Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: ZYtuR66Zf7A+cVVh3JosKbpb/z7q+5+derH9eWj95sY=
Subject key identifier: 07:F5:E7:49:4D:78:43:E2:79:81:0E:B7:76:1B:F8:29:B2:C1:DE:DC
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019A4DE189EE382057983CD1E5296CDF8078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 1035
Signing time: Tue 04 Nov 2025 08:00:17 +0000
Manifest this update: Tue 04 Nov 2025 08:00:17 +0000
Manifest next update: Wed 05 Nov 2025 08:00:17 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: 06cOD9GVnPSAtEIVKBfKb63lgUIWN/CkuxHezlVVx44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:89:ee:38:20:57:98:3c:d1:e5:29:6c:df:80:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Nov 4 08:00:17 2025 GMT
Not After : Nov 5 08:00:17 2025 GMT
Subject: CN=07f5e7494d7843e279810eb7761bf829b2c1dedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:4a:b8:56:0f:e6:1b:13:3f:d8:bc:34:4a:
db:0a:5e:3e:a8:5b:f4:82:dd:53:3a:e2:e6:29:3a:
0b:e3:a7:f5:4a:b4:38:dd:a1:18:2d:1b:08:a8:62:
af:cd:aa:cb:da:cf:85:28:ee:55:8f:59:d8:c9:64:
df:d9:17:84:1a:1f:62:20:77:60:3d:21:7d:d6:4d:
4b:29:34:a3:e9:bf:38:62:46:e6:b7:a4:af:c0:6b:
3b:9e:ac:32:23:b9:6e:a5:2a:9a:58:c9:7d:1a:dc:
30:02:54:7c:3e:95:fb:2b:34:75:c8:63:07:dc:79:
43:40:4f:05:7a:7c:92:72:42:a1:04:dd:4a:36:08:
af:04:5f:ec:af:27:96:c5:13:da:49:a3:c9:c0:bf:
38:53:8c:79:ba:7e:fd:47:9d:b1:b9:28:ee:09:ed:
54:1a:ae:b6:df:a5:3c:9f:7f:45:6c:67:c6:38:32:
95:a7:27:b2:85:4c:5f:5c:c0:80:d8:00:19:b6:bc:
3e:2d:41:12:17:3a:f9:52:da:9d:cb:19:9f:53:3c:
a2:75:58:b8:99:7d:9c:8b:84:e3:ae:d8:e1:d8:d4:
da:63:00:97:5d:f1:37:7a:f8:46:7c:2c:06:4a:8e:
3b:8f:55:43:28:2f:91:ca:84:92:f9:7c:e3:83:5a:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F5:E7:49:4D:78:43:E2:79:81:0E:B7:76:1B:F8:29:B2:C1:DE:DC
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:73:33:be:ab:36:5d:d1:fe:f2:65:ee:09:04:1d:02:6d:a0:
53:5c:30:ac:92:c4:8a:07:f8:98:3b:89:a8:9c:7f:41:22:bf:
0c:a6:de:e7:b8:51:d1:74:38:6d:18:b7:f3:40:c0:c0:ad:1c:
9a:61:cb:43:01:af:d5:40:ab:43:39:8c:36:3b:80:be:3c:c2:
aa:4b:44:6c:ec:7a:10:38:29:d9:06:50:60:e1:b2:d6:c4:1d:
d0:30:33:b4:7e:45:5e:d6:cc:f7:b4:b4:bd:06:ec:e0:51:cd:
b9:15:50:58:fa:be:e9:1f:bd:1e:bf:5b:fe:08:04:e1:ed:46:
a7:76:81:aa:ad:37:c2:44:2f:89:79:ba:18:66:1c:75:10:f5:
11:16:7e:f3:d2:30:2f:3d:71:e0:2f:90:17:7e:ec:4c:32:a5:
1f:b6:40:b5:d1:fe:16:5c:f8:d7:c7:d6:6c:c0:11:90:a0:43:
24:78:71:12:81:d4:2b:37:74:f6:88:df:f7:9b:f4:2b:ea:7b:
6d:95:95:f9:ab:4e:9a:15:5e:ab:05:7f:6a:71:dd:72:fc:a3:
ef:2e:aa:5d:b3:e5:b5:a3:eb:cc:97:ed:8d:06:10:bb:df:61:
54:a4:3e:d0:d9:ab:38:d1:5d:40:50:84:6b:93:a6:a2:d5:60:
cf:94:df:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4YnuOCBXmDzR5Sls34B4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMWU2ZDVlNzJkYWY0MTA4Y2Y2MGJkNDdlOTM2ZGYxYTFl
OTcyMjYwHhcNMjUxMTA0MDgwMDE3WhcNMjUxMTA1MDgwMDE3WjAzMTEwLwYDVQQD
EygwN2Y1ZTc0OTRkNzg0M2UyNzk4MTBlYjc3NjFiZjgyOWIyYzFkZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFdKuFYP5hsTP9i8NErbCl4+qFv0
gt1TOuLmKToL46f1SrQ43aEYLRsIqGKvzarL2s+FKO5Vj1nYyWTf2ReEGh9iIHdg
PSF91k1LKTSj6b84Ykbmt6SvwGs7nqwyI7lupSqaWMl9GtwwAlR8PpX7KzR1yGMH
3HlDQE8FenySckKhBN1KNgivBF/sryeWxRPaSaPJwL84U4x5un79R52xuSjuCe1U
Gq6236U8n39FbGfGODKVpyeyhUxfXMCA2AAZtrw+LUESFzr5UtqdyxmfUzyidVi4
mX2ci4Tjrtjh2NTaYwCXXfE3evhGfCwGSo47j1VDKC+RyoSS+Xzjg1q06QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf150lNeEPieYEOt3Yb+Cmywd7cMB8GA1UdIwQY
MBaAFAwebV5y2vQQjPYL1H6TbfGh6XImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUt
YTI5NTgxM2YxZjgyLzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUtYTI5NTgxM2YxZjgy
LzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3Mzvqs2
XdH+8mXuCQQdAm2gU1wwrJLEigf4mDuJqJx/QSK/DKbe57hR0XQ4bRi380DAwK0c
mmHLQwGv1UCrQzmMNjuAvjzCqktEbOx6EDgp2QZQYOGy1sQd0DAztH5FXtbM97S0
vQbs4FHNuRVQWPq+6R+9Hr9b/ggE4e1Gp3aBqq03wkQviXm6GGYcdRD1ERZ+89Iw
Lz1x4C+QF37sTDKlH7ZAtdH+Flz418fWbMARkKBDJHhxEoHUKzd09ojf95v0K+p7
bZWV+atOmhVeqwV/anHdcvyj7y6qXbPltaPrzJftjQYQu99hVKQ+0NmrONFdQFCE
a5OmotVgz5Tfvg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:32 2025 by rpki-client