Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: 4sF29Qdl72IHkq1BoohckU4PkEPfbxa2j3a6NBfzFeY=
Subject key identifier: ED:F6:17:A1:32:10:83:9C:DE:AF:99:80:85:75:46:AC:D6:1A:08:2E
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 019A4EF5072ECD4F36AE0311D00C8BAC0203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 03C5
Signing time: Tue 04 Nov 2025 13:01:12 +0000
Manifest this update: Tue 04 Nov 2025 13:01:12 +0000
Manifest next update: Wed 05 Nov 2025 13:01:12 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: 5FEpZ8iHsrAxP4CI7QMzhIIn2HTc4JtMHRBiaGDp64I=)
2: LkbZ9NbuqV8kVwW0R6t_W7E36SY.roa (hash: OFwtZ8nR+nHbeTcy4UO/g/3elRZlu1GMxchq0zT/W/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:07:2e:cd:4f:36:ae:03:11:d0:0c:8b:ac:02:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Nov 4 13:01:12 2025 GMT
Not After : Nov 5 13:01:12 2025 GMT
Subject: CN=edf617a13210839cdeaf9980857546acd61a082e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:e6:43:f5:a2:ba:8a:f2:6c:c5:a4:4c:d9:
cb:02:ab:4f:07:ae:5f:fc:22:ed:14:cd:e2:d9:54:
84:b3:e5:d6:27:22:f8:f9:e8:7b:b8:32:16:87:dc:
65:a1:9e:20:86:08:9d:d7:d1:bf:3b:18:e7:a7:a6:
9b:0f:e7:28:89:bb:b5:b0:6d:ff:39:e4:ab:92:ef:
30:65:09:6a:16:06:0f:ae:66:3c:29:fa:c8:f6:56:
e6:83:a2:8c:30:a0:07:a8:6f:92:03:37:58:98:90:
28:9b:40:ba:09:db:2f:42:df:1c:fb:42:df:ec:1f:
8d:28:38:46:01:96:ef:b1:62:70:1c:44:c2:8c:52:
8c:82:a6:3c:49:c2:01:be:cd:78:f1:32:ec:9f:5d:
ce:d6:52:cf:db:26:ce:d0:27:06:e5:35:4e:15:67:
07:28:f9:97:dd:a9:9f:73:23:ef:de:3a:94:e1:b8:
db:00:08:bb:a6:81:3d:87:60:59:99:e7:1f:71:9c:
07:77:57:55:6f:b3:6d:42:da:74:5b:d9:77:4c:38:
95:d3:bb:d7:9a:09:33:df:97:14:6c:6a:7b:56:0b:
d0:dc:64:59:ef:2b:3d:1d:ea:79:73:03:4d:6e:1a:
c6:85:3c:f7:5c:99:b2:b4:89:d8:1c:eb:c0:f3:18:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F6:17:A1:32:10:83:9C:DE:AF:99:80:85:75:46:AC:D6:1A:08:2E
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:37:a0:8e:b7:67:bc:a7:08:24:43:24:0a:32:9d:ac:3a:6d:
1f:23:5f:80:68:c4:37:26:70:dd:87:2a:db:82:16:7f:47:83:
17:e2:39:2e:00:b7:51:75:09:1d:c1:48:6f:75:f3:cd:ae:cc:
08:7a:ec:a2:fa:0f:9f:9c:5d:4e:ee:28:7e:3b:f5:fe:c3:47:
ee:b2:cc:52:d3:e4:f0:37:87:bc:d2:a3:e6:4c:46:8f:d3:bf:
7e:2e:48:21:f2:b2:ae:59:ac:70:2b:7c:e4:54:8d:ae:f6:50:
ae:bb:ec:f3:7c:cb:fe:5d:e1:cc:00:0e:eb:07:45:89:bd:d7:
ed:7a:57:2c:89:a5:52:3b:11:9f:c1:68:97:00:c7:51:6a:34:
7a:48:40:03:76:a7:0f:5b:26:33:d4:63:46:bd:fc:3f:ec:f7:
c4:01:9d:1b:62:2b:75:70:98:3c:15:c4:24:6e:f5:ce:56:d2:
89:2d:c0:89:1b:3d:82:66:82:dd:6d:b8:ec:41:37:c7:4a:2e:
24:fd:b3:54:02:fa:ac:ff:63:32:f1:aa:3f:c2:11:24:97:a4:
47:bb:ac:97:9a:42:44:02:f3:10:fb:98:5a:2d:17:f5:79:d3:
41:c6:40:67:ac:ce:fa:35:54:34:c0:3f:18:96:8f:c5:c2:6e:
cd:e2:2c:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9QcuzU82rgMR0AyLrAIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGNmMGVjN2JhZjM0OWU4OTJkNTExMTVjMjJjMGRiZDQz
NTBiOGUwHhcNMjUxMTA0MTMwMTEyWhcNMjUxMTA1MTMwMTEyWjAzMTEwLwYDVQQD
EyhlZGY2MTdhMTMyMTA4MzljZGVhZjk5ODA4NTc1NDZhY2Q2MWEwODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5PmQ/WiuorybMWkTNnLAqtPB65f
/CLtFM3i2VSEs+XWJyL4+eh7uDIWh9xloZ4ghgid19G/Oxjnp6abD+coibu1sG3/
OeSrku8wZQlqFgYPrmY8KfrI9lbmg6KMMKAHqG+SAzdYmJAom0C6CdsvQt8c+0Lf
7B+NKDhGAZbvsWJwHETCjFKMgqY8ScIBvs148TLsn13O1lLP2ybO0CcG5TVOFWcH
KPmX3amfcyPv3jqU4bjbAAi7poE9h2BZmecfcZwHd1dVb7NtQtp0W9l3TDiV07vX
mgkz35cUbGp7VgvQ3GRZ7ys9Hep5cwNNbhrGhTz3XJmytInYHOvA8xgHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO32F6EyEIOc3q+ZgIV1RqzWGgguMB8GA1UdIwQY
MBaAFA/c8Ox7rzSeiS1REVwiwNvUNQuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2Ut
YjI5NTgzOGFiYmQ5LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2UtYjI5NTgzOGFiYmQ5
LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTegjrdn
vKcIJEMkCjKdrDptHyNfgGjENyZw3Ycq24IWf0eDF+I5LgC3UXUJHcFIb3Xzza7M
CHrsovoPn5xdTu4ofjv1/sNH7rLMUtPk8DeHvNKj5kxGj9O/fi5IIfKyrlmscCt8
5FSNrvZQrrvs83zL/l3hzAAO6wdFib3X7XpXLImlUjsRn8FolwDHUWo0ekhAA3an
D1smM9RjRr38P+z3xAGdG2IrdXCYPBXEJG71zlbSiS3AiRs9gmaC3W247EE3x0ou
JP2zVAL6rP9jMvGqP8IRJJekR7usl5pCRALzEPuYWi0X9XnTQcZAZ6zO+jVUNMA/
GJaPxcJuzeIsgw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:29 2025 by rpki-client