Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
File: DOf4uSjz9S4LuXZD007OWeuWNKM.mft (raw, json)
Hash identifier: 7w1tbRtAXPCDyasYvWLw1/4ngdP7zm512En8mpOkVjU=
Subject key identifier: 56:B6:44:40:98:77:07:6B:DD:7D:D5:D2:EA:85:F5:56:E6:66:25:81
Authority key identifier: 0C:E7:F8:B9:28:F3:F5:2E:0B:B9:76:43:D3:4E:CE:59:EB:96:34:A3
Certificate issuer: /CN=0ce7f8b928f3f52e0bb97643d34ece59eb9634a3
Certificate serial: 019A71B8BCA200AEDC8692BB0629EF3D53BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
Manifest number: B3
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: DOf4uSjz9S4LuXZD007OWeuWNKM.crl (hash: 3dnKS+M51OeYbvnrY76B7WoXUehS65U4TqkqfmBxJ2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bc:a2:00:ae:dc:86:92:bb:06:29:ef:3d:53:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce7f8b928f3f52e0bb97643d34ece59eb9634a3
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=56b644409877076bdd7dd5d2ea85f556e6662581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:78:d8:60:c7:3f:c8:32:64:9a:36:f0:f1:
a9:5c:d4:be:b4:8a:55:56:41:b2:e6:8b:da:2a:c4:
0c:7a:e9:d3:95:96:e6:e2:4b:15:76:65:3a:2c:fa:
65:6b:4b:4e:c5:4d:2a:e2:d4:fe:e0:6b:19:1a:86:
df:fa:a4:a3:c5:1b:ee:28:e8:98:50:0c:9f:6d:3e:
51:77:c5:a0:b4:68:b4:42:98:6b:84:7f:3f:b3:c0:
c0:f4:b9:1a:87:90:2d:a2:38:b0:7e:d2:dc:20:7d:
57:7d:b7:9e:45:44:52:08:e2:c2:d2:24:3e:0e:d2:
f0:8c:2c:c8:4f:40:1b:6d:d9:48:47:10:d9:ca:ee:
db:58:c9:e2:8e:35:8b:a5:db:da:61:ec:73:3f:b2:
32:da:b1:cb:17:20:5f:dd:d6:81:9f:3d:c8:6b:4e:
13:50:85:9d:58:29:b8:b1:36:f9:a5:1c:ac:5b:1f:
91:da:1b:97:07:e5:a2:d4:90:6e:ea:df:f4:f3:d4:
d0:c5:75:f4:e5:c5:ce:87:44:b6:b5:fc:9b:3b:11:
dd:56:7e:f2:f2:96:e0:d1:77:55:c4:f5:6d:77:90:
a0:3a:85:b8:0b:eb:d8:94:33:2b:bb:bd:cc:bb:5c:
af:8b:39:b2:e5:1b:69:ef:fd:81:4a:5c:ce:41:c6:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B6:44:40:98:77:07:6B:DD:7D:D5:D2:EA:85:F5:56:E6:66:25:81
X509v3 Authority Key Identifier:
keyid:0C:E7:F8:B9:28:F3:F5:2E:0B:B9:76:43:D3:4E:CE:59:EB:96:34:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e7:93:04:23:f9:60:1c:37:ee:05:dc:25:d3:f1:61:c4:21:
de:c8:92:eb:18:40:ac:e1:ff:79:2e:08:04:d0:ae:74:85:1f:
33:19:a5:6e:c3:63:c9:6a:37:ef:fd:8b:e1:85:00:63:e9:e4:
11:25:98:29:4a:d3:89:15:ef:be:c4:83:b7:fc:f6:e0:22:c4:
82:cb:10:9c:ed:6d:b6:c7:3c:66:d1:b0:0c:23:b6:39:d2:ec:
10:e0:ef:44:db:4a:20:bf:ba:f8:8b:1d:e8:d2:1a:ca:2b:d2:
39:42:55:6f:6d:89:27:e2:d5:17:c5:e3:fd:f1:a1:e9:c9:b2:
92:11:20:c9:8a:ad:35:b9:c5:1e:d4:51:f8:36:39:86:42:bc:
30:2d:91:9f:b8:ba:2b:f4:cd:8f:53:68:5e:98:91:8a:4d:10:
51:41:ef:92:af:85:c6:82:af:f9:f6:60:3e:6c:ba:1c:30:f4:
08:f4:4b:f0:76:e0:05:2f:19:4c:da:df:41:de:71:c0:bb:e9:
db:0c:7c:b4:89:c9:ce:17:c6:d0:93:a5:71:7e:d4:5d:1f:2d:
db:22:b1:d8:e3:81:8d:cd:a6:59:e1:46:53:c7:86:07:6b:10:
5c:47:15:c2:fa:51:27:51:bb:01:de:4a:93:f2:a7:65:40:fb:
5b:60:8a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLyiAK7chpK7BinvPVO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTdmOGI5MjhmM2Y1MmUwYmI5NzY0M2QzNGVjZTU5ZWI5
NjM0YTMwHhcNMjUxMTExMDcwMjAzWhcNMjUxMTEyMDcwMjAzWjAzMTEwLwYDVQQD
Eyg1NmI2NDQ0MDk4NzcwNzZiZGQ3ZGQ1ZDJlYTg1ZjU1NmU2NjYyNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvB42GDHP8gyZJo28PGpXNS+tIpV
VkGy5ovaKsQMeunTlZbm4ksVdmU6LPpla0tOxU0q4tT+4GsZGobf+qSjxRvuKOiY
UAyfbT5Rd8WgtGi0QphrhH8/s8DA9Lkah5AtojiwftLcIH1XfbeeRURSCOLC0iQ+
DtLwjCzIT0AbbdlIRxDZyu7bWMnijjWLpdvaYexzP7Iy2rHLFyBf3daBnz3Ia04T
UIWdWCm4sTb5pRysWx+R2huXB+Wi1JBu6t/089TQxXX05cXOh0S2tfybOxHdVn7y
8pbg0XdVxPVtd5CgOoW4C+vYlDMru73Mu1yvizmy5Rtp7/2BSlzOQcYJTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa2RECYdwdr3X3V0uqF9VbmZiWBMB8GA1UdIwQY
MBaAFAzn+Lko8/UuC7l2Q9NOzlnrljSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iZTM1OTMtNzk3Mi00ZGEzLWFlMTYt
MjkzZWM2MzIyOTY2LzEvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iZTM1OTMtNzk3Mi00ZGEzLWFlMTYtMjkzZWM2MzIyOTY2
LzEvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOeTBCP5
YBw37gXcJdPxYcQh3siS6xhArOH/eS4IBNCudIUfMxmlbsNjyWo37/2L4YUAY+nk
ESWYKUrTiRXvvsSDt/z24CLEgssQnO1ttsc8ZtGwDCO2OdLsEODvRNtKIL+6+Isd
6NIayivSOUJVb22JJ+LVF8Xj/fGh6cmykhEgyYqtNbnFHtRR+DY5hkK8MC2Rn7i6
K/TNj1NoXpiRik0QUUHvkq+FxoKv+fZgPmy6HDD0CPRL8HbgBS8ZTNrfQd5xwLvp
2wx8tInJzhfG0JOlcX7UXR8t2yKx2OOBjc2mWeFGU8eGB2sQXEcVwvpRJ1G7Ad5K
k/KnZUD7W2CK/A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:37 2025 by rpki-client