Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: dWN3LR+BVMQBHSRhWstABpoyYXLYVWLy3V9fWR5Z16A=
Subject key identifier: 1A:1E:2D:16:D8:32:98:1A:47:51:69:31:39:1E:0B:07:F2:86:AB:C9
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019A4F62AF3ACFABFE6FCAA2F2509092C665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0D17
Signing time: Tue 04 Nov 2025 15:00:58 +0000
Manifest this update: Tue 04 Nov 2025 15:00:58 +0000
Manifest next update: Wed 05 Nov 2025 15:00:58 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: saUgXRBlVBHuhw37xQMBghWoRFrk7l5O6b/rFcpERzY=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:af:3a:cf:ab:fe:6f:ca:a2:f2:50:90:92:c6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Nov 4 15:00:58 2025 GMT
Not After : Nov 5 15:00:58 2025 GMT
Subject: CN=1a1e2d16d832981a47516931391e0b07f286abc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:98:73:cb:e1:6a:65:9f:d2:af:93:fb:63:
59:b9:08:01:08:1b:ae:11:35:5f:16:8c:d6:2f:bc:
3a:29:3c:9d:a5:a7:e3:26:31:aa:2b:77:2d:3b:f5:
f3:cb:4a:59:7e:12:30:f4:bd:b2:96:00:3f:ec:72:
44:72:97:89:8a:db:1a:19:07:ff:2e:d9:7a:cc:cf:
c8:0e:13:c0:6f:ff:ef:a7:08:2e:f0:f8:b6:d0:1e:
48:cb:5c:3c:ce:43:6c:f9:cf:21:88:8b:65:15:ff:
26:12:9a:a1:2a:1c:3f:0d:81:ad:3d:f8:7b:6d:35:
e7:3d:c2:7a:2a:ec:11:e2:d7:cc:19:d2:99:e7:5c:
0e:50:0b:69:49:3f:37:29:ee:4d:4f:fa:67:8e:07:
16:f6:5d:81:5d:80:e7:b1:28:1f:6c:f1:5e:06:7d:
cf:01:62:a6:35:88:87:66:14:6f:73:61:b6:70:cf:
87:d4:0b:b4:04:89:28:df:13:02:83:ce:6e:fe:f3:
52:28:1e:76:d3:14:5c:7e:2d:a6:78:aa:d8:8b:27:
52:d1:30:fc:76:ec:f7:75:ae:4c:d9:69:3b:86:0a:
46:2a:7f:aa:8b:67:af:9d:6a:42:39:a0:65:3d:09:
8c:34:ef:78:17:55:2c:a8:6b:63:6f:47:5c:eb:79:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1E:2D:16:D8:32:98:1A:47:51:69:31:39:1E:0B:07:F2:86:AB:C9
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d1:ee:9d:b0:50:50:b5:c0:a1:5c:02:d0:4d:60:74:e9:e0:
53:c3:7e:a6:96:e0:18:c9:5f:51:42:b7:ce:b2:fd:e4:e9:ad:
48:a2:59:92:87:2e:64:6a:3f:3e:4c:29:d4:a1:0f:19:4d:f0:
5d:aa:c1:3f:a3:75:5a:4d:dc:9e:db:07:27:cc:20:0f:d6:49:
7d:8e:2e:c5:6d:c8:57:ab:94:e2:5e:0d:05:d0:fa:f8:9c:78:
d3:32:d7:93:1b:7e:ba:54:81:b5:dd:c7:00:8d:8f:24:cc:83:
6e:fe:c4:78:7e:f6:27:ff:19:4f:74:56:69:07:9a:1a:1a:e7:
b8:36:33:bd:15:2b:54:94:ad:28:b0:bc:06:55:ee:a9:6c:c8:
52:74:b9:4a:bb:eb:7f:1d:c5:c2:6b:04:ff:48:32:83:dd:a6:
84:81:e2:32:0e:10:8f:88:42:2e:72:f4:30:9c:f1:30:74:02:
aa:3d:2b:65:d6:17:c7:2f:bb:3e:16:0f:2f:c9:e2:aa:22:d3:
77:5c:1d:ab:bb:1d:c3:9d:02:10:b9:63:84:7e:04:92:26:d8:
4f:98:49:91:04:2f:e7:78:de:f0:69:96:a8:c1:34:f0:14:b0:
85:c5:6e:e6:bb:52:e2:55:3f:4a:36:ee:2f:ff:b4:d5:8f:c7:
df:9e:be:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYq86z6v+b8qi8lCQksZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw
YTI5YzAwHhcNMjUxMTA0MTUwMDU4WhcNMjUxMTA1MTUwMDU4WjAzMTEwLwYDVQQD
EygxYTFlMmQxNmQ4MzI5ODFhNDc1MTY5MzEzOTFlMGIwN2YyODZhYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUWYc8vhamWf0q+T+2NZuQgBCBuu
ETVfFozWL7w6KTydpafjJjGqK3ctO/Xzy0pZfhIw9L2ylgA/7HJEcpeJitsaGQf/
Ltl6zM/IDhPAb//vpwgu8Pi20B5Iy1w8zkNs+c8hiItlFf8mEpqhKhw/DYGtPfh7
bTXnPcJ6KuwR4tfMGdKZ51wOUAtpST83Ke5NT/pnjgcW9l2BXYDnsSgfbPFeBn3P
AWKmNYiHZhRvc2G2cM+H1Au0BIko3xMCg85u/vNSKB520xRcfi2meKrYiydS0TD8
duz3da5M2Wk7hgpGKn+qi2evnWpCOaBlPQmMNO94F1UsqGtjb0dc63kexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoeLRbYMpgaR1FpMTkeCwfyhqvJMB8GA1UdIwQY
MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt
NDJhZTc1Yjc5NTdkLzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk
LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdHunbBQ
ULXAoVwC0E1gdOngU8N+ppbgGMlfUUK3zrL95OmtSKJZkocuZGo/Pkwp1KEPGU3w
XarBP6N1Wk3cntsHJ8wgD9ZJfY4uxW3IV6uU4l4NBdD6+Jx40zLXkxt+ulSBtd3H
AI2PJMyDbv7EeH72J/8ZT3RWaQeaGhrnuDYzvRUrVJStKLC8BlXuqWzIUnS5Srvr
fx3FwmsE/0gyg92mhIHiMg4Qj4hCLnL0MJzxMHQCqj0rZdYXxy+7PhYPL8niqiLT
d1wdq7sdw50CELljhH4EkibYT5hJkQQv53je8GmWqME08BSwhcVu5rtS4lU/Sjbu
L/+01Y/H356+2Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:36 2025 by rpki-client