Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier: HwJVIqcjqGBayjqDXg5abofFKuGxdUO2X660D1DnFfU=
Subject key identifier: 70:71:BE:54:89:A4:47:75:67:A3:63:3C:C3:24:EF:E7:2F:DE:D8:99
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 019A7112C646640BDC45973CC64817B79561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number: 084F
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: 9jPL1mYbPuTOI7KboAOWMmF47Sk1TMsotX5C+dcBKI4=)
2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c6:46:64:0b:dc:45:97:3c:c6:48:17:b7:95:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=7071be5489a4477567a3633cc324efe72fded899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:03:03:49:44:ed:03:ab:b9:7f:66:ae:e4:d3:
4e:a2:d4:46:4a:6e:65:1f:a2:25:74:5f:13:cf:67:
ce:c7:05:d1:70:63:8b:16:d0:0c:80:dd:e0:fa:30:
e5:1b:88:77:1c:20:a5:74:2e:83:5b:cf:bf:9a:76:
73:8d:e7:bd:af:97:42:1c:99:27:ac:17:78:0d:c4:
70:e6:51:9f:08:2f:34:18:c3:a9:7c:ed:e2:e5:d9:
75:83:7f:0e:fe:6a:b3:74:a5:99:fc:b7:51:06:97:
2d:f8:d8:74:3a:bc:06:99:78:1f:95:a0:f4:05:11:
9b:55:6f:b1:39:fb:90:28:8a:e5:dd:12:17:64:d0:
d4:11:70:45:90:d1:c8:bb:ca:23:0d:67:b8:ef:92:
29:e6:cb:92:c8:cd:bc:cf:c8:1c:c3:bb:6e:6c:c6:
ad:92:98:27:3e:23:b6:8f:8a:f3:ce:87:01:ea:5e:
46:cb:75:d8:15:7b:68:8f:b4:40:4e:eb:0a:bd:e7:
5c:89:14:7a:ca:35:c3:6f:cd:28:57:15:e2:4e:7e:
89:5b:fe:f5:4e:e4:75:25:28:5d:03:04:a2:64:34:
1c:51:aa:9c:89:d3:76:da:ee:16:7d:cf:22:cb:a4:
cc:61:06:65:67:f5:7c:67:4c:73:57:b6:81:e2:a4:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:BE:54:89:A4:47:75:67:A3:63:3C:C3:24:EF:E7:2F:DE:D8:99
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:38:b4:8d:5a:d7:4c:8c:c1:4d:0e:cb:0c:fc:68:ae:2b:e6:
f9:31:b5:e0:73:b9:3b:17:af:fc:47:18:c3:ef:3f:19:4d:c9:
19:c5:c1:88:fe:4b:26:25:81:60:dc:52:b3:a9:95:9c:39:a8:
47:43:64:9e:77:d1:4a:d6:cd:6c:0d:9e:b0:61:8c:75:b7:d6:
25:89:93:27:95:87:1b:58:77:42:9c:5e:a2:da:30:20:1b:97:
4e:c3:9b:73:57:db:15:a4:0b:b7:88:b6:68:d4:b2:1a:e3:72:
6d:44:3d:f7:6f:6d:70:a6:18:8f:28:bb:5c:a4:62:0b:4e:2c:
3d:59:de:f2:35:a7:7b:27:1c:b8:9a:78:00:59:e9:ba:4a:f8:
1d:e2:4b:1a:9b:bb:14:4f:47:fb:a6:c3:2f:37:c8:a0:c0:03:
d2:27:df:9e:20:d0:b3:42:cb:c1:7b:40:4a:e0:ea:bb:47:a6:
a7:95:73:e1:c0:e7:77:1c:7c:50:7f:3a:82:93:f2:bd:a6:7b:
50:c4:31:49:69:4f:4f:ca:58:9c:df:ac:5a:a1:f6:c3:4a:8c:
9c:3e:63:f4:61:6b:8d:8d:5c:19:97:10:6c:f6:3b:92:3a:62:
13:11:65:a2:a8:0d:55:ee:64:ea:37:84:88:45:d3:73:da:6e:
91:a0:f7:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEsZGZAvcRZc8xkgXt5VhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3
ZTE5ZWQwHhcNMjUxMTExMDQwMDQ3WhcNMjUxMTEyMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg3MDcxYmU1NDg5YTQ0Nzc1NjdhMzYzM2NjMzI0ZWZlNzJmZGVkODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwMDSUTtA6u5f2au5NNOotRGSm5l
H6IldF8Tz2fOxwXRcGOLFtAMgN3g+jDlG4h3HCCldC6DW8+/mnZzjee9r5dCHJkn
rBd4DcRw5lGfCC80GMOpfO3i5dl1g38O/mqzdKWZ/LdRBpct+Nh0OrwGmXgflaD0
BRGbVW+xOfuQKIrl3RIXZNDUEXBFkNHIu8ojDWe475Ip5suSyM28z8gcw7tubMat
kpgnPiO2j4rzzocB6l5Gy3XYFXtoj7RATusKvedciRR6yjXDb80oVxXiTn6JW/71
TuR1JShdAwSiZDQcUaqcidN22u4Wfc8iy6TMYQZlZ/V8Z0xzV7aB4qSEPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBxvlSJpEd1Z6NjPMMk7+cv3tiZMB8GA1UdIwQY
MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt
OTJkNDE4ZThkOWE1LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1
LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzi0jVrX
TIzBTQ7LDPxorivm+TG14HO5Oxev/EcYw+8/GU3JGcXBiP5LJiWBYNxSs6mVnDmo
R0NknnfRStbNbA2esGGMdbfWJYmTJ5WHG1h3QpxeotowIBuXTsObc1fbFaQLt4i2
aNSyGuNybUQ9929tcKYYjyi7XKRiC04sPVne8jWneyccuJp4AFnpukr4HeJLGpu7
FE9H+6bDLzfIoMAD0iffniDQs0LLwXtASuDqu0emp5Vz4cDndxx8UH86gpPyvaZ7
UMQxSWlPT8pYnN+sWqH2w0qMnD5j9GFrjY1cGZcQbPY7kjpiExFloqgNVe5k6jeE
iEXTc9pukaD36A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:09 2025 by rpki-client