Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File: dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier: 2Uzvrco0VWZYTh2wnKjazhc3BJpWcpvIdQAlq1SXMXs=
Subject key identifier: 0D:EE:8C:30:BC:4A:60:12:A5:79:6D:97:CE:B3:D8:08:28:06:4A:A4
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial: 019A4E861F2BBE5C0988F894EADDD5984DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:03 +0000
Manifest this update: Tue 04 Nov 2025 11:00:03 +0000
Manifest next update: Wed 05 Nov 2025 11:00:03 +0000
Files and hashes: 1: Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa (hash: YSca3SNn3dbydNzeg1qaUX/HJae1ElZZx6hrF1jVM80=)
2: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: ASw+r+b0JrlQ9j3YJvZiiW5opkAWmMDFAYnFckU613g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:1f:2b:be:5c:09:88:f8:94:ea:dd:d5:98:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
Validity
Not Before: Nov 4 11:00:03 2025 GMT
Not After : Nov 5 11:00:03 2025 GMT
Subject: CN=0dee8c30bc4a6012a5796d97ceb3d80828064aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:1a:92:f9:06:87:82:b9:6f:76:86:f9:38:
e9:f4:01:51:7c:1d:9e:55:fd:38:9d:29:d6:b7:26:
d1:86:7f:13:da:ec:22:46:cc:9d:14:9e:8e:f6:38:
27:f7:bf:23:a3:ef:0f:01:52:2d:96:6f:4a:13:91:
a5:86:78:11:21:16:41:7b:0a:56:f4:5d:26:54:bf:
73:5d:bb:bb:e8:93:33:f4:02:84:e5:bd:59:40:25:
ff:a0:94:28:aa:7f:c1:fe:ca:00:ec:4b:c4:8e:47:
32:7c:ca:8b:69:c2:3f:37:d6:2e:63:33:d5:8e:b5:
f1:b3:4b:31:d6:21:a6:3d:e0:2f:52:f7:5a:56:8c:
d0:e6:4f:53:ab:e2:61:61:a9:d6:62:9e:f0:45:d4:
28:f2:8a:13:9c:fd:7f:fb:bd:ca:19:64:94:51:eb:
ad:76:6a:bb:97:68:05:d5:90:9f:de:fb:3d:8a:4b:
9c:00:9a:8e:cd:af:55:83:a0:e4:14:a8:4f:cf:2e:
17:8d:ec:02:f9:77:d6:b8:2b:c1:76:59:75:3d:8f:
72:70:46:05:2c:01:5c:1c:ad:2b:d2:82:96:ed:d7:
76:59:51:4e:93:dd:32:dc:7d:ae:39:ed:2e:bd:54:
0e:85:0f:cb:f3:04:05:5e:4b:0b:46:06:65:7e:2b:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EE:8C:30:BC:4A:60:12:A5:79:6D:97:CE:B3:D8:08:28:06:4A:A4
X509v3 Authority Key Identifier:
keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:80:15:d0:8e:fe:65:eb:ee:00:e7:88:64:3e:e5:34:0e:0a:
99:40:0f:e8:d5:1c:ef:30:3c:c5:82:88:a3:c0:6f:53:b5:b2:
f5:4d:f0:ab:2f:2a:a1:be:74:43:17:a4:51:c8:1f:3a:e7:63:
ab:d4:17:b6:6c:4e:03:51:f6:1f:13:15:8e:1a:4b:73:d0:1e:
4b:5b:34:46:42:8a:af:1b:3b:82:34:44:d1:2a:36:40:91:91:
15:7d:c1:1f:82:6e:aa:8d:df:8d:1a:0a:ee:f3:d5:bd:b7:d5:
46:55:73:8b:5a:78:1e:18:53:db:19:07:22:cf:69:22:53:a0:
2e:21:ea:46:37:c7:b2:19:3f:0e:00:88:82:73:4c:45:4b:55:
65:7c:85:90:5b:61:05:d4:5c:f0:d4:17:7d:3e:6a:32:f6:6c:
d5:5d:8a:6e:dc:ee:5b:1e:73:1a:6f:61:80:7f:36:f7:e5:35:
d2:c9:20:9b:13:80:5a:b3:d0:ff:f1:5d:37:b4:8f:11:df:9f:
23:6d:26:7e:54:cc:f3:1f:f8:a7:dd:99:27:13:57:fc:95:fe:
a8:f7:ee:18:73:10:2e:69:78:fb:bc:c3:3e:96:9b:e0:e2:cd:
63:b3:3f:ce:e1:0e:63:2d:4a:6b:79:93:10:cd:c6:85:b3:df:
f7:8d:54:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhh8rvlwJiPiU6t3VmE2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGZmYjY1NTJkNThhZTc3NGJhNDI0ZDU1MjdiMzUwNjI0
ZmFhZmMwHhcNMjUxMTA0MTEwMDAzWhcNMjUxMTA1MTEwMDAzWjAzMTEwLwYDVQQD
EygwZGVlOGMzMGJjNGE2MDEyYTU3OTZkOTdjZWIzZDgwODI4MDY0YWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof8akvkGh4K5b3aG+Tjp9AFRfB2e
Vf04nSnWtybRhn8T2uwiRsydFJ6O9jgn978jo+8PAVItlm9KE5GlhngRIRZBewpW
9F0mVL9zXbu76JMz9AKE5b1ZQCX/oJQoqn/B/soA7EvEjkcyfMqLacI/N9YuYzPV
jrXxs0sx1iGmPeAvUvdaVozQ5k9Tq+JhYanWYp7wRdQo8ooTnP1/+73KGWSUUeut
dmq7l2gF1ZCf3vs9ikucAJqOza9Vg6DkFKhPzy4XjewC+XfWuCvBdll1PY9ycEYF
LAFcHK0r0oKW7dd2WVFOk90y3H2uOe0uvVQOhQ/L8wQFXksLRgZlfiuyJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3ujDC8SmASpXltl86z2AgoBkqkMB8GA1UdIwQY
MBaAFHUP+2VS1YrndLpCTVUns1BiT6r8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFfN1pWTFZpdWQwdWtKTlZTZXpVR0pQcXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMzU1OGQtOTA1Ny00N2RiLTk5NTkt
MzA2MGIzNmI4NTA2LzEvZFFfN1pWTFZpdWQwdWtKTlZTZXpVR0pQcXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMzU1OGQtOTA1Ny00N2RiLTk5NTktMzA2MGIzNmI4NTA2
LzEvZFFfN1pWTFZpdWQwdWtKTlZTZXpVR0pQcXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIAV0I7+
ZevuAOeIZD7lNA4KmUAP6NUc7zA8xYKIo8BvU7Wy9U3wqy8qob50QxekUcgfOudj
q9QXtmxOA1H2HxMVjhpLc9AeS1s0RkKKrxs7gjRE0So2QJGRFX3BH4Juqo3fjRoK
7vPVvbfVRlVzi1p4HhhT2xkHIs9pIlOgLiHqRjfHshk/DgCIgnNMRUtVZXyFkFth
BdRc8NQXfT5qMvZs1V2KbtzuWx5zGm9hgH829+U10skgmxOAWrPQ//FdN7SPEd+f
I20mflTM8x/4p92ZJxNX/JX+qPfuGHMQLml4+7zDPpab4OLNY7M/zuEOYy1Ka3mT
EM3GhbPf941Uqw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:29:04 2025 by rpki-client