Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: eMcXMLWbjidqo7d/wN6Fz41IFFN0hMaubttExXg0KXs=
Subject key identifier: 8E:8A:9B:33:B1:D1:3B:F7:6F:43:0D:46:72:B9:E8:85:C6:BE:3A:98
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019A522CCD21ECB808BED437C8DC549B763F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 1432
Signing time: Wed 05 Nov 2025 04:00:59 +0000
Manifest this update: Wed 05 Nov 2025 04:00:59 +0000
Manifest next update: Thu 06 Nov 2025 04:00:59 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: zHanJDj6ax+coKcuw71dGsR2N8kbNPCRH3z5QStqKCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:cd:21:ec:b8:08:be:d4:37:c8:dc:54:9b:76:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Nov 5 04:00:59 2025 GMT
Not After : Nov 6 04:00:59 2025 GMT
Subject: CN=8e8a9b33b1d13bf76f430d4672b9e885c6be3a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:4a:90:1f:ae:0a:c6:e1:59:cc:40:7d:52:
ca:43:33:bf:b2:ab:66:ee:a6:83:13:6a:d6:3a:da:
c7:12:09:29:59:8f:6e:4e:a8:85:e2:13:1f:9b:f0:
c6:c1:1f:71:af:f2:50:7f:55:a5:d5:f9:f2:4d:73:
43:f5:ee:2b:07:b8:36:d6:8f:f9:66:6d:7a:39:75:
e8:02:52:54:f6:a7:07:b8:3e:c2:27:37:10:bd:af:
af:89:37:df:9e:ff:aa:bd:f5:24:b6:85:87:fc:bf:
71:a9:e0:ce:5a:71:2e:b8:3d:2b:42:02:06:43:9c:
c8:eb:09:53:0f:15:17:d1:22:ba:8c:b2:4a:f9:8b:
7a:90:95:f4:d4:af:d3:32:a1:4a:5f:19:e0:36:ab:
b3:51:e2:66:8c:ac:82:40:69:45:fe:29:f2:86:19:
11:a5:03:bc:08:67:1e:8a:b1:87:52:65:f4:12:e3:
24:ca:97:8f:fd:78:cf:d9:1b:6a:d8:9f:f4:1a:28:
93:7f:78:a4:da:17:d9:b1:d2:d8:04:6f:41:b6:5b:
cb:ab:61:a6:5e:fd:39:1e:0c:aa:fe:d2:54:3f:23:
82:90:d7:b0:ef:22:53:dd:e1:3a:f4:84:9b:0f:0f:
c1:22:95:d5:f6:cc:f5:b3:25:05:dc:f8:ef:15:a2:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:9B:33:B1:D1:3B:F7:6F:43:0D:46:72:B9:E8:85:C6:BE:3A:98
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ba:ed:20:20:34:f7:f4:4a:25:5e:ee:9f:43:d5:5f:73:3c:
22:83:9c:f8:70:c1:4c:0a:30:b6:b2:53:0f:be:6e:18:24:d1:
a8:63:ef:59:63:ab:3a:33:a3:05:b0:2f:d6:2e:da:72:2a:27:
8f:bb:29:c6:3b:76:06:dc:0a:a3:0e:52:87:8d:10:fa:bd:0a:
4f:29:f5:14:c2:50:d5:f6:40:9a:7d:43:b3:cd:13:c2:fd:9f:
ca:b7:9f:9d:ae:71:fe:a4:a8:7f:37:bd:01:2a:90:3f:44:0b:
b7:66:e8:7b:3c:53:fe:1d:14:84:26:5b:88:a1:15:6c:e2:8c:
4e:d9:5b:8f:34:1a:34:c6:ff:b3:f9:eb:f5:20:92:8d:0c:32:
50:87:fe:d4:4a:dd:fc:1f:68:05:b6:03:01:24:7a:0e:0b:eb:
b3:c4:80:83:30:18:53:4c:9b:50:95:95:63:5b:59:5f:31:6b:
70:2e:d6:29:f1:99:52:30:28:5a:9a:f9:15:d5:39:dc:27:fe:
52:c0:fa:13:f7:a7:dc:90:1d:c3:e6:2b:26:fe:74:4e:29:02:
8d:f1:65:6f:e8:6d:0b:c5:69:34:20:9a:27:27:8f:79:37:59:
d9:6a:6c:6e:25:98:a4:5a:f7:55:88:f2:5c:5f:ee:15:5f:92:
4f:70:85:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLM0h7LgIvtQ3yNxUm3Y/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNmJkYTFkYmZhNzdjNzRkYTcyODA1ZWVlNTQxOGQzZjBj
YzUzOWQwHhcNMjUxMTA1MDQwMDU5WhcNMjUxMTA2MDQwMDU5WjAzMTEwLwYDVQQD
Eyg4ZThhOWIzM2IxZDEzYmY3NmY0MzBkNDY3MmI5ZTg4NWM2YmUzYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbRKkB+uCsbhWcxAfVLKQzO/sqtm
7qaDE2rWOtrHEgkpWY9uTqiF4hMfm/DGwR9xr/JQf1Wl1fnyTXND9e4rB7g21o/5
Zm16OXXoAlJU9qcHuD7CJzcQva+viTffnv+qvfUktoWH/L9xqeDOWnEuuD0rQgIG
Q5zI6wlTDxUX0SK6jLJK+Yt6kJX01K/TMqFKXxngNquzUeJmjKyCQGlF/inyhhkR
pQO8CGceirGHUmX0EuMkypeP/XjP2Rtq2J/0GiiTf3ik2hfZsdLYBG9BtlvLq2Gm
Xv05Hgyq/tJUPyOCkNew7yJT3eE69ISbDw/BIpXV9sz1syUF3PjvFaK0SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6KmzOx0Tv3b0MNRnK56IXGvjqYMB8GA1UdIwQY
MBaAFA9r2h2/p3x02nKAXu5UGNPwzFOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYt
ZTA4MTJkZjEyMjFmLzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYtZTA4MTJkZjEyMjFm
LzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerrtICA0
9/RKJV7un0PVX3M8IoOc+HDBTAowtrJTD75uGCTRqGPvWWOrOjOjBbAv1i7acion
j7spxjt2BtwKow5Sh40Q+r0KTyn1FMJQ1fZAmn1Ds80Twv2fyrefna5x/qSofze9
ASqQP0QLt2boezxT/h0UhCZbiKEVbOKMTtlbjzQaNMb/s/nr9SCSjQwyUIf+1Erd
/B9oBbYDASR6Dgvrs8SAgzAYU0ybUJWVY1tZXzFrcC7WKfGZUjAoWpr5FdU53Cf+
UsD6E/en3JAdw+YrJv50TikCjfFlb+htC8VpNCCaJyePeTdZ2WpsbiWYpFr3VYjy
XF/uFV+ST3CFzQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:28 2025 by rpki-client