Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: 310HCeHC/BrwljyW3KfV8VzoTKA0kxpmZn/WR+3vpY4=
Subject key identifier: 0A:0A:E4:21:92:96:0B:84:FA:79:29:97:61:B5:7D:C9:14:B8:08:80
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 019A730161C69F5163B0EFBF2FCF8ED63130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 10E5
Signing time: Tue 11 Nov 2025 13:01:01 +0000
Manifest this update: Tue 11 Nov 2025 13:01:01 +0000
Manifest next update: Wed 12 Nov 2025 13:01:01 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: pSv0CWZtWQFhq17xtE1YrZGs1fpcytHI0Hnip4HUE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:61:c6:9f:51:63:b0:ef:bf:2f:cf:8e:d6:31:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Nov 11 13:01:01 2025 GMT
Not After : Nov 12 13:01:01 2025 GMT
Subject: CN=0a0ae42192960b84fa79299761b57dc914b80880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:38:c6:fd:44:07:1a:d4:20:40:ba:aa:64:
ff:f7:0b:7a:ca:78:aa:2e:01:a2:62:82:a0:b2:98:
c6:fc:ab:f1:1f:09:08:d0:1f:db:57:5b:f5:6b:24:
06:ff:bf:69:e3:91:7f:c4:7b:90:66:05:d2:4a:c1:
98:db:0a:9a:e0:51:03:fd:42:05:bf:85:d0:a2:58:
48:f2:b3:4d:87:e3:c0:4c:c9:6f:36:70:6f:5f:d0:
4f:b1:00:18:a6:44:bc:c4:e3:1c:04:f3:c9:fd:91:
ce:59:2d:3f:b7:db:58:32:d9:8b:96:4b:25:22:44:
3e:dc:20:64:40:d2:fc:76:22:2d:b7:8a:c2:fe:0a:
16:ed:2c:1e:15:57:9f:50:9e:19:d2:e9:ba:cf:ca:
02:ef:0c:5e:0f:19:b4:99:f3:53:01:b5:cf:08:de:
06:76:2e:f8:b7:fb:31:d5:98:5d:8e:6f:29:53:a8:
4e:ce:12:55:e0:b3:ac:f5:f2:80:3c:87:bf:ab:4b:
f3:b1:ee:94:70:37:d7:91:55:7b:2c:2f:d8:1b:c3:
62:68:99:e0:bf:71:2e:c4:01:e8:0e:10:7c:51:76:
c5:cb:12:0e:1e:f2:9b:5c:6e:c0:bb:33:34:82:81:
81:4e:01:1e:66:0d:16:25:ca:47:2f:bd:b6:f4:2a:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0A:E4:21:92:96:0B:84:FA:79:29:97:61:B5:7D:C9:14:B8:08:80
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:aa:84:9d:fc:cb:71:6d:fa:87:a6:a3:ef:4d:42:c2:f2:74:
73:df:7e:cf:cc:c0:ed:c2:c1:e1:82:07:4a:4a:e6:fd:ef:8b:
9e:44:8c:b6:e1:e0:9c:b3:b0:2b:a1:18:c8:4e:d6:47:4f:78:
cd:f9:87:5d:32:c6:03:06:67:8e:e6:09:89:2f:54:5a:ee:f1:
c9:67:ae:68:52:eb:2d:d9:6b:7a:4c:1b:22:27:87:cc:37:18:
a2:39:06:f1:5b:cc:bb:a8:c9:75:76:0e:5b:71:a4:be:f7:98:
ae:a1:5e:d9:4c:89:ee:07:bc:bb:c6:89:64:b4:93:29:2f:66:
bc:8b:2b:37:38:17:8f:b1:6c:b1:9c:f7:4c:d6:93:0d:ef:88:
c0:3e:f1:81:6c:74:44:a0:2a:0f:fd:f4:ba:2d:cb:55:fe:be:
07:3a:dd:ed:6f:a4:9f:3e:e7:7d:f6:c5:f1:73:67:9f:d0:9f:
a3:6b:2f:9b:a4:d4:f4:63:30:48:05:69:66:69:a5:4c:9a:34:
29:b8:cc:32:b5:51:0f:ce:c3:b8:13:de:b6:e6:de:1b:8c:b9:
c0:c4:96:29:1e:c9:7a:7e:b9:65:95:69:a1:80:59:5f:66:f8:
1e:75:f9:8a:25:95:94:17:75:cb:37:ef:2a:bd:9a:0d:98:f3:
57:2e:af:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAWHGn1FjsO+/L8+O1jEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzFjY2FhNTg0ZmIzOTE0ZTc5MmZkNTM5MGUzYmEyZDMw
MzMzOGMwHhcNMjUxMTExMTMwMTAxWhcNMjUxMTEyMTMwMTAxWjAzMTEwLwYDVQQD
EygwYTBhZTQyMTkyOTYwYjg0ZmE3OTI5OTc2MWI1N2RjOTE0YjgwODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdU4xv1EBxrUIEC6qmT/9wt6yniq
LgGiYoKgspjG/KvxHwkI0B/bV1v1ayQG/79p45F/xHuQZgXSSsGY2wqa4FED/UIF
v4XQolhI8rNNh+PATMlvNnBvX9BPsQAYpkS8xOMcBPPJ/ZHOWS0/t9tYMtmLlksl
IkQ+3CBkQNL8diItt4rC/goW7SweFVefUJ4Z0um6z8oC7wxeDxm0mfNTAbXPCN4G
di74t/sx1Zhdjm8pU6hOzhJV4LOs9fKAPIe/q0vzse6UcDfXkVV7LC/YG8NiaJng
v3EuxAHoDhB8UXbFyxIOHvKbXG7AuzM0goGBTgEeZg0WJcpHL7229CpmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoK5CGSlguE+nkpl2G1fckUuAiAMB8GA1UdIwQY
MBaAFA3BzKpYT7ORTnkv1TkOO6LTAzOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yM2RhMWMtNDM1Yy00YzgzLWEyOTUt
YmY4NWNkMjU0MjdlLzEvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yM2RhMWMtNDM1Yy00YzgzLWEyOTUtYmY4NWNkMjU0Mjdl
LzEvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqqEnfzL
cW36h6aj701CwvJ0c99+z8zA7cLB4YIHSkrm/e+LnkSMtuHgnLOwK6EYyE7WR094
zfmHXTLGAwZnjuYJiS9UWu7xyWeuaFLrLdlrekwbIieHzDcYojkG8VvMu6jJdXYO
W3GkvveYrqFe2UyJ7ge8u8aJZLSTKS9mvIsrNzgXj7FssZz3TNaTDe+IwD7xgWx0
RKAqD/30ui3LVf6+Bzrd7W+knz7nffbF8XNnn9Cfo2svm6TU9GMwSAVpZmmlTJo0
KbjMMrVRD87DuBPetubeG4y5wMSWKR7Jen65ZZVpoYBZX2b4HnX5iiWVlBd1yzfv
Kr2aDZjzVy6vlA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:05 2025 by rpki-client