Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: HXk7PvUFvNkcbbep/Fb3rz96b5m9tI0vvfFbJSG/oaM=
Subject key identifier: 00:64:3A:C8:FF:38:69:9A:CE:FA:AA:25:E0:72:4D:B2:80:D1:21:9E
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 019A5187A2BEA6338850DE22C55CF337D46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 01:00:34 +0000
Manifest this update: Wed 05 Nov 2025 01:00:34 +0000
Manifest next update: Thu 06 Nov 2025 01:00:34 +0000
Files and hashes: 1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: YPC9csqld7+69G7KYExXFoGrQZDqrJryCSzVk7K1WYo=)
2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:a2:be:a6:33:88:50:de:22:c5:5c:f3:37:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Nov 5 01:00:34 2025 GMT
Not After : Nov 6 01:00:34 2025 GMT
Subject: CN=00643ac8ff38699acefaaa25e0724db280d1219e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:ee:ea:a7:c9:ff:77:b7:c0:c3:f0:1d:47:
cb:94:d9:58:d1:3a:79:48:81:c3:85:ab:c5:86:47:
c0:99:76:2e:7c:4b:c1:d6:91:83:78:2e:67:3c:85:
e9:b6:fb:b1:8b:fb:72:33:db:12:0c:88:26:b4:55:
2e:07:43:47:27:b9:41:51:02:73:df:0a:12:31:be:
f8:9d:86:d9:5f:0e:25:cd:e4:cb:10:8e:45:67:86:
b7:5d:4d:33:f0:a1:5c:59:5f:94:3a:06:ae:bf:27:
69:25:7f:84:35:54:85:8c:b5:26:2b:6a:59:fb:7b:
80:c0:a1:20:f4:50:63:36:c6:14:63:8b:fa:23:60:
34:36:d9:fc:62:0d:33:75:6f:9f:c9:06:9f:4c:ce:
41:91:da:72:0b:f8:64:e6:40:9b:d5:c5:fa:de:f4:
3b:b3:ca:55:7b:2e:d1:81:1d:e3:3b:08:06:7f:e0:
e8:92:d6:1e:06:d9:a2:2c:3c:8d:03:59:37:07:dd:
46:46:ec:5e:71:c0:f6:cd:fc:83:98:10:e4:a9:e1:
b6:ad:5d:73:3a:b3:63:34:35:cb:11:a6:db:8d:db:
3b:af:b0:0e:6d:51:a2:43:d1:cc:a2:ca:99:6a:16:
92:34:5c:9d:e7:b9:da:ad:f9:c4:dd:1d:9c:d3:a5:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:3A:C8:FF:38:69:9A:CE:FA:AA:25:E0:72:4D:B2:80:D1:21:9E
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1f:6b:4e:ff:0a:83:12:36:09:a8:a3:81:80:08:d0:4b:e5:
ff:ca:47:82:35:4e:bb:82:ee:df:69:d0:cb:b1:ab:0f:6a:56:
b0:7e:ae:6e:a5:10:55:77:6d:88:67:0b:9a:10:16:0d:a1:b1:
f5:ec:75:57:be:17:a3:6b:37:6e:3b:f3:62:b9:15:b3:d8:41:
ef:9f:a3:8d:46:da:d4:a8:94:d8:28:eb:50:57:11:98:83:aa:
e3:15:55:bc:f1:c3:8d:e6:7c:74:36:17:36:b1:22:ac:77:75:
bb:7d:f8:dc:e9:bd:31:39:c0:c8:2d:d8:17:7b:b9:65:2e:80:
eb:c2:92:34:99:b6:3f:ae:bf:d7:38:7f:ad:fe:6e:bf:1f:4f:
8a:fe:39:e6:3a:d9:08:7d:39:6c:26:ed:45:7e:64:fe:fe:17:
f5:18:ee:c5:6d:bf:00:45:b0:2f:07:68:cf:10:4f:0c:39:e0:
a8:fc:c7:11:7e:55:c9:fa:3a:10:1f:7c:56:8d:bf:4d:66:23:
cf:ca:69:cb:35:23:70:85:2c:53:a6:5d:96:63:85:74:60:56:
74:a3:72:78:77:7a:de:4e:28:37:a5:c4:88:1a:07:44:d5:8e:
34:e9:a3:4f:c5:8a:59:35:ee:78:45:b2:da:04:f7:cf:f8:e2:
15:d1:a7:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh6K+pjOIUN4ixVzzN9RuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm
MmE1NmEwHhcNMjUxMTA1MDEwMDM0WhcNMjUxMTA2MDEwMDM0WjAzMTEwLwYDVQQD
EygwMDY0M2FjOGZmMzg2OTlhY2VmYWFhMjVlMDcyNGRiMjgwZDEyMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdzu6qfJ/3e3wMPwHUfLlNlY0Tp5
SIHDhavFhkfAmXYufEvB1pGDeC5nPIXptvuxi/tyM9sSDIgmtFUuB0NHJ7lBUQJz
3woSMb74nYbZXw4lzeTLEI5FZ4a3XU0z8KFcWV+UOgauvydpJX+ENVSFjLUmK2pZ
+3uAwKEg9FBjNsYUY4v6I2A0Ntn8Yg0zdW+fyQafTM5BkdpyC/hk5kCb1cX63vQ7
s8pVey7RgR3jOwgGf+DoktYeBtmiLDyNA1k3B91GRuxeccD2zfyDmBDkqeG2rV1z
OrNjNDXLEabbjds7r7AObVGiQ9HMosqZahaSNFyd57narfnE3R2c06VZQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABkOsj/OGmazvqqJeByTbKA0SGeMB8GA1UdIwQY
MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt
NjNjZDNjODYxZDhlLzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl
LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVh9rTv8K
gxI2CaijgYAI0Evl/8pHgjVOu4Lu32nQy7GrD2pWsH6ubqUQVXdtiGcLmhAWDaGx
9ex1V74Xo2s3bjvzYrkVs9hB75+jjUba1KiU2CjrUFcRmIOq4xVVvPHDjeZ8dDYX
NrEirHd1u3343Om9MTnAyC3YF3u5ZS6A68KSNJm2P66/1zh/rf5uvx9Piv455jrZ
CH05bCbtRX5k/v4X9RjuxW2/AEWwLwdozxBPDDngqPzHEX5Vyfo6EB98Vo2/TWYj
z8ppyzUjcIUsU6ZdlmOFdGBWdKNyeHd63k4oN6XEiBoHRNWONOmjT8WKWTXueEWy
2gT3z/jiFdGn4g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:59 2025 by rpki-client