Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: VUD37CV7/ivYm9PT2S2RP6yc/pMIpifL1+UcptWPnKA=
Subject key identifier: DD:C2:B2:8A:E4:6E:50:3A:A6:68:18:D3:DB:A4:43:DC:E0:3D:F9:2A
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 019A4DE1DD596BE1CEB4678A2B7365505C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 0F74
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: X5VsEuQmXJ1CTN5k5YT80jst/xqNicnMWDgofGnBz+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:dd:59:6b:e1:ce:b4:67:8a:2b:73:65:50:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=ddc2b28ae46e503aa66818d3dba443dce03df92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:95:6a:1c:5f:50:1e:99:f4:2a:82:b4:35:
11:39:13:3c:ce:97:50:ca:76:4d:1b:24:1f:04:11:
e5:b5:27:ae:b1:65:6d:ae:a1:34:20:9d:54:ec:5e:
bd:75:3e:75:9a:38:7f:bd:bd:f2:c2:2d:a8:62:44:
3c:9a:d1:4f:3a:ef:32:60:e2:e6:14:80:9d:57:d6:
79:1d:0b:9b:14:c9:59:5b:f5:3f:a7:55:0e:4b:08:
1c:8f:8c:c4:34:3c:23:a5:4d:06:e5:b7:fb:c0:06:
c1:80:c3:1d:5f:05:56:96:8b:5b:e3:25:e8:b7:08:
07:cb:b9:27:ee:c9:71:c7:7c:48:46:b6:cf:a4:a0:
bc:f6:27:77:6b:42:ef:f2:51:a8:ba:8f:87:77:fd:
08:2c:ee:a6:72:f9:70:ad:51:9b:8b:f0:c9:43:96:
99:26:de:e3:30:97:1f:58:03:25:e4:97:41:90:ae:
ae:68:b9:c4:89:5b:b8:15:fd:b1:88:84:a9:fb:38:
2d:2c:89:c1:7b:86:99:01:ec:40:f3:d1:85:31:69:
35:a1:55:99:87:33:ef:86:93:07:66:41:94:49:3a:
d9:da:a2:14:2c:aa:ce:59:65:2b:79:ce:90:08:00:
ed:3f:dc:5b:62:d9:ec:f8:42:5d:37:aa:9f:b6:f8:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:B2:8A:E4:6E:50:3A:A6:68:18:D3:DB:A4:43:DC:E0:3D:F9:2A
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8a:e5:0f:05:e6:cb:b1:fb:23:89:e1:c2:1b:e4:ff:75:80:
a0:b4:68:df:67:3b:e9:c2:58:40:41:ad:7e:23:b3:3c:26:fe:
4c:8e:f9:86:6b:50:fc:41:4b:07:0e:ab:dd:8b:b5:70:f6:ae:
ea:1e:99:3c:05:e1:13:39:a2:97:aa:5a:ab:96:cd:1b:d8:ae:
92:d2:19:41:eb:29:9f:20:b8:91:98:41:f4:93:b9:99:2e:50:
2c:32:58:98:4a:57:81:5d:8d:ee:c8:37:23:77:27:c4:15:04:
82:cf:dc:a3:f0:87:24:e9:a9:d9:0d:20:ae:56:e6:13:63:f9:
3e:13:92:19:1e:6d:4f:cd:8c:d7:29:f6:08:e1:ff:3e:d2:cd:
39:de:ea:25:a6:6c:b3:df:8e:40:a1:19:7b:1c:69:39:bc:ff:
51:c1:d5:0d:9b:91:38:5a:54:e7:6b:4c:ef:f1:76:e1:27:80:
62:59:40:0f:db:11:7f:fa:93:77:c1:10:eb:7e:74:02:42:16:
9d:7c:e3:54:58:3d:40:e7:9c:d2:ab:ec:03:43:26:95:73:25:
1f:e5:a8:d7:a6:dd:78:3e:df:16:de:f5:d2:12:e2:f4:27:a6:
d2:b3:bb:e2:86:f8:7a:9a:70:be:6d:3a:f7:8a:9d:26:39:9f:
95:26:81:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4d1Za+HOtGeKK3NlUFyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkZmQ0NTY4MzQyODljMWZkMDNhMGZlZjFiNTJhNWVm
ZDFkOTEwHhcNMjUxMTA0MDgwMDM5WhcNMjUxMTA1MDgwMDM5WjAzMTEwLwYDVQQD
EyhkZGMyYjI4YWU0NmU1MDNhYTY2ODE4ZDNkYmE0NDNkY2UwM2RmOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufyVahxfUB6Z9CqCtDURORM8zpdQ
ynZNGyQfBBHltSeusWVtrqE0IJ1U7F69dT51mjh/vb3ywi2oYkQ8mtFPOu8yYOLm
FICdV9Z5HQubFMlZW/U/p1UOSwgcj4zENDwjpU0G5bf7wAbBgMMdXwVWlotb4yXo
twgHy7kn7slxx3xIRrbPpKC89id3a0Lv8lGouo+Hd/0ILO6mcvlwrVGbi/DJQ5aZ
Jt7jMJcfWAMl5JdBkK6uaLnEiVu4Ff2xiISp+zgtLInBe4aZAexA89GFMWk1oVWZ
hzPvhpMHZkGUSTrZ2qIULKrOWWUrec6QCADtP9xbYtns+EJdN6qftvif5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3CsorkblA6pmgY09ukQ9zgPfkqMB8GA1UdIwQY
MBaAFA2R39RWg0KJwf0DoP7xtSpe/R2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDct
OGJjY2UzMDNiOTE5LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDctOGJjY2UzMDNiOTE5
LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASorlDwXm
y7H7I4nhwhvk/3WAoLRo32c76cJYQEGtfiOzPCb+TI75hmtQ/EFLBw6r3Yu1cPau
6h6ZPAXhEzmil6paq5bNG9iuktIZQespnyC4kZhB9JO5mS5QLDJYmEpXgV2N7sg3
I3cnxBUEgs/co/CHJOmp2Q0grlbmE2P5PhOSGR5tT82M1yn2COH/PtLNOd7qJaZs
s9+OQKEZexxpObz/UcHVDZuROFpU52tM7/F24SeAYllAD9sRf/qTd8EQ6350AkIW
nXzjVFg9QOec0qvsA0MmlXMlH+Wo16bdeD7fFt710hLi9Cem0rO74ob4eppwvm06
94qdJjmflSaB7w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:26 2025 by rpki-client