Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: Boydvw81F9E+3sSMqdBJ1NXj8b/ouDYQZKOMagc51ZM=
Subject key identifier: 2F:7B:7E:BD:1F:2A:A4:62:C9:CB:96:6A:B9:5D:A0:ED:59:73:88:D5
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019A533FB428366AB4AC69EB5C4C3CD1EDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 4C
Signing time: Wed 05 Nov 2025 09:01:15 +0000
Manifest this update: Wed 05 Nov 2025 09:01:15 +0000
Manifest next update: Thu 06 Nov 2025 09:01:15 +0000
Files and hashes: 1: KcL9v8r1ilJRcQB0ccfbEYTCJtg.roa (hash: rlzaxnEOZCErQdw9cvJ2yLX/BKeb6IB9wJmrnWDfV8E=)
2: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: FjF5DxmX0hlU35hIsFpr/puJNv/tDIhGBN4U65GSAv0=)
3: oLz2eFbmpRFR5A5oj9_IzGOfqTg.roa (hash: K42AQKk/5JQbpER6nQEE4PNnPHJ5tbcZAd8Cz+zivrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:b4:28:36:6a:b4:ac:69:eb:5c:4c:3c:d1:ed:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Nov 5 09:01:15 2025 GMT
Not After : Nov 6 09:01:15 2025 GMT
Subject: CN=2f7b7ebd1f2aa462c9cb966ab95da0ed597388d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:26:d6:95:3c:92:6a:e2:01:7a:02:20:d3:
d5:ce:6d:a1:df:d2:c5:9a:73:be:bc:0d:fb:51:2a:
ca:a9:e0:f6:ce:ec:1c:79:b3:56:f6:8c:0b:82:b0:
72:92:0a:3f:a6:23:ba:0f:c2:10:b7:9e:ad:fe:29:
77:ba:d2:03:d8:43:56:99:31:4a:15:21:de:52:9b:
ee:60:59:c4:d3:fb:43:21:49:e8:95:47:3d:a8:e1:
aa:20:c3:3e:ef:b6:f8:f9:1f:d9:68:d1:9f:c0:45:
6f:3b:3c:25:2d:b5:4e:43:be:50:48:8f:2e:62:f2:
f5:3a:50:b5:05:9e:ef:79:b9:f4:35:4a:bb:a7:6a:
53:ac:6f:80:80:01:de:5d:05:7a:92:da:24:9e:a2:
47:db:f3:e6:17:f6:9d:e2:c8:00:ed:e5:0e:ea:1e:
b0:07:d8:ec:c7:ed:6d:58:99:03:8d:e6:63:d6:6f:
a2:44:84:f0:a5:59:5e:e8:46:ac:41:89:ea:8a:34:
34:e8:bb:f5:6b:20:c8:b0:87:b1:26:18:dc:3f:6f:
42:31:b6:65:a5:ce:e4:2f:a2:bf:0a:0c:52:8d:6b:
87:a7:fb:03:f1:ff:f6:37:59:2d:98:68:aa:f6:88:
da:85:e2:23:0c:69:c0:b6:00:06:7b:c3:94:63:5d:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:7E:BD:1F:2A:A4:62:C9:CB:96:6A:B9:5D:A0:ED:59:73:88:D5
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f4:f6:18:ea:c9:65:03:97:da:e4:b9:f1:9e:1e:ec:75:78:
b9:ce:58:0a:8b:66:ca:6a:2c:a6:0f:a7:58:93:89:ff:c0:28:
b9:ad:c5:de:ad:ce:73:fe:04:e4:5b:5e:17:1c:d0:36:bb:71:
c6:6c:73:46:47:60:15:d5:7a:7d:0d:8e:88:a4:f8:54:e4:a1:
ad:fe:5c:8d:e5:0a:71:13:93:b2:f8:81:78:e4:de:6b:47:cb:
4d:6c:c2:97:38:7d:6f:7d:72:e9:a4:e8:93:68:d1:f6:f1:05:
9a:a0:52:68:9b:61:b9:33:a2:79:c7:a2:8a:a6:15:23:75:8b:
8b:9f:99:8e:de:04:8b:86:be:4c:ff:98:35:8e:60:3b:02:58:
35:95:dd:52:73:ce:54:8a:16:73:14:ef:41:da:25:19:5c:06:
c3:4a:04:35:be:75:61:a7:ff:3c:9a:aa:2e:b1:76:44:7f:b7:
73:17:c9:f4:0e:76:2d:60:98:87:04:7d:a6:4b:00:07:53:d8:
8c:e2:4b:2f:81:4e:1e:0b:94:2c:b1:67:8a:46:89:29:bb:e6:
3e:ed:19:00:45:f6:21:17:5c:f6:70:f8:b3:8a:95:31:d5:15:
f0:05:3c:4b:0a:f0:f4:35:e9:73:cd:54:a1:25:9e:fc:73:3b:
b6:92:00:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP7QoNmq0rGnrXEw80e3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZjUyODZlZTM4NTU5YmRkOTg5Yzc2NGY1YTY0NzQzNDdi
MDNiNmYwHhcNMjUxMTA1MDkwMTE1WhcNMjUxMTA2MDkwMTE1WjAzMTEwLwYDVQQD
EygyZjdiN2ViZDFmMmFhNDYyYzljYjk2NmFiOTVkYTBlZDU5NzM4OGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ4m1pU8kmriAXoCINPVzm2h39LF
mnO+vA37USrKqeD2zuwcebNW9owLgrBykgo/piO6D8IQt56t/il3utID2ENWmTFK
FSHeUpvuYFnE0/tDIUnolUc9qOGqIMM+77b4+R/ZaNGfwEVvOzwlLbVOQ75QSI8u
YvL1OlC1BZ7vebn0NUq7p2pTrG+AgAHeXQV6ktoknqJH2/PmF/ad4sgA7eUO6h6w
B9jsx+1tWJkDjeZj1m+iRITwpVle6EasQYnqijQ06Lv1ayDIsIexJhjcP29CMbZl
pc7kL6K/CgxSjWuHp/sD8f/2N1ktmGiq9ojaheIjDGnAtgAGe8OUY11sWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC97fr0fKqRiycuWarldoO1Zc4jVMB8GA1UdIwQY
MBaAFHX1KG7jhVm92YnHZPWmR0NHsDtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDkt
MDM4NTM0OWZmMWU4LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDktMDM4NTM0OWZmMWU4
LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPT2GOrJ
ZQOX2uS58Z4e7HV4uc5YCotmymospg+nWJOJ/8Aoua3F3q3Oc/4E5FteFxzQNrtx
xmxzRkdgFdV6fQ2OiKT4VOShrf5cjeUKcROTsviBeOTea0fLTWzClzh9b31y6aTo
k2jR9vEFmqBSaJthuTOieceiiqYVI3WLi5+Zjt4Ei4a+TP+YNY5gOwJYNZXdUnPO
VIoWcxTvQdolGVwGw0oENb51Yaf/PJqqLrF2RH+3cxfJ9A52LWCYhwR9pksAB1PY
jOJLL4FOHguULLFnikaJKbvmPu0ZAEX2IRdc9nD4s4qVMdUV8AU8Swrw9DXpc81U
oSWe/HM7tpIAgA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:50:31 2025 by rpki-client