Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: k0+kkGcKhd9RLlGlNJaZznFz+M5AkHZFe2S2R/74skA=
Subject key identifier: D8:C9:B3:E3:96:94:8D:95:2C:7A:F4:58:E7:F4:3D:FA:B2:35:AA:F5
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019A4EF5EC8A32EE4BD48FAFC365B6E46B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: ByveRWnZapk7r/GEcbvvTSjGyf7WgpyiQCow4/DvyIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ec:8a:32:ee:4b:d4:8f:af:c3:65:b6:e4:6b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=d8c9b3e396948d952c7af458e7f43dfab235aaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:a3:32:15:73:c6:b6:ef:a6:d3:b1:9f:94:
bf:d3:57:5b:88:b5:d1:4e:57:75:1d:32:22:ab:78:
a8:b5:53:52:bf:fc:3e:8c:97:6d:56:5f:bc:5d:d1:
f5:8b:c1:ca:7f:ea:ff:34:45:d1:9b:a9:3c:ed:b2:
ad:e5:37:41:9a:83:a5:e5:52:1a:e9:0f:29:50:cc:
fc:dc:6b:3b:ed:0a:b2:39:c6:92:75:1c:bc:8a:70:
34:7d:b2:b4:8a:dc:27:c5:bb:48:3a:70:20:51:28:
d3:0a:04:28:ac:f3:52:99:1f:91:b6:c0:02:7a:d1:
82:1d:fc:d9:63:a1:07:68:48:21:5e:d9:34:68:ef:
17:06:0d:4b:63:e1:a0:3a:ae:ad:6e:92:03:3f:9b:
0c:f5:b5:2a:08:a6:dd:89:cd:4b:4e:e1:4c:d7:36:
d1:49:3d:2c:4a:47:bc:38:85:f1:c4:7e:8a:55:a5:
7f:16:c7:80:dc:56:9b:f7:96:62:7b:05:26:75:af:
e6:65:e0:62:af:07:c5:15:61:d7:9b:9b:2c:67:d8:
1c:ef:ec:bb:d3:7f:9e:ae:0d:3a:f1:e8:c9:33:b1:
c8:d4:80:87:1e:bb:c6:77:c6:9e:81:96:23:45:37:
c9:36:a9:c5:d3:b8:54:60:b2:01:36:17:4e:b9:eb:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:B3:E3:96:94:8D:95:2C:7A:F4:58:E7:F4:3D:FA:B2:35:AA:F5
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:77:d7:8c:7a:a0:27:a3:74:a0:7b:d1:a2:31:6a:eb:79:
73:02:64:0c:52:c3:47:0b:c3:91:84:a8:86:3e:22:b7:1c:91:
07:15:1c:b3:ed:93:1c:55:8d:8d:23:e9:96:21:d9:74:8c:ec:
ee:e8:aa:0c:39:5f:e7:6c:90:8b:fc:36:44:10:0d:9c:41:49:
49:4c:e9:e8:67:69:35:f8:34:5a:9d:11:25:38:45:64:be:87:
fa:9d:bd:87:72:76:d4:16:50:4d:b7:10:ba:85:fe:0f:17:c2:
0c:55:cb:d5:a0:6c:ec:f3:00:33:4d:0c:e9:62:e3:50:c9:94:
86:ca:04:ea:5a:2f:66:56:c7:d3:3b:af:7e:fe:af:18:f4:a9:
4d:67:c7:53:ec:a0:f0:89:c4:ae:83:83:c4:78:d7:e6:33:96:
8d:da:a8:d7:b7:fb:b0:0d:f3:fb:f6:ca:1d:2b:fb:f0:42:30:
0e:ce:ba:c3:a5:e8:ff:51:49:35:01:5f:5d:00:a0:c3:2d:e9:
6e:1f:2a:65:91:48:b6:ff:92:cd:28:cd:c1:cf:3f:96:9a:4a:
39:64:4a:b6:89:de:80:b8:86:15:9e:ad:1f:64:2d:34:c4:39:
89:54:4f:f8:33:64:62:c7:e5:8b:18:44:43:3e:13:54:0e:c8:
ef:24:87:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9eyKMu5L1I+vw2W25GtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj
ODZkNGUwHhcNMjUxMTA0MTMwMjEwWhcNMjUxMTA1MTMwMjEwWjAzMTEwLwYDVQQD
EyhkOGM5YjNlMzk2OTQ4ZDk1MmM3YWY0NThlN2Y0M2RmYWIyMzVhYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjOjMhVzxrbvptOxn5S/01dbiLXR
Tld1HTIiq3iotVNSv/w+jJdtVl+8XdH1i8HKf+r/NEXRm6k87bKt5TdBmoOl5VIa
6Q8pUMz83Gs77QqyOcaSdRy8inA0fbK0itwnxbtIOnAgUSjTCgQorPNSmR+RtsAC
etGCHfzZY6EHaEghXtk0aO8XBg1LY+GgOq6tbpIDP5sM9bUqCKbdic1LTuFM1zbR
ST0sSke8OIXxxH6KVaV/FseA3Fab95ZiewUmda/mZeBirwfFFWHXm5ssZ9gc7+y7
03+erg068ejJM7HI1ICHHrvGd8aegZYjRTfJNqnF07hUYLIBNhdOuevv8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjJs+OWlI2VLHr0WOf0PfqyNar1MB8GA1UdIwQY
MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt
YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0
LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1F314x6
oCejdKB70aIxaut5cwJkDFLDRwvDkYSohj4itxyRBxUcs+2THFWNjSPpliHZdIzs
7uiqDDlf52yQi/w2RBANnEFJSUzp6GdpNfg0Wp0RJThFZL6H+p29h3J21BZQTbcQ
uoX+DxfCDFXL1aBs7PMAM00M6WLjUMmUhsoE6lovZlbH0zuvfv6vGPSpTWfHU+yg
8InEroODxHjX5jOWjdqo17f7sA3z+/bKHSv78EIwDs66w6Xo/1FJNQFfXQCgwy3p
bh8qZZFItv+SzSjNwc8/lppKOWRKtonegLiGFZ6tH2QtNMQ5iVRP+DNkYsflixhE
Qz4TVA7I7ySHFA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:53 2025 by rpki-client