmOTVmNmY3NDE2ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYpvbTcN4IgTWtFZ8m1vQJJb5Qnm
od/lQGJxLjtyd6XB7GPLpZRPz3vpls/P11RNvcvtcbefLDTHUqQlgnT+D/JOFy3E
qmt/PZXZRZSvxlMyvvBltuYX0hdgvj8Oh1gHRkFsebA/dS9CVqWLP91fZlw4Zc4U
F3/QKETNHjUmAcvnW1hpjDfmpqIi4pRwpAnzC/TasBh1dpHBWuWUIZ6Wc8vIb7LH
CUPVO2FTtvZNMitMTWf4dzGz0e8/K2U4J0VLNHbpL1OSu819MNK3CTgjJRUWSpCx
pCtyqEJSwQtOYNcf/gVNLUbOyKxyy+dWRcfQ4PXH0qSe4yLLibOmJL8gTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ+pdcS7kwwdpIIva8vlfb3QW1QMB8GA1UdIwQY
MBaAFA0CalGJR91b05ge0GacEcViHQR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUt
MjVjYjA5MmY1Y2FjLzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUtMjVjYjA5MmY1Y2Fj
LzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ816Qbs3
bCxin8BT7l9jHSCuCNa4CIbIYNCgbm5nnaiB9MaocdVRd9jFnuIXoqcXuqrbiWfG
18kNhMzAd6Q+cbCcjWinVWzrOOy4LQKHyvDYazATDW9niwDQKx8NFw48CVWSQ1iG
XBKL3e/8qZNyI8zlfWvd3G+BmkTrHlt9MIErvxL6mFwHvof8z0/VrCKc6Jf2yDgZ
E8Jq4X3WUk6um27InTeQnpPOFoFxBtSvC3WDj+rdEHQcs8YphfwQs8IGphEpJlLX
6L3H1ux06Q/G+T93RhJEjRonw4s0lz05eXMYN5ImNiDFq3lNw+jg8lJtdkzTiRSg
QguvOnElSmNhjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:20 2025 by rpki-client