Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier: Wb58nUsvClFOUh+VwB12n6d5A4UynwuFYvULm7FbKUk=
Subject key identifier: DC:F0:1A:00:DF:22:CE:EB:18:30:D1:40:88:2C:27:B0:BD:70:0B:C3
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial: 019A7149F237A82B903E3AB4D5CBB4BF2D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number: 06D6
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: rZbV0V/4iX52qnYrnTQ2C/ocsalsm2W9i/PbDiRCfKQ=)
2: B30qKHB4pvW_uIxt5ksptRBP4PQ.roa (hash: Y9HutrF2XOKiS4omLhBmOgiWSK360mai1Yz5rvj0XF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f2:37:a8:2b:90:3e:3a:b4:d5:cb:b4:bf:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=dcf01a00df22ceeb1830d140882c27b0bd700bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:57:ee:e1:d9:02:37:bf:45:8c:3d:c4:bb:
2c:d3:d0:df:63:b9:ca:fb:38:b1:d7:c9:59:d7:3c:
d1:fb:29:cc:86:71:12:47:15:4b:a7:03:ea:24:6b:
13:ab:df:6f:4e:51:59:40:e3:dc:aa:19:16:28:2a:
bc:3e:e1:77:68:99:c3:33:9d:92:1c:d8:9a:0b:70:
0f:2b:54:32:58:37:c4:a1:6a:e3:82:75:ed:4b:b8:
e1:3b:fb:4f:fd:62:e1:f2:fc:f2:49:4d:ae:d6:8d:
70:da:5b:68:ab:5a:d6:6d:de:5e:57:7c:7a:0e:05:
ef:99:73:f9:aa:7d:54:b4:da:9b:4b:d9:c7:ce:88:
84:36:08:3e:e9:fa:7f:04:6c:00:dc:04:62:c7:c2:
05:26:0a:70:f5:1c:57:e8:a4:f1:07:f2:63:bc:bd:
d1:09:a5:c3:42:85:cf:4c:b0:1b:1b:dd:7c:c4:2a:
e1:2d:d3:c0:54:46:e9:53:3e:ab:5e:ed:f5:2a:d2:
7f:25:55:83:7e:03:6c:e5:9a:2d:14:c0:36:a9:ff:
76:36:ac:fd:50:86:eb:35:f9:c6:bb:74:f0:d5:91:
61:f3:2d:28:43:8d:25:74:97:7f:b1:0b:89:a6:12:
c7:ee:ef:58:37:f3:f7:36:3c:fb:d5:18:7a:d5:56:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:1A:00:DF:22:CE:EB:18:30:D1:40:88:2C:27:B0:BD:70:0B:C3
X509v3 Authority Key Identifier:
keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:54:6d:bc:70:02:47:d1:f1:d4:68:5c:13:68:3a:bd:0f:66:
dd:60:58:ff:69:e9:d3:79:8d:56:13:f4:8c:de:db:2b:65:5d:
0d:bf:46:5e:13:61:40:e4:c5:91:4e:66:45:21:b7:99:cf:df:
63:96:75:a4:cf:07:03:a6:3e:18:38:a6:aa:28:7c:79:eb:74:
fe:ac:a6:9d:d4:94:e6:88:72:33:d6:0c:4d:86:a4:0c:a5:cc:
7a:0f:ce:7d:45:5c:e4:e2:94:d1:d9:c7:26:6e:05:4b:45:db:
f6:30:bf:05:49:fe:5b:7e:74:e6:d8:54:b4:4b:8f:42:b3:f5:
f3:8a:f2:1c:74:31:3d:61:32:a8:88:3d:2f:ba:2b:bd:51:9d:
b3:b0:b5:fa:f8:0f:f6:1e:7d:cf:8a:c5:05:53:7a:b6:f4:03:
bd:bf:61:e2:3c:a0:7d:3c:6b:4a:2d:04:56:18:dd:3c:1c:0b:
e9:e6:ea:ff:e6:03:d4:7e:f7:21:5b:98:4d:a2:96:a9:d3:08:
81:39:e6:16:2f:0d:4a:ff:dc:88:84:f0:da:a8:83:0c:e8:34:
4f:3c:e6:7e:26:60:c2:6d:af:59:ed:50:ae:53:bc:95:ee:5e:
22:77:3f:59:a0:ff:cd:d7:9f:7e:00:cd:73:a8:02:73:97:6f:
6b:cf:73:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSfI3qCuQPjq01cu0vy0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWVmMjA5M2RhMTVlZWM5MGVmYjgzN2I5NTAxNjQ2Njlm
NjE5OGIwHhcNMjUxMTExMDUwMTAyWhcNMjUxMTEyMDUwMTAyWjAzMTEwLwYDVQQD
EyhkY2YwMWEwMGRmMjJjZWViMTgzMGQxNDA4ODJjMjdiMGJkNzAwYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/lX7uHZAje/RYw9xLss09DfY7nK
+zix18lZ1zzR+ynMhnESRxVLpwPqJGsTq99vTlFZQOPcqhkWKCq8PuF3aJnDM52S
HNiaC3APK1QyWDfEoWrjgnXtS7jhO/tP/WLh8vzySU2u1o1w2ltoq1rWbd5eV3x6
DgXvmXP5qn1UtNqbS9nHzoiENgg+6fp/BGwA3ARix8IFJgpw9RxX6KTxB/JjvL3R
CaXDQoXPTLAbG918xCrhLdPAVEbpUz6rXu31KtJ/JVWDfgNs5ZotFMA2qf92Nqz9
UIbrNfnGu3Tw1ZFh8y0oQ40ldJd/sQuJphLH7u9YN/P3Njz71Rh61VZhbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzwGgDfIs7rGDDRQIgsJ7C9cAvDMB8GA1UdIwQY
MBaAFNCe8gk9oV7skO+4N7lQFkZp9hmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgt
NmIyZTY4ZGRlMWUzLzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgtNmIyZTY4ZGRlMWUz
LzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFRtvHAC
R9Hx1GhcE2g6vQ9m3WBY/2np03mNVhP0jN7bK2VdDb9GXhNhQOTFkU5mRSG3mc/f
Y5Z1pM8HA6Y+GDimqih8eet0/qymndSU5ohyM9YMTYakDKXMeg/OfUVc5OKU0dnH
Jm4FS0Xb9jC/BUn+W3505thUtEuPQrP184ryHHQxPWEyqIg9L7orvVGds7C1+vgP
9h59z4rFBVN6tvQDvb9h4jygfTxrSi0EVhjdPBwL6ebq/+YD1H73IVuYTaKWqdMI
gTnmFi8NSv/ciITw2qiDDOg0TzzmfiZgwm2vWe1QrlO8le5eInc/WaD/zdeffgDN
c6gCc5dva89zDg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:14 2025 by rpki-client