Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File: dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier: U5rJxkuplCS+jUgggqGRjkWJ1XtPbCgLapnxxdqKWys=
Subject key identifier: 3E:16:3B:4B:0F:AC:56:20:4F:1D:D1:6A:C6:FD:BE:63:CE:7C:DD:C7
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 019A507526DE951C8071F043D70E40146428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number: 11E9
Signing time: Tue 04 Nov 2025 20:00:46 +0000
Manifest this update: Tue 04 Nov 2025 20:00:46 +0000
Manifest next update: Wed 05 Nov 2025 20:00:46 +0000
Files and hashes: 1: FcY_QKqq9c1xfH6rECvdKY1Kcu8.roa (hash: Ju8mYMjl2LUkVKbzqtiMt1rTH2nwPvl1R7kMAYH3RPc=)
2: IeAOnvbZbd0JxF7ran2IKsJXZmY.roa (hash: a22ZpV1PraD9QyqLIF4t6hPyMcIcLe+GxaE9NUf90hg=)
3: LS7cmX4hkxBo29n9xBMkazlGUQA.roa (hash: LcZigv6OQHpGmVW5BHzHMIZtI+TTJsjlraR4mOoxOrA=)
4: bHETVGvggsNe0a6WvXBELNSVwc4.roa (hash: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=)
5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: UYyFVRaeq/CVZCaf/jao7DVhiSnTi7F3tPHgyrw03n8=)
6: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (hash: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:26:de:95:1c:80:71:f0:43:d7:0e:40:14:64:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Nov 4 20:00:46 2025 GMT
Not After : Nov 5 20:00:46 2025 GMT
Subject: CN=3e163b4b0fac56204f1dd16ac6fdbe63ce7cddc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:ce:99:f7:b6:30:41:b0:b9:df:a8:d7:59:
9d:83:1d:d7:ae:ff:d9:b9:1d:d5:32:b8:76:6b:13:
b2:b7:62:91:01:53:38:9c:ed:45:4e:46:87:eb:d6:
1c:c1:0e:93:0f:2c:6e:db:b1:1b:b1:b7:19:fa:eb:
76:08:de:ac:b9:70:37:0a:47:6c:5c:3d:b3:74:0c:
ea:c8:45:08:d6:b7:f2:e0:c4:f4:03:2f:6a:86:b8:
c2:87:40:35:63:3a:bf:ed:87:00:fa:e3:1e:18:3b:
25:81:e5:d8:7c:31:38:11:2e:b8:7a:20:8b:0f:ed:
7c:7f:f8:e3:b5:cb:96:0e:9a:ca:37:a8:f7:e3:93:
62:cf:e3:40:d6:cc:aa:65:78:57:8c:c5:20:51:b6:
35:a2:c8:75:3c:e8:c0:71:f3:27:31:53:3b:0e:6d:
34:95:10:dd:ba:1e:2e:2d:9f:75:78:71:43:0a:ca:
24:3e:11:2c:94:94:7a:cb:8f:63:a3:7f:d3:6f:41:
85:c6:7a:e1:d2:3e:72:54:3d:af:6f:2c:f6:6d:18:
0c:30:07:70:94:f0:3e:33:fc:de:11:f7:65:ed:7d:
04:da:5b:c4:47:52:e3:f7:92:ca:c4:6c:0c:79:b8:
e4:a3:36:54:01:23:ad:f0:0d:a8:e5:a7:af:f2:7f:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:3B:4B:0F:AC:56:20:4F:1D:D1:6A:C6:FD:BE:63:CE:7C:DD:C7
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d2:59:2f:df:b1:ca:74:f4:be:a2:1a:f3:cf:2e:10:46:06:
db:48:39:e7:a6:08:ac:85:a6:14:ee:84:45:84:e2:84:75:a8:
83:10:fe:c2:5b:02:7f:31:77:54:1c:71:4b:40:69:ef:f4:59:
9b:c3:dd:3a:bf:02:46:ae:77:4b:02:56:d9:5e:ce:1a:4c:b4:
24:d1:33:e8:cd:59:b9:21:60:fb:71:64:a4:97:4d:d2:df:e0:
c1:4f:ed:dc:95:2c:ed:70:88:8e:8c:42:55:fc:27:4b:42:b0:
96:82:22:fe:89:65:77:d6:88:0f:d4:4e:24:4a:16:82:62:91:
2f:cb:27:4f:52:f3:b0:b6:c5:60:62:62:21:c0:21:bf:f3:dd:
83:9e:cf:27:d7:9a:8b:e5:1e:1d:fe:22:4a:e7:a9:0e:aa:2f:
10:fd:75:81:8a:2b:1f:cd:a5:d2:e7:0c:08:67:44:89:e1:02:
f9:ee:24:35:85:bd:85:29:32:12:2d:60:4d:d7:6e:ef:56:28:
de:a6:8f:be:fc:de:38:f8:d8:70:c1:7e:16:4b:00:e0:5b:41:
1a:04:b1:6f:c0:22:b3:30:13:a7:7c:17:c9:dc:08:75:16:b5:
cb:ef:43:19:aa:ab:42:9f:72:c7:9b:86:7d:77:56:c2:46:3b:
dc:4c:71:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdSbelRyAcfBD1w5AFGQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk
ZDIxMmIwHhcNMjUxMTA0MjAwMDQ2WhcNMjUxMTA1MjAwMDQ2WjAzMTEwLwYDVQQD
EygzZTE2M2I0YjBmYWM1NjIwNGYxZGQxNmFjNmZkYmU2M2NlN2NkZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ODOmfe2MEGwud+o11mdgx3Xrv/Z
uR3VMrh2axOyt2KRAVM4nO1FTkaH69YcwQ6TDyxu27EbsbcZ+ut2CN6suXA3Ckds
XD2zdAzqyEUI1rfy4MT0Ay9qhrjCh0A1Yzq/7YcA+uMeGDslgeXYfDE4ES64eiCL
D+18f/jjtcuWDprKN6j345Niz+NA1syqZXhXjMUgUbY1osh1POjAcfMnMVM7Dm00
lRDduh4uLZ91eHFDCsokPhEslJR6y49jo3/Tb0GFxnrh0j5yVD2vbyz2bRgMMAdw
lPA+M/zeEfdl7X0E2lvER1Lj95LKxGwMebjkozZUASOt8A2o5aev8n84SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4WO0sPrFYgTx3Rasb9vmPOfN3HMB8GA1UdIwQY
MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt
YmMxNTIyNzg5ZDNiLzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi
LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNJZL9+x
ynT0vqIa888uEEYG20g556YIrIWmFO6ERYTihHWogxD+wlsCfzF3VBxxS0Bp7/RZ
m8PdOr8CRq53SwJW2V7OGky0JNEz6M1ZuSFg+3FkpJdN0t/gwU/t3JUs7XCIjoxC
VfwnS0KwloIi/olld9aID9ROJEoWgmKRL8snT1LzsLbFYGJiIcAhv/Pdg57PJ9ea
i+UeHf4iSuepDqovEP11gYorH82l0ucMCGdEieEC+e4kNYW9hSkyEi1gTddu71Yo
3qaPvvzeOPjYcMF+FksA4FtBGgSxb8AiszATp3wXydwIdRa1y+9DGaqrQp9yx5uG
fXdWwkY73ExxYw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:42 2025 by rpki-client