Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: 0W3t4+eKqaE54s/x7s6A5KJfx8VOqmIcj4sNJ5hMM5w=
Subject key identifier: D5:85:9C:36:DA:7E:56:67:3D:BE:84:41:BD:33:31:D1:94:F1:82:46
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 019A4F62278D31C26E67E0BC796802AF3EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0AA9
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: jmRLIOIGR0vIbk+EigF1GiDb+P4kCLBVDQ5U3DJ1UO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:27:8d:31:c2:6e:67:e0:bc:79:68:02:af:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=d5859c36da7e56673dbe8441bd3331d194f18246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:8f:d7:8a:47:d7:9d:b4:29:98:a9:d4:e6:
dc:d4:25:c1:a2:20:ef:63:5c:d5:95:70:1f:84:79:
6a:4c:69:48:cd:f6:6d:17:ea:56:80:9d:55:12:d2:
c4:2c:75:1a:a3:ea:00:59:a8:64:85:91:60:31:28:
4d:de:49:7b:00:72:86:f3:32:86:cf:70:eb:68:45:
a9:a7:2b:0e:04:3c:9f:17:99:26:21:11:6a:90:48:
4c:58:07:7e:96:af:84:e7:fe:e6:04:ca:dc:d6:22:
b4:09:f3:7c:2d:af:fc:b1:69:8f:61:ae:03:2e:d8:
40:8d:58:07:61:7d:36:b2:58:30:e1:e1:09:11:cb:
90:b7:1c:e2:58:a8:ae:85:d6:f3:e1:3d:e4:61:37:
43:59:e1:bd:50:2f:e3:d3:21:5a:f9:fe:a6:3f:88:
11:41:be:fe:c6:21:f4:78:c7:ff:f0:7b:dc:37:15:
29:9a:3e:56:9d:4e:52:ce:68:d9:63:b0:30:a7:00:
4d:24:1c:32:e7:24:9a:ea:6d:1b:e5:4c:8c:57:1e:
6d:30:81:ee:62:f7:55:fc:3d:00:51:c2:94:4f:41:
25:f0:5e:5b:e1:d2:00:71:ef:fc:e8:ef:88:32:5a:
16:aa:0b:69:96:67:e8:59:54:d5:1b:79:63:c0:fc:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:9C:36:DA:7E:56:67:3D:BE:84:41:BD:33:31:D1:94:F1:82:46
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a5:76:0b:b2:c6:b9:68:76:14:90:05:83:9d:2d:b0:1b:d4:
b4:00:4d:07:5c:48:88:4b:e9:34:2b:7a:60:39:56:3e:3a:09:
88:67:fd:1d:ba:c9:f9:c5:63:d0:8d:60:e4:c2:ff:c3:f8:8b:
2c:54:76:b8:01:a2:68:0f:29:fa:88:0f:8a:77:df:3a:7b:97:
ea:84:d5:6c:d8:bd:3e:e7:57:2e:ad:dc:12:ef:d0:cf:75:17:
01:aa:b0:97:8d:a6:c7:ab:82:6e:41:d6:5a:ca:29:37:81:2b:
a2:9a:ae:00:82:09:29:91:43:87:29:ff:89:d8:e4:65:91:c3:
b7:5a:66:32:f3:21:c8:28:b7:43:21:e3:09:8f:f5:d3:c2:2a:
24:8f:a3:27:19:f2:e5:04:f7:3c:62:ec:03:40:1a:08:f4:26:
fe:b1:95:55:0c:0d:05:28:75:26:f7:99:9b:7c:91:eb:ef:eb:
d7:f7:1e:3c:d1:97:b4:f9:9f:3e:fb:c5:00:ba:39:97:9d:46:
66:15:70:52:fd:e1:9f:c4:2b:c1:73:eb:79:98:66:85:48:cf:
88:37:71:01:47:09:f0:93:12:4a:be:bb:d4:3d:87:c0:0b:fd:
25:23:1b:03:54:3d:d3:47:c4:6e:9a:f8:4b:34:18:b7:6b:75:
1e:b6:bc:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYieNMcJuZ+C8eWgCrz7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2
N2UwODUwHhcNMjUxMTA0MTUwMDIzWhcNMjUxMTA1MTUwMDIzWjAzMTEwLwYDVQQD
EyhkNTg1OWMzNmRhN2U1NjY3M2RiZTg0NDFiZDMzMzFkMTk0ZjE4MjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5iP14pH1520KZip1Obc1CXBoiDv
Y1zVlXAfhHlqTGlIzfZtF+pWgJ1VEtLELHUao+oAWahkhZFgMShN3kl7AHKG8zKG
z3DraEWppysOBDyfF5kmIRFqkEhMWAd+lq+E5/7mBMrc1iK0CfN8La/8sWmPYa4D
LthAjVgHYX02slgw4eEJEcuQtxziWKiuhdbz4T3kYTdDWeG9UC/j0yFa+f6mP4gR
Qb7+xiH0eMf/8HvcNxUpmj5WnU5SzmjZY7AwpwBNJBwy5ySa6m0b5UyMVx5tMIHu
YvdV/D0AUcKUT0El8F5b4dIAce/86O+IMloWqgtplmfoWVTVG3ljwPxvtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWFnDbaflZnPb6EQb0zMdGU8YJGMB8GA1UdIwQY
MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt
ZjZmZjI4MWZiYzMyLzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy
LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqV2C7LG
uWh2FJAFg50tsBvUtABNB1xIiEvpNCt6YDlWPjoJiGf9HbrJ+cVj0I1g5ML/w/iL
LFR2uAGiaA8p+ogPinffOnuX6oTVbNi9PudXLq3cEu/Qz3UXAaqwl42mx6uCbkHW
WsopN4EropquAIIJKZFDhyn/idjkZZHDt1pmMvMhyCi3QyHjCY/108IqJI+jJxny
5QT3PGLsA0AaCPQm/rGVVQwNBSh1JveZm3yR6+/r1/cePNGXtPmfPvvFALo5l51G
ZhVwUv3hn8QrwXPreZhmhUjPiDdxAUcJ8JMSSr671D2HwAv9JSMbA1Q900fEbpr4
SzQYt2t1Hra8UA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:10 2025 by rpki-client