Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: 87ZSGEXpkQ17E7kc22QNAZHnQTSQxyou6bsGd5tLbig=
Subject key identifier: 2A:0D:0A:E6:6E:F1:7E:12:2C:96:6B:EF:8A:DC:13:55:AE:8F:A6:75
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019A51BE4733129BBAC5842E01B99339DC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 02:00:15 +0000
Manifest this update: Wed 05 Nov 2025 02:00:15 +0000
Manifest next update: Thu 06 Nov 2025 02:00:15 +0000
Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=)
2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: U7dFe1TPLpN9HmHkcGuHpBQUzq+qrZziMVJIbqnL+2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:47:33:12:9b:ba:c5:84:2e:01:b9:93:39:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Nov 5 02:00:15 2025 GMT
Not After : Nov 6 02:00:15 2025 GMT
Subject: CN=2a0d0ae66ef17e122c966bef8adc1355ae8fa675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:89:ae:d4:c2:27:64:61:1b:b8:50:50:e6:
ad:97:a1:b1:b2:98:e6:85:d2:97:80:b4:6a:8e:11:
62:a1:a0:4a:e3:32:34:79:c1:c4:18:94:c4:7e:72:
4f:d2:09:03:0a:a8:67:87:fa:ea:88:43:2e:4c:9a:
3a:e9:65:05:9d:07:af:5d:51:00:a0:e8:6a:de:45:
68:14:e7:fa:3a:86:06:41:87:8e:67:c7:87:a6:46:
e9:b9:36:22:cc:fb:09:a5:c1:69:85:1b:6b:43:4a:
5e:eb:0c:be:2a:9c:96:be:24:5b:a3:08:46:61:84:
cc:a1:a4:c8:26:f6:e1:5d:e4:73:a6:52:f5:6a:89:
06:02:69:0d:d0:37:82:f7:65:24:0e:ae:38:2b:2c:
97:f5:e1:2a:ad:b4:c1:51:28:89:10:19:a3:f4:33:
e1:f9:5f:cd:64:2e:46:b3:a1:19:45:c7:b2:98:a0:
06:b2:46:16:45:22:20:9b:a0:3b:04:98:0a:6b:a2:
1e:22:87:b5:6c:17:1d:b3:4b:de:6f:65:fd:64:67:
dd:12:a2:84:5e:bc:9f:91:ec:e1:56:33:be:3d:f4:
0b:dd:0f:ac:8f:8f:4d:e5:b1:c0:fb:4f:72:e0:1a:
9c:30:27:f6:e9:21:f2:06:b8:eb:53:d0:2c:3a:d8:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0D:0A:E6:6E:F1:7E:12:2C:96:6B:EF:8A:DC:13:55:AE:8F:A6:75
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:52:a9:b6:80:50:23:b4:a7:84:21:05:7e:7e:45:79:1c:
54:d2:08:4c:a2:40:92:f1:a9:ed:18:c9:97:72:70:09:2b:2d:
a7:bf:92:e0:3f:3b:a9:9b:f3:39:71:c7:e9:19:bd:00:8d:18:
f3:6c:95:a4:62:e9:2e:a0:05:7d:8f:a8:5d:68:65:3a:a1:e0:
4f:19:3b:ad:f7:42:35:0e:c5:89:96:82:06:3b:9a:69:17:07:
34:1a:ee:15:40:26:28:7d:74:7a:06:8a:c6:35:42:c5:59:c9:
09:f6:d7:f9:08:65:0a:b1:b1:2c:62:ca:2a:cf:a7:8f:ae:5d:
0e:94:fb:7e:4c:7e:ee:34:5d:ea:49:2c:bb:10:ef:4a:64:b2:
78:13:2b:a9:59:5e:cd:12:b8:6c:61:88:42:f7:a2:9e:05:03:
7a:22:97:d4:6b:c6:3d:3f:ef:06:d0:58:d3:98:e7:ce:ff:ed:
73:91:3e:16:11:11:02:8e:fa:b4:c2:76:de:6c:de:cb:1b:30:
8d:6f:2e:4a:36:4a:88:92:fc:2c:66:54:b4:01:1e:84:7c:3f:
7e:46:72:c4:be:bc:77:ca:a0:9d:d9:31:b8:38:81:58:d1:e0:
2f:eb:15:82:7a:ba:91:86:57:e5:8a:ce:f6:98:82:b4:7b:0c:
16:48:dc:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvkczEpu6xYQuAbmTOdxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmYxODI4MDRiNTZlNTA4YWEzNzJjMDNjY2ViNzNlZjhj
MmM2OGIwHhcNMjUxMTA1MDIwMDE1WhcNMjUxMTA2MDIwMDE1WjAzMTEwLwYDVQQD
EygyYTBkMGFlNjZlZjE3ZTEyMmM5NjZiZWY4YWRjMTM1NWFlOGZhNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u2JrtTCJ2RhG7hQUOatl6Gxspjm
hdKXgLRqjhFioaBK4zI0ecHEGJTEfnJP0gkDCqhnh/rqiEMuTJo66WUFnQevXVEA
oOhq3kVoFOf6OoYGQYeOZ8eHpkbpuTYizPsJpcFphRtrQ0pe6wy+KpyWviRbowhG
YYTMoaTIJvbhXeRzplL1aokGAmkN0DeC92UkDq44KyyX9eEqrbTBUSiJEBmj9DPh
+V/NZC5Gs6EZRceymKAGskYWRSIgm6A7BJgKa6IeIoe1bBcds0veb2X9ZGfdEqKE
XryfkezhVjO+PfQL3Q+sj49N5bHA+09y4BqcMCf26SHyBrjrU9AsOtiMawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoNCuZu8X4SLJZr74rcE1Wuj6Z1MB8GA1UdIwQY
MBaAFAxvGCgEtW5QiqNywDzOtz74wsaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUt
OTkzY2Q4Mzg4ZmQ1LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUtOTkzY2Q4Mzg4ZmQ1
LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8BSqbaA
UCO0p4QhBX5+RXkcVNIITKJAkvGp7RjJl3JwCSstp7+S4D87qZvzOXHH6Rm9AI0Y
82yVpGLpLqAFfY+oXWhlOqHgTxk7rfdCNQ7FiZaCBjuaaRcHNBruFUAmKH10egaK
xjVCxVnJCfbX+QhlCrGxLGLKKs+nj65dDpT7fkx+7jRd6kksuxDvSmSyeBMrqVle
zRK4bGGIQveingUDeiKX1GvGPT/vBtBY05jnzv/tc5E+FhERAo76tMJ23mzeyxsw
jW8uSjZKiJL8LGZUtAEehHw/fkZyxL68d8qgndkxuDiBWNHgL+sVgnq6kYZX5YrO
9piCtHsMFkjcZw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:14 2025 by rpki-client