Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File: DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier: kmy8/bcZltxiGumNmMF/IAmLENlz5UjEOYpN9PNaTA8=
Subject key identifier: C9:66:57:46:6D:6A:3C:43:01:F9:D5:B4:4F:2B:A4:C3:DC:CE:40:58
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial: 019A4DE20179379F291886D5150E1602756B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: 1XNJWBeFIM2IRAvxd79b-HcAo9o.roa (hash: FW3/MZh4Uk7LDpQNsxMFINYM6j9D7wIMnyrZzis42ZE=)
2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: cRwsRA4pydqo2OezJFdaVAEx7HpEQmGN1PiQJHzPeDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:01:79:37:9f:29:18:86:d5:15:0e:16:02:75:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=c96657466d6a3c4301f9d5b44f2ba4c3dcce4058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:68:03:1c:30:04:12:60:d7:6f:fe:bf:da:
62:13:90:be:e6:71:10:05:fb:7d:34:3f:86:91:99:
65:5f:25:f0:63:d5:be:bf:c4:2a:95:50:d4:f9:dd:
48:9b:a1:34:4f:fd:e0:a4:5a:e0:9a:c2:27:57:3f:
82:28:1b:9e:75:a4:f8:df:f8:69:0b:d8:9d:04:26:
c5:6c:ca:06:ff:9b:d7:97:b1:45:bd:67:d1:9c:2f:
5b:ab:49:d3:82:a5:c1:bd:48:07:4e:fe:4e:78:e4:
e9:70:a5:19:da:42:b5:64:5e:e3:ea:7a:9c:09:82:
9a:f4:25:2a:cb:39:4e:a9:0a:bc:ac:37:4c:35:90:
5f:c5:c4:f8:c1:23:53:c7:38:d3:6f:8c:f2:54:f6:
f1:52:13:cf:fb:19:25:6d:4f:a2:a7:5a:86:c1:7f:
18:41:95:3e:b9:f0:11:97:02:9e:35:ce:d8:98:df:
3a:c2:50:e8:73:7b:9e:25:f8:05:32:31:af:26:22:
04:7d:90:46:2b:8a:32:42:e6:38:28:e3:f8:88:1e:
1a:5c:fb:ea:5a:1c:c2:5d:0c:d2:61:3d:65:a4:fc:
3e:38:21:fb:11:10:54:cd:b1:d2:1c:5f:9e:c8:49:
4b:a9:08:f8:04:58:d0:76:e1:60:62:a4:5d:3f:34:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:57:46:6D:6A:3C:43:01:F9:D5:B4:4F:2B:A4:C3:DC:CE:40:58
X509v3 Authority Key Identifier:
keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b9:16:f1:9d:f7:52:3d:65:89:61:ea:42:96:2a:55:73:d5:
f0:69:f3:cc:9a:43:ff:88:25:05:70:59:be:ae:89:81:3c:91:
c3:be:80:de:2d:80:2d:0c:1b:09:3a:90:42:82:4c:b4:86:82:
d4:de:4d:41:8f:9d:93:44:f6:19:18:70:13:48:2d:86:0f:d0:
cf:d7:a0:f0:85:c3:0d:31:54:61:10:e0:9f:a0:3d:4c:e8:f7:
d7:f5:a2:68:51:53:d8:9a:63:ef:5f:2e:6b:91:e7:12:9c:0f:
0b:01:36:0f:76:75:6e:fc:9f:96:86:a1:5b:8e:f6:ea:45:3b:
ed:25:21:4a:eb:b7:43:70:b2:c2:8d:ff:1f:a3:21:e6:57:e9:
21:08:73:3c:ec:7c:59:a9:4a:f3:c0:37:33:1f:fe:14:89:45:
a1:f2:01:bb:4f:c2:a4:6a:ad:44:4d:9d:66:96:f5:c0:75:ea:
cf:ec:41:24:f5:bf:96:96:aa:2d:8f:c5:a1:7b:75:c8:cd:55:
e9:eb:44:e6:72:b1:47:91:7f:a0:14:95:06:14:e4:da:cc:57:
8f:57:67:ca:f5:b4:52:78:4f:7d:29:53:8a:c9:db:e4:05:be:
72:bf:f4:71:b7:cd:ec:70:11:78:e7:de:c8:93:26:13:5c:b5:
96:ce:93:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4gF5N58pGIbVFQ4WAnVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDQ4YjVmODE1MjM1YzM5M2ZlYTc2MWUwN2ViOGI4YmJm
ODdmZDMwHhcNMjUxMTA0MDgwMDQ4WhcNMjUxMTA1MDgwMDQ4WjAzMTEwLwYDVQQD
EyhjOTY2NTc0NjZkNmEzYzQzMDFmOWQ1YjQ0ZjJiYTRjM2RjY2U0MDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs91oAxwwBBJg12/+v9piE5C+5nEQ
Bft9ND+GkZllXyXwY9W+v8QqlVDU+d1Im6E0T/3gpFrgmsInVz+CKBuedaT43/hp
C9idBCbFbMoG/5vXl7FFvWfRnC9bq0nTgqXBvUgHTv5OeOTpcKUZ2kK1ZF7j6nqc
CYKa9CUqyzlOqQq8rDdMNZBfxcT4wSNTxzjTb4zyVPbxUhPP+xklbU+ip1qGwX8Y
QZU+ufARlwKeNc7YmN86wlDoc3ueJfgFMjGvJiIEfZBGK4oyQuY4KOP4iB4aXPvq
WhzCXQzSYT1lpPw+OCH7ERBUzbHSHF+eyElLqQj4BFjQduFgYqRdPzRgIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlmV0ZtajxDAfnVtE8rpMPczkBYMB8GA1UdIwQY
MBaAFAwEi1+BUjXDk/6nYeB+uLi7+H/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjkt
NWYzY2MzMThmMTgwLzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjktNWYzY2MzMThmMTgw
LzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7kW8Z33
Uj1liWHqQpYqVXPV8GnzzJpD/4glBXBZvq6JgTyRw76A3i2ALQwbCTqQQoJMtIaC
1N5NQY+dk0T2GRhwE0gthg/Qz9eg8IXDDTFUYRDgn6A9TOj31/WiaFFT2Jpj718u
a5HnEpwPCwE2D3Z1bvyfloahW4726kU77SUhSuu3Q3Cywo3/H6Mh5lfpIQhzPOx8
WalK88A3Mx/+FIlFofIBu0/CpGqtRE2dZpb1wHXqz+xBJPW/lpaqLY/FoXt1yM1V
6etE5nKxR5F/oBSVBhTk2sxXj1dnyvW0UnhPfSlTisnb5AW+cr/0cbfN7HAReOfe
yJMmE1y1ls6TMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:41 2025 by rpki-client