Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: eCu3+4pazdQDtcX2r0yPF0XP9RSnOtJuHIGOrnIsuTo=
Subject key identifier: 2D:D9:01:2D:20:38:BF:BF:22:A9:44:76:67:DD:57:FB:25:6C:2F:5E
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019A28C2BC3C262BB5032FCC6478C67E4ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 050D
Signing time: Tue 28 Oct 2025 03:00:42 +0000
Manifest this update: Tue 28 Oct 2025 03:00:42 +0000
Manifest next update: Wed 29 Oct 2025 03:00:42 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: 26OVqlsEalBcgtCJo9r6LCjEI/tj5RyopGExE7hL+cg=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:bc:3c:26:2b:b5:03:2f:cc:64:78:c6:7e:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Oct 28 03:00:42 2025 GMT
Not After : Oct 29 03:00:42 2025 GMT
Subject: CN=2dd9012d2038bfbf22a9447667dd57fb256c2f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:48:50:47:10:9b:09:34:ac:a1:6a:d7:f8:
42:83:7a:b0:93:61:a5:d3:93:c0:c7:ae:98:cb:fd:
f5:c2:cb:99:9a:75:8a:0e:b0:72:dd:5b:90:51:81:
36:54:c6:81:be:fd:25:d0:63:84:7f:4d:a2:96:22:
ac:ef:e8:e2:64:53:de:71:95:a0:3b:58:92:70:c3:
8a:9b:a8:15:9f:f5:f8:1e:06:ce:ed:3e:78:8f:4d:
b5:29:3c:34:a6:45:9b:6b:7c:cf:d0:c8:af:8d:b7:
51:43:b0:7a:9b:24:93:1f:2e:ce:e0:4b:11:44:e3:
02:1d:9f:67:d6:e4:fe:85:5b:eb:42:a0:33:60:af:
25:94:9e:f0:5c:f3:90:78:ba:94:ad:27:69:61:21:
86:f2:c7:88:85:7f:db:8f:0d:43:9f:39:b0:e3:46:
9c:3a:09:a0:18:72:07:0c:e4:94:1b:b4:c9:97:9b:
ad:90:01:9e:f0:e0:1b:93:fb:15:a3:69:de:9c:4f:
49:61:06:af:7f:44:7f:1f:95:66:e4:99:35:8d:f9:
88:3d:ae:79:bf:c2:9c:77:4b:89:25:7e:04:1f:38:
3f:ac:fc:34:03:5e:60:f7:ee:ba:75:eb:80:fa:fd:
70:46:56:5f:eb:2a:bd:23:3d:95:13:bc:5d:35:6d:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:01:2D:20:38:BF:BF:22:A9:44:76:67:DD:57:FB:25:6C:2F:5E
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8e:e8:1b:47:30:71:06:77:c2:e0:26:db:02:49:99:c7:76:
59:65:6b:84:8b:10:e5:c4:61:77:98:a1:b7:e1:9f:7f:34:f5:
6c:19:52:93:f0:01:a8:51:49:94:0f:52:57:07:9e:7d:6c:c6:
c0:3d:c3:cf:2b:13:69:32:a6:8a:9c:db:57:0f:fd:44:18:5f:
6b:af:15:af:4f:f6:cc:a2:e9:19:83:ab:03:2d:2f:06:6d:8c:
17:46:13:21:35:b8:89:4c:db:b8:7b:b3:46:e3:b3:5e:bb:87:
ce:b6:c8:d6:29:56:d1:f7:c4:bd:b7:2d:01:61:ee:c8:ee:b2:
47:ae:ea:ee:e2:7d:e6:dd:e4:75:5b:42:1e:c6:8e:34:38:11:
25:f2:07:2e:d7:1b:fa:7a:e9:f8:7c:c3:90:9b:04:40:5c:a4:
a6:4f:2f:cc:5f:39:4f:21:ca:9a:25:01:b2:f9:15:64:66:ec:
41:4a:e8:6e:11:9c:7d:27:36:8a:62:eb:26:92:7e:a6:58:58:
43:be:0f:ec:09:1f:5a:83:ee:9e:d0:57:6f:c9:06:1c:1b:7b:
98:d5:c8:2c:8e:a6:dc:98:64:d3:90:e5:bb:5c:03:1b:77:4f:
c2:8c:ed:95:0c:c9:ea:3e:fd:e4:f4:c3:42:3f:bc:a5:42:3e:
30:ed:95:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoowrw8Jiu1Ay/MZHjGfk7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1
ZDViOTQwHhcNMjUxMDI4MDMwMDQyWhcNMjUxMDI5MDMwMDQyWjAzMTEwLwYDVQQD
EygyZGQ5MDEyZDIwMzhiZmJmMjJhOTQ0NzY2N2RkNTdmYjI1NmMyZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgJIUEcQmwk0rKFq1/hCg3qwk2Gl
05PAx66Yy/31wsuZmnWKDrBy3VuQUYE2VMaBvv0l0GOEf02iliKs7+jiZFPecZWg
O1iScMOKm6gVn/X4HgbO7T54j021KTw0pkWba3zP0MivjbdRQ7B6mySTHy7O4EsR
ROMCHZ9n1uT+hVvrQqAzYK8llJ7wXPOQeLqUrSdpYSGG8seIhX/bjw1Dnzmw40ac
OgmgGHIHDOSUG7TJl5utkAGe8OAbk/sVo2nenE9JYQavf0R/H5Vm5Jk1jfmIPa55
v8Kcd0uJJX4EHzg/rPw0A15g9+66deuA+v1wRlZf6yq9Iz2VE7xdNW1dCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3ZAS0gOL+/IqlEdmfdV/slbC9eMB8GA1UdIwQY
MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt
ZDNkMzBlYmMzNmFjLzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj
LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY7oG0cw
cQZ3wuAm2wJJmcd2WWVrhIsQ5cRhd5iht+GffzT1bBlSk/ABqFFJlA9SVweefWzG
wD3DzysTaTKmipzbVw/9RBhfa68Vr0/2zKLpGYOrAy0vBm2MF0YTITW4iUzbuHuz
RuOzXruHzrbI1ilW0ffEvbctAWHuyO6yR67q7uJ95t3kdVtCHsaONDgRJfIHLtcb
+nrp+HzDkJsEQFykpk8vzF85TyHKmiUBsvkVZGbsQUrobhGcfSc2imLrJpJ+plhY
Q74P7AkfWoPuntBXb8kGHBt7mNXILI6m3Jhk05Dlu1wDG3dPwoztlQzJ6j795PTD
Qj+8pUI+MO2VTA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 08:08:10 2025 by rpki-client