Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: M7x7dgJBHovc5IJEUAnD/TPkherqk/rke/BisJVVXds=
Subject key identifier: 85:9C:BD:1E:62:FC:CC:32:2D:A9:0B:2D:CA:62:7B:59:90:88:BD:FC
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019A1CBFD87273319305C220BF232A6BF16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 19:02:06 +0000
Manifest this update: Sat 25 Oct 2025 19:02:06 +0000
Manifest next update: Sun 26 Oct 2025 19:02:06 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: 1a3aphDT5GSYXNTFWXKdgs0ulV7DBjuZEgy2FaIG+7c=)
2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:d8:72:73:31:93:05:c2:20:bf:23:2a:6b:f1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Oct 25 19:02:06 2025 GMT
Not After : Oct 26 19:02:06 2025 GMT
Subject: CN=859cbd1e62fccc322da90b2dca627b599088bdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:60:2e:a4:b8:b1:d6:e0:f3:12:cb:b3:51:
54:44:4a:dc:d8:70:fd:c8:19:c6:5d:62:c4:85:98:
78:39:66:ae:4f:a3:bd:15:35:e0:1f:69:63:6e:77:
69:79:7f:9e:f0:29:51:57:ce:7e:c1:eb:75:49:01:
f0:35:1f:b3:07:e8:0f:3b:01:31:d9:43:08:20:ea:
95:83:08:47:75:c6:7f:3c:ee:fe:5c:83:9a:5e:7a:
41:07:c4:27:ae:01:02:93:23:07:40:4e:84:6c:4d:
ee:30:b6:49:f4:7c:72:16:fd:42:1f:9e:78:22:76:
29:cd:e6:44:3e:c9:ba:a4:4e:90:75:3a:90:96:a2:
e1:f7:96:6d:21:48:69:d1:22:d1:6b:45:ff:5f:fb:
29:05:55:26:85:9f:be:73:ad:09:d4:24:43:d6:21:
0f:c6:90:41:89:33:2f:68:3d:a4:2e:44:8b:a6:78:
f0:79:0b:ec:73:b4:aa:44:49:84:19:ec:b8:ff:4a:
7b:ac:cb:12:de:28:2c:76:68:25:86:b3:d0:b5:b3:
33:e3:98:a4:74:6c:43:1e:9f:a2:8b:eb:1d:8e:f8:
85:73:9f:f9:2a:90:20:82:62:cc:78:88:15:c3:00:
17:26:d0:f5:a0:5c:96:7a:24:ae:b1:3e:d8:95:31:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:BD:1E:62:FC:CC:32:2D:A9:0B:2D:CA:62:7B:59:90:88:BD:FC
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:91:b6:80:dc:a7:cd:7e:5f:0e:86:f6:bc:31:ae:ca:3d:04:
ea:95:76:9b:8c:c5:23:87:e0:24:52:3c:fb:dc:f5:1e:16:2b:
25:36:c6:eb:4c:d0:19:0e:47:d2:fd:d8:51:3b:86:da:c1:1f:
3c:31:63:53:dc:a5:8d:54:ee:14:38:eb:1a:90:80:d6:bc:7b:
a7:3b:12:65:a4:0c:92:0b:06:17:bc:e4:e3:99:fa:b2:cf:b4:
a7:2c:cd:d5:62:83:dd:a4:48:c4:66:88:65:e1:5b:76:bb:f7:
b7:13:b1:40:18:75:59:1a:01:fb:1f:fd:1a:21:68:4e:06:ad:
f2:b4:39:3f:0c:30:40:53:5f:7a:45:6d:c2:fd:f9:1a:a7:77:
12:71:df:b2:02:2c:51:d2:50:27:13:55:17:4e:59:3b:9e:9a:
1f:ef:14:d2:7f:de:71:11:f4:b1:4b:01:a4:77:55:c3:0b:60:
44:a1:3e:c4:40:f1:98:fd:07:4b:da:b4:30:e5:ad:f8:74:d0:
15:6f:9b:7f:f5:c0:dd:f9:bd:69:71:de:60:c4:78:ed:a4:53:
2e:27:d5:99:34:dd:11:12:2a:60:3e:bf:3e:68:e4:85:7d:18:
5c:7c:d8:e4:09:0a:cc:c5:76:d1:0e:9f:e2:8f:19:66:d7:fd:
42:86:de:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocv9hyczGTBcIgvyMqa/FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NDgwNTI3ZDBiMzVjYWY5NWIzNzUwMmM0YzZmOWUzZTgx
ZmQ4YTMwHhcNMjUxMDI1MTkwMjA2WhcNMjUxMDI2MTkwMjA2WjAzMTEwLwYDVQQD
Eyg4NTljYmQxZTYyZmNjYzMyMmRhOTBiMmRjYTYyN2I1OTkwODhiZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWlgLqS4sdbg8xLLs1FURErc2HD9
yBnGXWLEhZh4OWauT6O9FTXgH2ljbndpeX+e8ClRV85+wet1SQHwNR+zB+gPOwEx
2UMIIOqVgwhHdcZ/PO7+XIOaXnpBB8QnrgECkyMHQE6EbE3uMLZJ9HxyFv1CH554
InYpzeZEPsm6pE6QdTqQlqLh95ZtIUhp0SLRa0X/X/spBVUmhZ++c60J1CRD1iEP
xpBBiTMvaD2kLkSLpnjweQvsc7SqREmEGey4/0p7rMsS3igsdmglhrPQtbMz45ik
dGxDHp+ii+sdjviFc5/5KpAggmLMeIgVwwAXJtD1oFyWeiSusT7YlTFr5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWcvR5i/MwyLakLLcpie1mQiL38MB8GA1UdIwQY
MBaAFHdIBSfQs1yvlbN1AsTG+ePoH9ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUt
NGRkMzg1M2EyMjQxLzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUtNGRkMzg1M2EyMjQx
LzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5G2gNyn
zX5fDob2vDGuyj0E6pV2m4zFI4fgJFI8+9z1HhYrJTbG60zQGQ5H0v3YUTuG2sEf
PDFjU9yljVTuFDjrGpCA1rx7pzsSZaQMkgsGF7zk45n6ss+0pyzN1WKD3aRIxGaI
ZeFbdrv3txOxQBh1WRoB+x/9GiFoTgat8rQ5PwwwQFNfekVtwv35Gqd3EnHfsgIs
UdJQJxNVF05ZO56aH+8U0n/ecRH0sUsBpHdVwwtgRKE+xEDxmP0HS9q0MOWt+HTQ
FW+bf/XA3fm9aXHeYMR47aRTLifVmTTdERIqYD6/PmjkhX0YXHzY5AkKzMV20Q6f
4o8ZZtf9QobeTQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 03:39:06 2025 by rpki-client