Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier: 2EdxmMcT31bUOSVzhvMHkvT9zxvMEQmlp98MwfnPcDM=
Subject key identifier: 8B:C7:2F:39:2F:CF:D2:34:17:75:EF:3C:6A:64:FE:0B:26:5D:15:5D
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019A54BF3A4B4D594A271C71BCF8720EF71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number: 0B60
Signing time: Wed 05 Nov 2025 16:00:09 +0000
Manifest this update: Wed 05 Nov 2025 16:00:09 +0000
Manifest next update: Thu 06 Nov 2025 16:00:09 +0000
Files and hashes: 1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=)
2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: MYtnMcGtnXeo5GRtxSjDNgi2m5G9WEPwkv7yRCvMgUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:3a:4b:4d:59:4a:27:1c:71:bc:f8:72:0e:f7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Nov 5 16:00:09 2025 GMT
Not After : Nov 6 16:00:09 2025 GMT
Subject: CN=8bc72f392fcfd2341775ef3c6a64fe0b265d155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:c2:e5:4a:18:c1:9c:0b:5c:26:4c:56:98:
70:04:b3:4a:bd:4c:53:9d:87:1b:e4:8f:5f:9f:04:
93:55:1b:42:b4:7b:cd:66:c5:30:7e:af:6b:52:0a:
64:f6:4c:4f:41:bd:82:20:02:ac:cb:be:a3:70:25:
84:2b:df:94:14:d3:2d:e4:d3:8d:4a:be:5b:ac:fc:
b5:78:00:de:06:66:fe:03:0d:6a:fb:d8:ff:91:7d:
20:ee:ef:ae:2c:de:b2:e2:63:c9:9f:a3:a1:57:96:
15:05:1e:d9:eb:d9:46:de:55:c2:66:8a:80:0f:11:
e9:42:6f:1e:3c:bb:1d:81:2b:eb:7c:01:be:b8:86:
ac:a0:fd:4e:87:b9:15:94:1d:ed:f5:3c:52:12:bd:
5f:7f:44:d0:49:c5:b0:0a:13:cc:77:5f:d3:32:69:
9f:25:e5:be:7b:97:0d:fa:a2:a7:eb:fc:7b:22:c2:
45:81:47:1b:4c:00:54:da:33:e5:a4:8d:04:9c:fa:
94:2b:6b:69:d0:17:a0:e2:51:36:5b:b4:7f:86:f8:
03:c6:46:86:c5:a5:08:1d:5a:9b:bd:2c:1b:2c:5c:
6f:d7:3a:93:2f:69:1a:c9:f8:8e:bc:f9:60:9a:55:
7e:b6:b0:ca:8b:d5:c0:e7:06:63:b3:d9:14:c4:1c:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C7:2F:39:2F:CF:D2:34:17:75:EF:3C:6A:64:FE:0B:26:5D:15:5D
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d5:a5:e7:a7:75:57:c9:0b:3b:86:6b:b5:c2:48:28:aa:7c:
28:8e:72:b9:7e:a2:99:ab:ea:ef:80:58:db:4f:a4:b0:6e:87:
b2:99:42:a5:3b:76:74:d9:97:00:4e:8d:0b:33:96:44:65:e9:
b3:b5:a9:9a:e3:94:cc:a7:3d:52:9b:e9:b9:39:51:0e:34:1c:
75:68:9f:c4:a8:ff:c3:ff:02:e0:13:06:d3:00:6a:0c:26:4c:
c4:38:a9:e9:3d:bf:26:d7:07:07:26:7f:01:e8:52:a7:02:25:
aa:32:3d:a5:fd:86:23:6a:9f:2b:b3:2c:02:a2:fe:de:4a:05:
61:3a:00:38:8c:4e:8f:eb:c2:63:56:b4:e4:3d:80:9a:bc:db:
2d:4b:a0:b7:78:8b:bf:cb:6f:c9:7e:2b:a9:38:a0:55:94:c1:
ba:ce:cf:09:31:d7:b1:4b:06:fd:0e:2c:3a:9d:bf:06:7c:d2:
e9:c1:25:97:38:2d:21:00:9e:de:4e:52:d7:6a:70:5a:3f:c2:
50:0b:34:6b:4c:de:62:88:96:7e:de:21:6a:c6:7a:ee:6f:c9:
84:bb:2f:53:f6:ac:89:78:e2:76:e6:7a:09:3a:93:89:4c:44:
24:e8:b6:d0:5e:36:9d:71:c0:b4:a2:4a:63:ed:e8:a0:cd:ce:
17:13:03:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUvzpLTVlKJxxxvPhyDvceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjUxMTA1MTYwMDA5WhcNMjUxMTA2MTYwMDA5WjAzMTEwLwYDVQQD
Eyg4YmM3MmYzOTJmY2ZkMjM0MTc3NWVmM2M2YTY0ZmUwYjI2NWQxNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+LC5UoYwZwLXCZMVphwBLNKvUxT
nYcb5I9fnwSTVRtCtHvNZsUwfq9rUgpk9kxPQb2CIAKsy76jcCWEK9+UFNMt5NON
Sr5brPy1eADeBmb+Aw1q+9j/kX0g7u+uLN6y4mPJn6OhV5YVBR7Z69lG3lXCZoqA
DxHpQm8ePLsdgSvrfAG+uIasoP1Oh7kVlB3t9TxSEr1ff0TQScWwChPMd1/TMmmf
JeW+e5cN+qKn6/x7IsJFgUcbTABU2jPlpI0EnPqUK2tp0Beg4lE2W7R/hvgDxkaG
xaUIHVqbvSwbLFxv1zqTL2kayfiOvPlgmlV+trDKi9XA5wZjs9kUxBy6IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvHLzkvz9I0F3XvPGpk/gsmXRVdMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtWl56d1
V8kLO4ZrtcJIKKp8KI5yuX6imavq74BY20+ksG6HsplCpTt2dNmXAE6NCzOWRGXp
s7WpmuOUzKc9UpvpuTlRDjQcdWifxKj/w/8C4BMG0wBqDCZMxDip6T2/JtcHByZ/
AehSpwIlqjI9pf2GI2qfK7MsAqL+3koFYToAOIxOj+vCY1a05D2AmrzbLUugt3iL
v8tvyX4rqTigVZTBus7PCTHXsUsG/Q4sOp2/BnzS6cEllzgtIQCe3k5S12pwWj/C
UAs0a0zeYoiWft4hasZ67m/JhLsvU/asiXjiduZ6CTqTiUxEJOi20F42nXHAtKJK
Y+3ooM3OFxMDFw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:06 2025 by rpki-client