Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: s/1Y3A4+6hyftdJHd1ps5lIz61mvlJVB6Usw0XIg6ak=
Subject key identifier: 78:66:03:FD:BE:69:EB:F7:B6:17:5C:D5:80:AD:7A:39:11:C5:55:FF
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 019A50E427ABD63542E7A4364E325F251A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 03AC
Signing time: Tue 04 Nov 2025 22:02:00 +0000
Manifest this update: Tue 04 Nov 2025 22:02:00 +0000
Manifest next update: Wed 05 Nov 2025 22:02:00 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: CnntpyLyCVOGP8szqacHWsDFbzD5IZ1IHlm/5pwT080=)
2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:27:ab:d6:35:42:e7:a4:36:4e:32:5f:25:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Nov 4 22:02:00 2025 GMT
Not After : Nov 5 22:02:00 2025 GMT
Subject: CN=786603fdbe69ebf7b6175cd580ad7a3911c555ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:f5:f4:15:96:30:ce:98:4b:3d:52:7b:25:
ae:ee:c8:63:07:57:88:c7:f5:77:69:5a:02:e3:7e:
8b:f7:3f:49:d2:0a:94:e5:e3:ff:13:96:92:d0:76:
c8:06:b9:1e:74:61:e1:fd:d7:b2:95:f1:5e:4d:8d:
61:47:f4:4c:f0:e1:93:8e:c5:7c:08:bd:28:ee:00:
98:b9:59:40:05:a2:78:44:23:5a:87:9b:31:94:38:
97:94:4d:c8:08:9f:f4:9c:bd:98:81:76:ce:37:15:
ae:33:c6:bd:2e:c5:e6:fe:b3:f0:94:85:b9:60:8b:
d1:57:b4:da:32:92:65:66:52:97:5d:9e:12:8c:f0:
92:04:29:1a:63:8b:98:4a:8f:c2:ea:73:a2:3b:d2:
7d:b7:8b:b4:1c:1b:22:6a:b1:4a:47:dd:e2:31:3e:
06:96:04:be:0c:3d:e3:61:32:1e:63:04:c2:98:67:
c1:01:16:5f:38:e8:98:f0:43:86:37:0f:0a:09:1c:
ca:eb:d9:94:cf:24:2c:ed:3a:c4:2d:14:bf:b2:21:
5d:a4:60:21:1c:ef:54:f8:a7:9a:2c:0c:70:95:90:
50:fb:e4:d9:c8:50:f8:a0:ee:40:be:8b:b4:70:77:
42:7f:30:b1:e8:f8:be:a1:71:4f:30:8c:3d:81:61:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:03:FD:BE:69:EB:F7:B6:17:5C:D5:80:AD:7A:39:11:C5:55:FF
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a5:cb:9b:26:c7:cd:28:97:49:4a:da:c3:49:31:25:da:98:
da:44:bd:18:6a:ee:f7:75:1f:23:d7:68:1d:0c:4a:08:95:76:
f7:1f:fd:88:44:47:06:59:54:d0:00:73:2d:c2:99:8c:ca:85:
73:d7:ba:a7:00:b0:a8:9f:71:c3:d4:0b:1a:e8:31:ea:c6:10:
96:d5:67:5b:2e:7d:cf:99:1e:2b:27:96:80:05:01:51:ca:58:
b9:9a:ec:1a:88:ef:a8:55:29:73:d5:d9:e6:68:67:5f:4b:02:
3c:6c:8d:24:2c:0c:68:91:9f:1a:4a:5b:c5:15:8c:a0:4a:a4:
bd:06:ef:7b:92:66:d8:a7:1d:ee:c2:3c:df:44:e1:4b:b0:b6:
bd:a9:89:8d:8b:39:b4:8b:30:e9:d1:ff:58:a4:89:b8:db:26:
64:c7:fe:52:22:98:22:18:19:a7:69:7e:6f:e7:76:5f:32:7b:
b4:c3:05:29:5f:0f:42:21:dd:cc:b1:18:33:c9:bf:b5:12:82:
7f:3f:5a:ee:53:33:7e:e3:d7:3d:5d:96:2d:c7:64:cd:59:b9:
12:18:9f:f0:06:39:12:18:24:e1:70:4a:2b:cf:ce:85:2c:b0:
b6:86:d5:61:fa:c1:03:65:61:27:8f:ce:2d:39:8a:36:42:78:
62:5b:8e:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5Cer1jVC56Q2TjJfJRoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz
MzFiN2YwHhcNMjUxMTA0MjIwMjAwWhcNMjUxMTA1MjIwMjAwWjAzMTEwLwYDVQQD
Eyg3ODY2MDNmZGJlNjllYmY3YjYxNzVjZDU4MGFkN2EzOTExYzU1NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXT19BWWMM6YSz1SeyWu7shjB1eI
x/V3aVoC436L9z9J0gqU5eP/E5aS0HbIBrkedGHh/deylfFeTY1hR/RM8OGTjsV8
CL0o7gCYuVlABaJ4RCNah5sxlDiXlE3ICJ/0nL2YgXbONxWuM8a9LsXm/rPwlIW5
YIvRV7TaMpJlZlKXXZ4SjPCSBCkaY4uYSo/C6nOiO9J9t4u0HBsiarFKR93iMT4G
lgS+DD3jYTIeYwTCmGfBARZfOOiY8EOGNw8KCRzK69mUzyQs7TrELRS/siFdpGAh
HO9U+KeaLAxwlZBQ++TZyFD4oO5Avou0cHdCfzCx6Pi+oXFPMIw9gWE0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhmA/2+aev3thdc1YCtejkRxVX/MB8GA1UdIwQY
MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt
ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2
LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaXLmybH
zSiXSUraw0kxJdqY2kS9GGru93UfI9doHQxKCJV29x/9iERHBllU0ABzLcKZjMqF
c9e6pwCwqJ9xw9QLGugx6sYQltVnWy59z5keKyeWgAUBUcpYuZrsGojvqFUpc9XZ
5mhnX0sCPGyNJCwMaJGfGkpbxRWMoEqkvQbve5Jm2Kcd7sI830ThS7C2vamJjYs5
tIsw6dH/WKSJuNsmZMf+UiKYIhgZp2l+b+d2XzJ7tMMFKV8PQiHdzLEYM8m/tRKC
fz9a7lMzfuPXPV2WLcdkzVm5Ehif8AY5Ehgk4XBKK8/OhSywtobVYfrBA2VhJ4/O
LTmKNkJ4YluOeg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:10 2025 by rpki-client