Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: Qdi/IvXC38rwoJdaZ2L+9pPXtTmAqTBxoqg0jKtYEjI=
Subject key identifier: EB:69:7D:D0:66:F0:E3:18:75:35:CA:EE:63:79:03:00:7A:BF:FF:D1
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019A4EF426BF44E1A4BC21A082AB08326E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 0625
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: HarXrZ/RinC4P+ZjVo/ik2DuUrfdkw38HuNZMCvRklQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:26:bf:44:e1:a4:bc:21:a0:82:ab:08:32:6e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=eb697dd066f0e3187535caee637903007abfffd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:1f:7e:42:4b:dc:c2:7c:7f:89:41:77:98:
44:9f:26:7b:12:53:cf:4c:8e:c7:47:52:d2:0f:83:
11:cd:86:45:19:ab:42:48:89:29:b3:e7:18:a1:27:
f2:20:ac:84:97:7b:35:d0:12:23:a5:ce:e8:ed:05:
dc:76:ff:b2:2f:cb:8b:23:c4:af:eb:bc:bb:07:be:
78:f8:3c:d9:f5:4e:de:bc:e8:0a:40:fd:08:36:2c:
be:7d:7c:5e:be:69:64:d5:ce:74:12:9c:42:cd:ce:
af:0e:cb:4f:48:69:16:e2:f0:1d:b0:77:24:87:fe:
12:53:8b:9f:e5:71:b5:11:1b:f0:f4:01:8f:3b:8e:
66:e4:79:57:7f:48:23:a1:2c:78:3a:7e:3e:a3:07:
40:f3:98:e6:e2:2a:53:6d:de:1e:da:ff:74:c5:41:
03:75:5a:fd:aa:7c:e1:25:f7:12:4d:bd:88:15:10:
3a:b4:04:c7:5f:55:49:16:b0:55:6e:97:ca:ea:6c:
06:b9:96:4a:cf:e8:01:c8:52:c9:12:de:74:49:21:
17:a0:3a:1f:fc:45:42:b2:cc:92:88:50:14:98:73:
21:a6:c2:09:07:81:cc:a6:59:07:c2:b4:29:bb:42:
9b:82:7b:a3:ae:e5:81:c3:f2:40:42:7c:0c:1d:93:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:69:7D:D0:66:F0:E3:18:75:35:CA:EE:63:79:03:00:7A:BF:FF:D1
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1d:e8:c5:70:59:df:7a:d3:c0:ac:1b:3e:07:3c:13:ee:45:
f4:b9:c1:9d:6a:68:be:03:fc:ef:ed:4a:a1:34:c0:f4:77:3e:
0a:2a:25:79:30:e3:01:e3:13:5f:e9:50:48:8e:b6:29:e7:61:
50:a4:26:5f:19:73:39:85:10:0c:d4:04:4d:8c:38:5b:4c:45:
e9:15:44:ba:0a:22:20:a2:a9:57:f5:1a:bd:08:2d:3d:e3:93:
9c:83:46:9d:cc:69:47:e0:46:21:18:30:49:e8:6f:0e:db:bc:
c4:92:07:b0:33:83:01:92:fb:a8:1a:49:4d:ac:4e:ba:0b:74:
52:c8:70:60:81:cf:3b:76:f0:04:22:bb:e7:2b:21:d0:8b:d6:
b3:d1:c3:0c:8a:f0:5a:8b:f9:c2:b6:71:32:1d:d1:11:c0:e5:
fc:b1:75:15:06:d7:87:aa:b3:4a:60:ef:33:73:c7:63:d9:43:
09:8f:ef:1d:1c:4f:87:6c:f7:60:9e:50:8f:b1:08:58:55:94:
cb:72:69:b1:0b:18:7f:44:c7:61:e3:91:cb:d1:96:7a:fc:d3:
db:9f:78:71:8c:90:d8:54:ea:15:94:77:10:a1:54:65:6b:6e:
b8:45:66:d2:57:04:06:48:e3:5d:90:89:e7:67:af:e3:8a:7b:
49:c6:f2:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Ca/ROGkvCGggqsIMm4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjUxMTA0MTMwMDE0WhcNMjUxMTA1MTMwMDE0WjAzMTEwLwYDVQQD
EyhlYjY5N2RkMDY2ZjBlMzE4NzUzNWNhZWU2Mzc5MDMwMDdhYmZmZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniIffkJL3MJ8f4lBd5hEnyZ7ElPP
TI7HR1LSD4MRzYZFGatCSIkps+cYoSfyIKyEl3s10BIjpc7o7QXcdv+yL8uLI8Sv
67y7B754+DzZ9U7evOgKQP0INiy+fXxevmlk1c50EpxCzc6vDstPSGkW4vAdsHck
h/4SU4uf5XG1ERvw9AGPO45m5HlXf0gjoSx4On4+owdA85jm4ipTbd4e2v90xUED
dVr9qnzhJfcSTb2IFRA6tATHX1VJFrBVbpfK6mwGuZZKz+gByFLJEt50SSEXoDof
/EVCssySiFAUmHMhpsIJB4HMplkHwrQpu0KbgnujruWBw/JAQnwMHZPGqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtpfdBm8OMYdTXK7mN5AwB6v//RMB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlh3oxXBZ
33rTwKwbPgc8E+5F9LnBnWpovgP87+1KoTTA9Hc+CioleTDjAeMTX+lQSI62Kedh
UKQmXxlzOYUQDNQETYw4W0xF6RVEugoiIKKpV/UavQgtPeOTnINGncxpR+BGIRgw
SehvDtu8xJIHsDODAZL7qBpJTaxOugt0UshwYIHPO3bwBCK75ysh0IvWs9HDDIrw
Wov5wrZxMh3REcDl/LF1FQbXh6qzSmDvM3PHY9lDCY/vHRxPh2z3YJ5Qj7EIWFWU
y3JpsQsYf0THYeORy9GWevzT2594cYyQ2FTqFZR3EKFUZWtuuEVm0lcEBkjjXZCJ
52ev44p7Scby+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:46 2025 by rpki-client