Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: akklf+wDylEcNKD5+iZQCF1y8U5Pf4h1JCbFhT+axx0=
Subject key identifier: C4:D4:F4:19:BD:9E:36:03:07:86:13:66:A7:81:7B:60:CF:20:6F:91
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019A4EF4B18762054935EFC9B657C1C36084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0DC8
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: pJbnKg2i5Ol8GZQIewoaxhCc0PPbZeB6q7xtduhy1iE=)
2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b1:87:62:05:49:35:ef:c9:b6:57:c1:c3:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=c4d4f419bd9e360307861366a7817b60cf206f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:7c:0b:a3:6e:9c:ca:e6:bd:b2:a5:44:d0:
af:bd:cd:22:c8:92:50:70:cb:33:7d:fa:7a:5c:a2:
7b:db:50:87:69:cb:dc:87:10:78:fc:90:f2:63:c1:
44:ce:57:2a:db:47:92:cf:bc:86:8c:29:cb:c2:ed:
46:68:e8:2f:cc:1f:1f:25:54:f2:35:65:58:66:70:
fa:40:6f:95:9b:c2:ef:6b:70:8a:9a:89:a8:38:1e:
8c:83:1d:92:ec:7c:1b:9c:d7:95:fb:6b:53:da:37:
f4:80:48:89:57:d0:93:05:ec:0a:7b:c9:7d:47:ec:
7d:34:2d:02:e4:de:e5:f9:b8:ed:24:18:93:a5:fc:
67:87:c9:06:8d:05:4f:e2:4d:24:2b:78:32:6c:08:
eb:69:35:d3:53:1b:00:f1:54:73:64:64:ec:1f:0b:
b5:4b:af:03:37:57:5e:c9:50:fe:1f:5d:58:b7:c1:
f6:4f:dd:78:c0:4e:b0:66:3f:93:86:23:e0:b4:04:
36:68:88:03:46:b5:2a:c1:4d:d3:e7:a2:51:2c:b9:
a5:f1:2f:de:62:b9:18:f8:92:e9:97:98:30:e8:80:
e4:5a:31:3f:e1:3b:5c:d5:da:89:ba:52:0d:0f:df:
a5:ed:10:82:2e:7f:26:0a:cb:87:38:cb:97:b9:5a:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:F4:19:BD:9E:36:03:07:86:13:66:A7:81:7B:60:CF:20:6F:91
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9a:92:6b:f6:47:bb:08:34:43:f9:2f:74:61:70:3c:73:79:
29:da:1f:f4:b7:96:a4:95:11:1f:12:72:67:56:ab:c6:ed:c0:
41:4e:5f:f0:f3:55:fd:5d:42:2b:94:08:dc:bb:b6:16:04:3a:
45:5e:82:77:8e:b7:7f:0f:73:70:b9:34:de:87:8c:bd:59:c8:
44:af:dd:4e:c4:c9:b4:48:95:42:9e:5a:24:f2:38:03:1e:e0:
88:96:4d:16:af:22:4d:e1:23:4c:4a:4b:90:be:3c:26:1a:bf:
31:a0:32:76:bf:76:b5:2d:7d:ca:9e:b9:10:bc:5e:be:bd:5c:
3d:6c:b8:14:d0:3c:ad:27:4b:c9:53:86:78:78:89:2d:2f:ae:
60:2e:2d:6f:18:a6:a7:90:00:17:00:40:64:1d:ed:43:a7:da:
f4:4a:f7:ce:bd:84:87:eb:84:3e:d6:75:03:69:09:d8:9b:99:
59:0e:c3:cd:84:4d:b0:51:2b:81:79:ed:13:bd:cb:dc:99:17:
47:0c:73:84:85:65:ae:16:8d:c3:85:64:db:cb:c6:c9:d5:9d:
b4:94:1b:14:bf:48:f3:28:42:13:c0:10:1b:44:fd:43:44:b6:
1b:65:b6:8c:66:33:03:06:60:ed:c9:f8:eb:2e:c2:51:df:17:
84:78:5f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9LGHYgVJNe/JtlfBw2CEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTFlNWI1OGRhMzI2ZTY1NGU5OTRmZWYyMTk1Mjc2NzU5
NTc5YmUwHhcNMjUxMTA0MTMwMDUwWhcNMjUxMTA1MTMwMDUwWjAzMTEwLwYDVQQD
EyhjNGQ0ZjQxOWJkOWUzNjAzMDc4NjEzNjZhNzgxN2I2MGNmMjA2ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgp8C6NunMrmvbKlRNCvvc0iyJJQ
cMszffp6XKJ721CHacvchxB4/JDyY8FEzlcq20eSz7yGjCnLwu1GaOgvzB8fJVTy
NWVYZnD6QG+Vm8Lva3CKmomoOB6Mgx2S7HwbnNeV+2tT2jf0gEiJV9CTBewKe8l9
R+x9NC0C5N7l+bjtJBiTpfxnh8kGjQVP4k0kK3gybAjraTXTUxsA8VRzZGTsHwu1
S68DN1deyVD+H11Yt8H2T914wE6wZj+ThiPgtAQ2aIgDRrUqwU3T56JRLLml8S/e
YrkY+JLpl5gw6IDkWjE/4Ttc1dqJulIND9+l7RCCLn8mCsuHOMuXuVqc3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTU9Bm9njYDB4YTZqeBe2DPIG+RMB8GA1UdIwQY
MBaAFA+R5bWNoybmVOmU/vIZUnZ1lXm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEt
ODI0Y2NlZmQ5YzgxLzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEtODI0Y2NlZmQ5Yzgx
LzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJqSa/ZH
uwg0Q/kvdGFwPHN5Kdof9LeWpJURHxJyZ1arxu3AQU5f8PNV/V1CK5QI3Lu2FgQ6
RV6Cd463fw9zcLk03oeMvVnIRK/dTsTJtEiVQp5aJPI4Ax7giJZNFq8iTeEjTEpL
kL48Jhq/MaAydr92tS19yp65ELxevr1cPWy4FNA8rSdLyVOGeHiJLS+uYC4tbxim
p5AAFwBAZB3tQ6fa9Er3zr2Eh+uEPtZ1A2kJ2JuZWQ7DzYRNsFErgXntE73L3JkX
RwxzhIVlrhaNw4Vk28vGydWdtJQbFL9I8yhCE8AQG0T9Q0S2G2W2jGYzAwZg7cn4
6y7CUd8XhHhf5w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:00 2025 by rpki-client