Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File: Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier: 41A8MKrPkpuKctndOIqI6dhyQRVF3PPaJXSCcOQ/lhE=
Subject key identifier: 18:9C:43:C0:D9:B5:3F:0D:EC:AB:D3:09:DC:96:80:59:AB:93:50:5D
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019A4DE230260B5F258B1F2225F571371C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 08:01:00 +0000
Manifest this update: Tue 04 Nov 2025 08:01:00 +0000
Manifest next update: Wed 05 Nov 2025 08:01:00 +0000
Files and hashes: 1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=)
2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: JHXxuaYfV8I9wLcpcxCVEfHdHW186LleCJhvUS/Vp2Y=)
3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=)
4: J2u59yFgmuGdudgIENAeqcAIi5A.roa (hash: 1czvcte4D1PcVrf098gt6GCTblFnQnU2WnM5dPM5CwQ=)
5: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=)
6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=)
7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=)
8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=)
9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:30:26:0b:5f:25:8b:1f:22:25:f5:71:37:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Nov 4 08:01:00 2025 GMT
Not After : Nov 5 08:01:00 2025 GMT
Subject: CN=189c43c0d9b53f0decabd309dc968059ab93505d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:09:6c:82:7d:05:4c:ac:2f:90:39:be:4d:
0e:3e:5f:87:40:8a:19:d2:e2:ee:3f:c5:d4:3b:44:
72:97:18:7c:18:cb:2b:05:69:81:97:ad:1f:d5:c4:
ee:bf:9b:44:e5:e6:bb:cf:bd:7f:3c:82:0e:c3:ff:
20:8f:a7:20:df:c8:85:f2:ab:22:44:71:c4:6e:e4:
54:27:57:31:79:fe:f9:9b:8d:3b:15:09:b4:a6:02:
e9:44:59:3d:aa:b7:e3:78:4a:a2:c8:19:2c:d7:d8:
06:7d:2c:cf:89:f3:4b:65:d6:f8:05:dd:a4:6b:c8:
94:cb:cd:6f:72:d4:2f:c6:ed:ac:ad:a9:52:8f:90:
e3:cb:39:98:d9:01:2c:94:d8:94:e7:f3:76:40:9c:
d0:15:4f:74:bf:23:46:ed:83:5d:02:4c:da:5b:5d:
f2:95:16:50:e8:e4:e2:af:f7:89:32:3e:3a:bf:e1:
a8:24:27:91:89:f5:fc:bb:02:18:d6:f6:fc:6e:07:
b3:60:b7:9e:69:78:33:96:d7:93:bb:57:48:8d:22:
c7:d7:fc:75:3d:16:e1:b0:7b:f0:e8:35:db:1e:6d:
49:2d:54:97:88:ab:93:1c:89:cc:91:f9:48:37:86:
07:42:06:7e:e7:3e:40:f0:0f:a4:ff:ee:71:4a:53:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9C:43:C0:D9:B5:3F:0D:EC:AB:D3:09:DC:96:80:59:AB:93:50:5D
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4f:5c:0b:93:69:bf:f8:5e:2b:f7:cd:7a:a1:5b:f4:77:42:
ad:e4:b2:48:68:bd:a4:f9:63:d6:50:ed:b0:37:e4:21:37:71:
70:6c:e1:76:91:51:9b:01:b7:e3:98:aa:87:b9:07:49:1c:55:
f9:0a:bb:2c:47:ed:df:77:a7:4d:7e:ba:b7:8b:50:9c:65:f2:
48:e0:8e:d7:10:1e:ef:52:b4:70:bf:ce:89:3a:c6:05:f8:da:
89:36:64:ac:6d:29:f0:b6:bb:ca:67:5d:6c:33:11:f6:21:98:
7b:57:83:53:bc:b7:b5:5b:84:48:cc:7d:96:36:7e:1f:58:60:
54:64:c0:f7:7d:63:b6:1a:33:30:8d:78:49:38:1d:93:84:74:
c1:06:96:51:74:2a:ae:4c:58:db:9c:5b:c5:07:8b:c0:c5:8f:
09:ad:48:3e:c7:85:f3:92:2d:26:55:cd:56:28:74:61:c1:a9:
07:af:4b:08:47:9a:91:b1:45:31:ba:79:75:77:4f:8c:f7:e0:
21:42:64:fd:fe:63:1e:96:d1:46:5f:c1:fe:2a:da:13:49:b6:
04:37:1e:23:f0:ad:0f:31:4b:0f:6c:31:75:45:50:fc:da:9d:
ff:28:be:eb:20:79:ea:0f:61:0e:fe:3d:a6:29:e6:a9:6f:c6:
2b:36:2b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4jAmC18lix8iJfVxNxwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5
YzlhMjMwHhcNMjUxMTA0MDgwMTAwWhcNMjUxMTA1MDgwMTAwWjAzMTEwLwYDVQQD
EygxODljNDNjMGQ5YjUzZjBkZWNhYmQzMDlkYzk2ODA1OWFiOTM1MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg44JbIJ9BUysL5A5vk0OPl+HQIoZ
0uLuP8XUO0Rylxh8GMsrBWmBl60f1cTuv5tE5ea7z71/PIIOw/8gj6cg38iF8qsi
RHHEbuRUJ1cxef75m407FQm0pgLpRFk9qrfjeEqiyBks19gGfSzPifNLZdb4Bd2k
a8iUy81vctQvxu2sralSj5DjyzmY2QEslNiU5/N2QJzQFU90vyNG7YNdAkzaW13y
lRZQ6OTir/eJMj46v+GoJCeRifX8uwIY1vb8bgezYLeeaXgzlteTu1dIjSLH1/x1
PRbhsHvw6DXbHm1JLVSXiKuTHInMkflIN4YHQgZ+5z5A8A+k/+5xSlNANQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBicQ8DZtT8N7KvTCdyWgFmrk1BdMB8GA1UdIwQY
MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt
YzAxZjgwYTFjODA1LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1
LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoU9cC5Np
v/heK/fNeqFb9HdCreSySGi9pPlj1lDtsDfkITdxcGzhdpFRmwG345iqh7kHSRxV
+Qq7LEft33enTX66t4tQnGXySOCO1xAe71K0cL/OiTrGBfjaiTZkrG0p8La7ymdd
bDMR9iGYe1eDU7y3tVuESMx9ljZ+H1hgVGTA931jthozMI14STgdk4R0wQaWUXQq
rkxY25xbxQeLwMWPCa1IPseF85ItJlXNVih0YcGpB69LCEeakbFFMbp5dXdPjPfg
IUJk/f5jHpbRRl/B/iraE0m2BDceI/CtDzFLD2wxdUVQ/Nqd/yi+6yB56g9hDv49
pinmqW/GKzYrLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:30 2025 by rpki-client