Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File: dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier: CURGACXZPdeGwqqgrfEmfVYhYYyiHJYnfPn8FATb4N8=
Subject key identifier: 48:46:8F:70:B4:F3:FB:B5:AE:4C:09:40:BC:88:7C:C4:93:F3:4D:20
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial: 019A503DAFE17B0562EFCE440577C55E6E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number: 102D
Signing time: Tue 04 Nov 2025 19:00:11 +0000
Manifest this update: Tue 04 Nov 2025 19:00:11 +0000
Manifest next update: Wed 05 Nov 2025 19:00:11 +0000
Files and hashes: 1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=)
2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: 7aS1Fds7wEshN5lO9IY6E+LH2EXDehIzA98AjzUxjiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:af:e1:7b:05:62:ef:ce:44:05:77:c5:5e:6e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Validity
Not Before: Nov 4 19:00:11 2025 GMT
Not After : Nov 5 19:00:11 2025 GMT
Subject: CN=48468f70b4f3fbb5ae4c0940bc887cc493f34d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:2a:a0:4c:6f:d3:25:e0:c5:a5:ef:7f:5b:
2c:fd:d2:d9:63:b3:09:ea:35:ba:eb:b8:54:72:78:
f3:9a:16:22:4e:7f:d7:c1:9d:1a:8a:e3:7c:a9:3e:
de:ee:17:43:36:41:f8:86:fd:91:49:79:12:a0:e8:
17:84:6b:24:44:0e:5c:d1:11:b6:a6:90:20:45:7e:
c9:42:6e:69:0e:b2:99:a0:25:ab:76:f9:a6:98:fb:
2e:42:74:9f:5b:21:c8:9d:02:ec:f4:9a:14:cb:1d:
85:9d:df:dd:b7:b3:20:11:c2:2d:34:3b:69:d6:1a:
59:5f:29:49:6a:eb:44:a0:19:39:f2:4b:1b:5d:08:
ec:5a:49:da:37:29:17:b7:3c:d8:93:fd:ed:83:66:
91:8a:73:12:8f:cf:2c:6a:ad:c9:13:00:fa:c4:90:
00:fd:de:38:fc:ef:a5:63:68:9e:ec:10:b0:26:18:
4c:d9:bd:cc:01:45:87:95:20:64:7c:9f:76:59:d1:
7f:66:33:ae:86:63:48:1e:8a:32:dc:ee:58:f1:6f:
32:07:9d:95:b5:17:ec:43:da:70:51:a4:5a:7b:f6:
52:d7:a8:91:a8:04:fe:83:9a:b7:70:8c:bb:2e:e1:
92:3a:26:2e:c0:7e:0d:50:91:9c:50:a9:e8:f3:bd:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:8F:70:B4:F3:FB:B5:AE:4C:09:40:BC:88:7C:C4:93:F3:4D:20
X509v3 Authority Key Identifier:
keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cd:9d:de:83:a6:1d:2b:d8:02:7b:45:57:79:59:0b:f6:e4:
b4:d3:f2:4b:ba:dc:7c:68:72:73:95:24:ed:ee:a7:00:4d:4f:
a8:ec:da:b1:d1:9b:cb:5b:fc:d4:a7:bd:a2:95:50:1e:0b:ef:
c7:ed:17:fe:0d:4d:c7:9d:b0:c3:e8:fb:d8:93:46:1d:e2:b9:
53:9d:e5:04:02:32:56:76:00:52:ef:4b:3e:ab:a8:8c:71:80:
80:40:ab:17:a5:93:02:a3:94:c1:e8:96:b0:35:7b:42:5c:7c:
3a:06:55:08:45:39:c2:8c:90:8e:11:66:51:af:e6:17:90:4d:
26:97:7e:91:cf:8a:75:0a:55:71:02:89:86:6a:08:ed:97:9d:
6b:e7:ac:cd:b4:ab:bd:1d:77:ee:01:18:11:a4:da:ce:11:1b:
f5:69:2c:68:fa:b2:86:34:cc:27:35:17:45:7f:cb:90:26:d2:
17:a5:0d:82:0c:12:12:a5:38:74:74:4b:0c:08:20:46:17:c7:
0d:fc:93:1c:52:63:1d:cf:10:39:87:27:4e:a8:18:54:51:fd:
93:23:76:cd:9c:03:f7:06:6b:af:29:58:c7:77:16:4a:8d:0b:
9e:c3:02:fa:c3:d4:31:67:4c:9e:29:54:31:43:fb:c9:e5:a3:
df:7e:b3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPa/hewVi785EBXfFXm43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTYxMDBjYjM2M2IwZTE0YTlmMzg0ZTdhOGMxY2Y5YTNi
ODViZjMwHhcNMjUxMTA0MTkwMDExWhcNMjUxMTA1MTkwMDExWjAzMTEwLwYDVQQD
Eyg0ODQ2OGY3MGI0ZjNmYmI1YWU0YzA5NDBiYzg4N2NjNDkzZjM0ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSwqoExv0yXgxaXvf1ss/dLZY7MJ
6jW667hUcnjzmhYiTn/XwZ0aiuN8qT7e7hdDNkH4hv2RSXkSoOgXhGskRA5c0RG2
ppAgRX7JQm5pDrKZoCWrdvmmmPsuQnSfWyHInQLs9JoUyx2Fnd/dt7MgEcItNDtp
1hpZXylJautEoBk58ksbXQjsWknaNykXtzzYk/3tg2aRinMSj88saq3JEwD6xJAA
/d44/O+lY2ie7BCwJhhM2b3MAUWHlSBkfJ92WdF/ZjOuhmNIHooy3O5Y8W8yB52V
tRfsQ9pwUaRae/ZS16iRqAT+g5q3cIy7LuGSOiYuwH4NUJGcUKno873FqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhGj3C08/u1rkwJQLyIfMST800gMB8GA1UdIwQY
MBaAFHRWEAyzY7DhSp84TnqMHPmjuFvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYt
ODk4OThiMmVkMTVlLzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYtODk4OThiMmVkMTVl
LzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARs2d3oOm
HSvYAntFV3lZC/bktNPyS7rcfGhyc5Uk7e6nAE1PqOzasdGby1v81Ke9opVQHgvv
x+0X/g1Nx52ww+j72JNGHeK5U53lBAIyVnYAUu9LPquojHGAgECrF6WTAqOUweiW
sDV7Qlx8OgZVCEU5woyQjhFmUa/mF5BNJpd+kc+KdQpVcQKJhmoI7Zeda+eszbSr
vR137gEYEaTazhEb9WksaPqyhjTMJzUXRX/LkCbSF6UNggwSEqU4dHRLDAggRhfH
DfyTHFJjHc8QOYcnTqgYVFH9kyN2zZwD9wZrrylYx3cWSo0LnsMC+sPUMWdMnilU
MUP7yeWj336zyQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:43 2025 by rpki-client