Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: TBJQxAZY8qk6K5ROLXXTguq4H9Atsp4Eb2/bwn/Nreg=
Subject key identifier: 75:A9:8B:DB:7D:FA:4F:A8:5E:13:51:AA:1B:7C:11:4B:E1:6D:85:9B
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 019A4EF4875327830FEDB40E976C43670357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: lcEmTAQCd67aaM8HYRr65TIzFnja96ipXCoGQ9NKSRI=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:87:53:27:83:0f:ed:b4:0e:97:6c:43:67:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=75a98bdb7dfa4fa85e1351aa1b7c114be16d859b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:25:23:4c:8c:75:43:0f:6d:87:3d:38:7f:
9b:d5:8b:b9:de:a2:30:77:9d:12:ed:82:cc:c6:24:
68:44:3f:e5:28:9a:ee:b2:46:b1:c8:92:ac:f2:0c:
91:75:70:9d:ac:29:d4:d3:cd:f7:5f:50:30:9e:da:
33:54:d2:d0:f1:26:b2:02:3f:69:40:15:9d:ee:1b:
cd:97:57:e0:0d:08:52:ee:06:7b:56:6e:6c:f2:d3:
a8:49:3f:aa:5d:6c:81:fc:a1:32:64:f1:0c:ba:09:
85:17:e8:b0:ae:7a:6b:f0:7f:28:3f:dc:2a:bb:04:
50:5a:bf:45:5e:8c:79:3f:b2:2e:49:fe:34:8f:6a:
67:ec:75:8d:de:48:73:32:51:6c:a7:67:50:32:cd:
f5:29:aa:91:ae:28:40:1f:0d:ec:d0:1c:46:ed:52:
ba:b3:69:50:d5:d5:10:0a:c4:66:aa:a9:17:c3:a3:
e0:33:38:db:56:6f:b6:5c:fa:a7:e1:ae:b9:53:aa:
ed:0b:a8:83:71:16:c6:bb:a8:39:7e:9a:ab:a6:f0:
d6:23:c2:e4:e8:de:67:aa:fb:1b:88:49:f7:e8:cf:
70:bb:c7:c2:b7:97:a7:cd:70:76:d6:6c:4a:1c:01:
e2:8b:ac:58:4a:13:d6:29:c7:73:23:2f:10:20:9b:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A9:8B:DB:7D:FA:4F:A8:5E:13:51:AA:1B:7C:11:4B:E1:6D:85:9B
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:20:c1:3c:d2:3e:c1:c0:70:90:9f:b0:3e:29:c7:de:aa:cf:
52:f4:64:e9:55:a2:e6:a4:de:7c:7f:f0:5c:c2:5d:87:56:9e:
dd:24:02:5a:86:f6:b1:46:27:60:7e:fc:2c:61:30:7c:f9:82:
0e:20:e3:22:92:d7:4b:12:e1:20:47:0f:c7:23:44:84:1a:86:
92:c5:9e:5c:39:9f:2b:ff:2f:be:1e:28:71:41:a4:87:d6:56:
2a:a6:e1:08:bd:2e:17:f4:b2:81:3a:96:ee:0f:9f:09:66:b7:
37:60:b8:91:b6:0d:d1:f2:69:58:98:4b:9c:3c:ae:d9:9b:a2:
b0:ba:a8:87:02:fc:89:3c:7d:d8:17:32:76:2a:85:84:8f:e2:
11:48:ab:6f:de:94:72:09:ef:60:15:55:8b:5a:cf:bb:a9:45:
7b:ec:f4:45:ef:80:24:69:42:49:66:f1:17:2f:f3:70:32:89:
2b:f8:45:53:46:0b:34:13:c3:c8:35:86:db:68:de:26:52:bb:
dd:1b:22:2a:d2:91:9d:73:34:10:b4:59:72:5f:21:f1:c0:f2:
2e:62:06:a9:c2:df:9e:34:27:66:43:5f:4a:d5:a7:d6:a5:03:
12:41:32:d1:8c:8d:b2:1d:df:f1:d0:98:8e:49:be:15:bb:89:
e0:eb:9a:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9IdTJ4MP7bQOl2xDZwNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDcwMDJiZjNhMmVhY2ZjODgxZDVlMWEwMjExMDk4YzY2
OTk1NmMwHhcNMjUxMTA0MTMwMDM5WhcNMjUxMTA1MTMwMDM5WjAzMTEwLwYDVQQD
Eyg3NWE5OGJkYjdkZmE0ZmE4NWUxMzUxYWExYjdjMTE0YmUxNmQ4NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi4lI0yMdUMPbYc9OH+b1Yu53qIw
d50S7YLMxiRoRD/lKJruskaxyJKs8gyRdXCdrCnU0833X1AwntozVNLQ8SayAj9p
QBWd7hvNl1fgDQhS7gZ7Vm5s8tOoST+qXWyB/KEyZPEMugmFF+iwrnpr8H8oP9wq
uwRQWr9FXox5P7IuSf40j2pn7HWN3khzMlFsp2dQMs31KaqRrihAHw3s0BxG7VK6
s2lQ1dUQCsRmqqkXw6PgMzjbVm+2XPqn4a65U6rtC6iDcRbGu6g5fpqrpvDWI8Lk
6N5nqvsbiEn36M9wu8fCt5enzXB21mxKHAHii6xYShPWKcdzIy8QIJtFUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWpi9t9+k+oXhNRqht8EUvhbYWbMB8GA1UdIwQY
MBaAFP3XACvzourPyIHV4aAhEJjGaZVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWIt
MjE2MWZmNDc4ODFjLzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWItMjE2MWZmNDc4ODFj
LzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiDBPNI+
wcBwkJ+wPinH3qrPUvRk6VWi5qTefH/wXMJdh1ae3SQCWob2sUYnYH78LGEwfPmC
DiDjIpLXSxLhIEcPxyNEhBqGksWeXDmfK/8vvh4ocUGkh9ZWKqbhCL0uF/SygTqW
7g+fCWa3N2C4kbYN0fJpWJhLnDyu2ZuisLqohwL8iTx92BcydiqFhI/iEUirb96U
cgnvYBVVi1rPu6lFe+z0Re+AJGlCSWbxFy/zcDKJK/hFU0YLNBPDyDWG22jeJlK7
3RsiKtKRnXM0ELRZcl8h8cDyLmIGqcLfnjQnZkNfStWn1qUDEkEy0YyNsh3f8dCY
jkm+FbuJ4OuaeA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:53 2025 by rpki-client