Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File: DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier: 6Vc80xkfIx9Fr3yje7y8K8yOF6pttyuBVlhi7eklJBY=
Subject key identifier: 77:E3:85:AE:8F:2F:79:06:3B:92:AC:1B:DB:AF:CE:78:18:C2:C9:B0
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 019A71EE7A24D791E78F8E2F01C7AFBE09BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number: 0935
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: xVZ+tq4neQDQccF3XkOpsLRmtYZy320Ga0elYcvqvLE=)
2: EjaSjQvA_h8ofCWrzWooV6nayF8.roa (hash: gCmjXDkeCn1nqh4fUFSkYceSyNQm14lj5sOPimTxKOE=)
3: wS1UXRfPtMS1NBYtNz71NeZmtRk.roa (hash: iGK/CXBp/TXIP03g8PJuN3+7774KqoPIJH5kjoUJiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7a:24:d7:91:e7:8f:8e:2f:01:c7:af:be:09:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=77e385ae8f2f79063b92ac1bdbafce7818c2c9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:9d:1d:c2:b8:49:4b:3d:0c:29:b8:07:18:
63:46:60:de:5c:60:69:85:04:fe:01:24:32:d5:7f:
77:04:9a:24:0d:3f:43:2d:10:a9:bb:b4:cf:4b:00:
32:00:12:aa:01:32:85:de:bb:85:73:98:d6:74:d3:
3c:97:c8:18:c1:12:3a:e3:2e:94:d7:e9:b2:59:72:
58:6f:2d:67:7c:9e:f0:bf:f0:d9:33:3e:91:5c:2b:
99:cb:b2:da:ff:48:c0:8c:b6:40:25:7d:4b:12:25:
90:63:0b:c2:69:d9:2a:7d:cf:da:12:a0:6a:50:9a:
58:01:0a:47:65:f0:d1:82:5a:34:f0:bb:3b:23:03:
ef:7b:7d:19:bc:ab:04:11:40:9b:71:67:ac:48:c8:
36:f8:53:d1:3e:5c:4e:85:bd:ee:f1:eb:76:c2:71:
3a:8d:e1:48:2a:eb:4c:2a:00:b0:dc:91:ee:1c:5e:
5e:78:8d:ae:6e:69:81:87:ad:a4:1c:49:3b:f9:40:
a6:ad:16:eb:a5:88:7e:f4:5d:0f:40:5b:b7:d3:31:
e1:da:ea:0c:6b:07:c0:d1:de:00:f3:ae:a5:14:bc:
88:61:71:fe:01:72:18:dd:63:55:2b:a5:29:83:5f:
64:25:f7:2c:ec:f6:a1:4b:4c:f1:19:af:04:6c:15:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:85:AE:8F:2F:79:06:3B:92:AC:1B:DB:AF:CE:78:18:C2:C9:B0
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:29:db:87:1c:c6:d3:02:4d:94:49:45:c3:b3:5c:fe:97:
19:df:79:ae:d9:60:b5:f2:f6:34:9e:e9:b4:31:2d:74:39:e3:
17:10:da:2e:a2:89:ff:66:04:18:e1:86:75:29:20:9b:a9:05:
d3:af:70:20:b8:62:c7:c2:33:6c:ad:cc:6a:c6:e5:ce:1c:7a:
d5:6d:92:f4:ab:31:2c:8a:42:b8:13:e7:29:bd:c6:34:83:c8:
1c:36:da:3e:c4:8b:92:53:b2:90:0c:93:72:bc:12:e0:42:f2:
4b:30:f8:97:8f:a9:e8:1a:88:cb:27:29:78:dc:7d:e9:f7:82:
49:f7:f2:a8:20:a7:c6:f0:fb:ad:2c:de:ef:0c:b3:ab:2d:87:
a1:22:b0:76:bf:f0:01:38:95:74:bd:83:0b:db:66:31:02:f6:
20:d6:5e:f3:d6:6b:a5:fe:fd:98:03:17:95:0e:c8:8b:34:d0:
2b:21:eb:9a:b7:97:ae:ea:9f:36:33:8b:e5:ea:60:b3:5d:30:
2e:2d:ed:ad:e9:02:4b:a5:8b:23:52:f5:14:9d:da:93:38:bb:
b0:e1:4e:e7:1d:43:59:2b:d9:db:c0:58:7c:85:36:d7:a0:e1:
72:54:b3:53:98:d8:9f:fe:ee:ee:05:33:79:f4:3b:99:10:e3:
fc:f9:33:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nok15Hnj44vAcevvgm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjllM2VlNTVkZDg2MjY3NGQ0NTg2NjFiYTM0OTA4YjA2
MTdmYTEwHhcNMjUxMTExMDgwMDQ1WhcNMjUxMTEyMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg3N2UzODVhZThmMmY3OTA2M2I5MmFjMWJkYmFmY2U3ODE4YzJjOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7OdHcK4SUs9DCm4BxhjRmDeXGBp
hQT+ASQy1X93BJokDT9DLRCpu7TPSwAyABKqATKF3ruFc5jWdNM8l8gYwRI64y6U
1+myWXJYby1nfJ7wv/DZMz6RXCuZy7La/0jAjLZAJX1LEiWQYwvCadkqfc/aEqBq
UJpYAQpHZfDRglo08Ls7IwPve30ZvKsEEUCbcWesSMg2+FPRPlxOhb3u8et2wnE6
jeFIKutMKgCw3JHuHF5eeI2ubmmBh62kHEk7+UCmrRbrpYh+9F0PQFu30zHh2uoM
awfA0d4A866lFLyIYXH+AXIY3WNVK6Upg19kJfcs7PahS0zxGa8EbBXP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfjha6PL3kGO5KsG9uvzngYwsmwMB8GA1UdIwQY
MBaAFA1p4+5V3YYmdNRYZhujSQiwYX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUt
YjgzM2JkOWUwYjNhLzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUtYjgzM2JkOWUwYjNh
LzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYYp24cc
xtMCTZRJRcOzXP6XGd95rtlgtfL2NJ7ptDEtdDnjFxDaLqKJ/2YEGOGGdSkgm6kF
069wILhix8IzbK3Masblzhx61W2S9KsxLIpCuBPnKb3GNIPIHDbaPsSLklOykAyT
crwS4ELySzD4l4+p6BqIyycpeNx96feCSffyqCCnxvD7rSze7wyzqy2HoSKwdr/w
ATiVdL2DC9tmMQL2INZe89Zrpf79mAMXlQ7IizTQKyHrmreXruqfNjOL5epgs10w
Li3trekCS6WLI1L1FJ3akzi7sOFO5x1DWSvZ28BYfIU216DhclSzU5jYn/7u7gUz
efQ7mRDj/PkzYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client