Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: gpnlsFGuQ4c4+HXpcIVUy+K9z6L/jQaqkqEDtEogkKA=
Subject key identifier: FA:65:37:E1:F2:85:94:30:AE:7F:70:FC:F1:A9:72:39:B7:AF:44:9C
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 019A51512F0A5EB382701713DEA17BDB052D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0AF9
Signing time: Wed 05 Nov 2025 00:01:06 +0000
Manifest this update: Wed 05 Nov 2025 00:01:06 +0000
Manifest next update: Thu 06 Nov 2025 00:01:06 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: tYho7hxBu2c607euhlk5wfBPahFR5Yeum7TBJtfwB2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:2f:0a:5e:b3:82:70:17:13:de:a1:7b:db:05:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Nov 5 00:01:06 2025 GMT
Not After : Nov 6 00:01:06 2025 GMT
Subject: CN=fa6537e1f2859430ae7f70fcf1a97239b7af449c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:40:77:b5:04:33:ee:d4:6f:81:3d:1c:a6:
53:e9:d1:c0:64:bc:84:41:05:30:98:9d:e6:be:b2:
34:d4:23:de:1e:ba:f9:d3:51:10:24:35:cd:40:7c:
28:fe:6d:c4:68:e3:72:ca:c6:a9:0e:40:44:70:d0:
47:55:fa:e2:30:f1:84:f2:f2:e3:fd:ec:b1:18:58:
3c:1e:86:a7:98:ad:4f:ad:50:8b:3d:95:45:af:fe:
7d:cf:20:c8:96:a5:32:ff:9e:e1:9c:2c:fe:21:bf:
d0:58:4d:8f:42:17:bd:34:ff:4e:bd:6f:22:f8:82:
9d:f4:ca:bd:af:56:0d:49:47:e9:ff:04:7d:bf:84:
ff:a8:28:29:cd:e6:b2:3b:c0:af:31:5c:de:5e:56:
fc:61:fd:86:93:17:20:7c:a9:7b:44:2b:6f:b4:0e:
8c:46:c3:ad:8f:22:0a:5b:1e:fb:2b:e3:d0:66:2d:
00:82:35:e3:85:79:b1:07:0d:6c:ef:be:30:6d:44:
cb:37:10:90:ea:f4:4c:ac:cf:d2:a5:07:c9:2b:28:
92:7d:87:2d:9e:3c:09:2e:ce:4d:fb:6e:02:db:d1:
c4:8c:ef:54:83:21:5f:8f:03:11:bc:de:76:38:6a:
1a:71:7d:28:ce:21:24:ca:89:3b:9d:92:dc:40:3b:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:37:E1:F2:85:94:30:AE:7F:70:FC:F1:A9:72:39:B7:AF:44:9C
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:ec:87:ad:f3:ba:a2:5e:b6:2e:ce:fe:e2:3e:4d:fd:c6:
d0:11:f6:0a:97:3f:17:13:66:d2:3d:a4:ce:8e:2d:99:e8:31:
5c:34:d3:f4:f6:f7:a1:98:39:82:e5:43:57:7d:7e:77:d6:8f:
b6:9a:3e:e2:86:a9:82:fd:45:af:5a:ce:76:15:e5:dd:d3:85:
ce:01:12:09:80:48:f8:f8:43:58:98:95:7c:9a:98:9e:51:90:
3b:5c:7e:a6:14:af:18:91:50:04:d0:a2:89:e3:fc:47:63:f4:
bc:f8:50:42:ff:44:e7:66:ae:f5:a6:48:a0:8c:53:2a:13:8e:
47:24:58:27:26:6e:f8:9b:33:ef:e2:20:0b:f5:98:3a:a6:ac:
96:c8:86:6d:d1:34:3f:bb:96:a1:9d:ba:b9:49:51:1c:72:f9:
5e:bb:25:58:ce:fe:b2:c3:a9:5a:50:7c:73:22:ee:ad:fe:60:
5c:f8:7d:1a:8d:09:9a:8c:c3:c8:0d:b2:fb:78:29:e2:11:aa:
0c:3b:1c:d0:f7:7d:94:04:2e:d6:8e:21:a2:88:31:4e:12:84:
82:f7:df:23:b0:ea:0d:1a:8a:04:5b:ca:ae:28:12:ca:6d:cd:
73:82:c2:29:99:61:ae:09:f4:93:2a:49:78:7c:97:fa:dd:22:
f0:4a:ab:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUS8KXrOCcBcT3qF72wUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz
ZDlkYzYwHhcNMjUxMTA1MDAwMTA2WhcNMjUxMTA2MDAwMTA2WjAzMTEwLwYDVQQD
EyhmYTY1MzdlMWYyODU5NDMwYWU3ZjcwZmNmMWE5NzIzOWI3YWY0NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ5Ad7UEM+7Ub4E9HKZT6dHAZLyE
QQUwmJ3mvrI01CPeHrr501EQJDXNQHwo/m3EaONyysapDkBEcNBHVfriMPGE8vLj
/eyxGFg8HoanmK1PrVCLPZVFr/59zyDIlqUy/57hnCz+Ib/QWE2PQhe9NP9OvW8i
+IKd9Mq9r1YNSUfp/wR9v4T/qCgpzeayO8CvMVzeXlb8Yf2GkxcgfKl7RCtvtA6M
RsOtjyIKWx77K+PQZi0AgjXjhXmxBw1s774wbUTLNxCQ6vRMrM/SpQfJKyiSfYct
njwJLs5N+24C29HEjO9UgyFfjwMRvN52OGoacX0oziEkyok7nZLcQDt6gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPplN+HyhZQwrn9w/PGpcjm3r0ScMB8GA1UdIwQY
MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt
MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw
LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJODsh63z
uqJeti7O/uI+Tf3G0BH2Cpc/FxNm0j2kzo4tmegxXDTT9Pb3oZg5guVDV31+d9aP
tpo+4oapgv1Fr1rOdhXl3dOFzgESCYBI+PhDWJiVfJqYnlGQO1x+phSvGJFQBNCi
ieP8R2P0vPhQQv9E52au9aZIoIxTKhOORyRYJyZu+Jsz7+IgC/WYOqaslsiGbdE0
P7uWoZ26uUlRHHL5XrslWM7+ssOpWlB8cyLurf5gXPh9Go0JmozDyA2y+3gp4hGq
DDsc0Pd9lAQu1o4hoogxThKEgvffI7DqDRqKBFvKrigSym3Nc4LCKZlhrgn0kypJ
eHyX+t0i8EqrkA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:18:04 2025 by rpki-client