Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: rgxMgnq2wH4aeLaSTZMgsnu/kftehxCLANYV4wzGATY=
Subject key identifier: 68:37:2A:32:FB:95:9C:76:CC:BE:99:5E:BA:FE:62:CD:89:B9:F3:9C
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019A4EF51E40895E38F30E1F12C4A5DBCE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 144C
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: 0iuX8yHqCeqIwbg3Fkdj02iFKC99zu+vygrgX9jzRG8=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1e:40:89:5e:38:f3:0e:1f:12:c4:a5:db:ce:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=68372a32fb959c76ccbe995ebafe62cd89b9f39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:7e:fd:96:df:b2:0f:41:68:28:f6:ed:ee:
06:26:6d:56:b2:c4:8d:f6:97:d3:62:0b:8f:37:99:
6d:27:1a:91:11:ec:84:26:10:51:80:0c:0e:81:d6:
14:0b:60:e6:c5:34:37:51:05:a3:51:5f:ce:b1:c3:
8e:21:7f:79:b7:68:14:98:c2:4a:60:92:6c:6d:5b:
f8:2c:cf:89:e4:95:fa:cb:79:ec:98:a9:13:57:aa:
90:a4:bc:57:b5:cc:f4:d5:ac:d9:3c:84:e2:34:48:
86:1e:df:f3:c7:88:98:29:cb:97:c9:a0:21:95:4b:
7d:ec:03:f5:7f:1e:eb:c5:b8:73:e3:18:11:ed:70:
b9:e1:49:57:6d:ad:c8:82:25:ba:d8:dc:8a:4f:44:
b4:4f:a8:2c:b3:0b:26:d8:4b:7f:cc:8c:68:0b:69:
c4:9a:cb:fa:f5:bd:94:54:df:d4:7b:9b:a6:67:f7:
0e:db:bc:0f:20:96:9a:24:51:7d:9d:83:6c:90:65:
b2:6b:e2:a9:c8:1e:6e:27:17:ee:6b:69:3f:96:c0:
60:82:70:f9:32:c5:fe:06:57:c3:5d:36:b8:e1:20:
e7:b6:97:0a:53:1b:7f:24:88:47:8f:a4:81:7a:c4:
a0:f6:42:80:ac:af:c2:13:3b:e8:ef:cd:9b:7c:c3:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:2A:32:FB:95:9C:76:CC:BE:99:5E:BA:FE:62:CD:89:B9:F3:9C
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:93:cd:a2:21:81:c7:51:a0:ad:d6:59:c2:9a:fb:e4:73:20:
3a:6b:6d:e3:2d:ee:8a:b3:92:5e:2a:0f:04:08:7b:b3:b5:2f:
01:d4:85:98:ff:78:2b:7e:a5:68:b2:f8:02:3c:e7:cf:b3:fb:
09:0d:1d:10:e1:d5:e0:20:31:46:c3:5c:95:b8:0c:73:a9:02:
aa:1b:d1:65:f1:0b:7c:f8:4e:c6:4f:e8:d7:fc:ef:23:9d:18:
2b:f7:33:dd:b1:fb:3f:92:ae:59:1b:85:23:14:40:49:a2:c2:
7e:2a:11:75:6a:82:f5:90:9e:f6:66:1e:a3:81:26:e2:df:8d:
c8:84:87:46:60:f6:18:99:4c:39:e4:60:44:15:2e:36:4a:b9:
af:3f:6d:e4:aa:c9:4d:d0:be:3a:b0:04:e8:95:c0:94:0f:4b:
0c:8e:1c:83:3b:e8:9b:9b:0c:96:cd:65:d4:27:b2:2c:5f:0f:
23:63:b6:f4:f1:84:fe:db:17:fc:0f:4c:5c:44:ff:cf:26:24:
73:f7:71:09:29:b6:59:8e:ea:20:e6:6c:de:a4:76:38:fc:c6:
22:77:ee:37:3b:ef:f0:86:1a:d2:46:bd:e0:dd:f0:c3:35:ae:
cd:8a:58:3d:5e:52:c9:29:81:c1:35:10:15:14:31:33:c9:c4:
df:78:f1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9R5AiV448w4fEsSl285NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0
ODg2ZTAwHhcNMjUxMTA0MTMwMTE4WhcNMjUxMTA1MTMwMTE4WjAzMTEwLwYDVQQD
Eyg2ODM3MmEzMmZiOTU5Yzc2Y2NiZTk5NWViYWZlNjJjZDg5YjlmMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqex+/Zbfsg9BaCj27e4GJm1WssSN
9pfTYguPN5ltJxqREeyEJhBRgAwOgdYUC2DmxTQ3UQWjUV/OscOOIX95t2gUmMJK
YJJsbVv4LM+J5JX6y3nsmKkTV6qQpLxXtcz01azZPITiNEiGHt/zx4iYKcuXyaAh
lUt97AP1fx7rxbhz4xgR7XC54UlXba3IgiW62NyKT0S0T6gsswsm2Et/zIxoC2nE
msv69b2UVN/Ue5umZ/cO27wPIJaaJFF9nYNskGWya+KpyB5uJxfua2k/lsBggnD5
MsX+BlfDXTa44SDntpcKUxt/JIhHj6SBesSg9kKArK/CEzvo782bfMOL2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg3KjL7lZx2zL6ZXrr+Ys2JufOcMB8GA1UdIwQY
MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt
MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz
LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZPNoiGB
x1GgrdZZwpr75HMgOmtt4y3uirOSXioPBAh7s7UvAdSFmP94K36laLL4Ajznz7P7
CQ0dEOHV4CAxRsNclbgMc6kCqhvRZfELfPhOxk/o1/zvI50YK/cz3bH7P5KuWRuF
IxRASaLCfioRdWqC9ZCe9mYeo4Em4t+NyISHRmD2GJlMOeRgRBUuNkq5rz9t5KrJ
TdC+OrAE6JXAlA9LDI4cgzvom5sMls1l1CeyLF8PI2O29PGE/tsX/A9MXET/zyYk
c/dxCSm2WY7qIOZs3qR2OPzGInfuNzvv8IYa0ka94N3wwzWuzYpYPV5SySmBwTUQ
FRQxM8nE33jxIw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:34 2025 by rpki-client