Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: jotmksnpxtpGsz9c8fiIh7NDBBBc0JmKY8q5ORuWXRk=
Subject key identifier: C5:60:2A:0F:67:50:CF:6B:D4:EB:53:38:A5:51:B2:E6:42:AF:08:2D
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019A24E6170E842863E15B69C0DBF8B4C67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0665
Signing time: Mon 27 Oct 2025 09:00:50 +0000
Manifest this update: Mon 27 Oct 2025 09:00:50 +0000
Manifest next update: Tue 28 Oct 2025 09:00:50 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: iV5rIFhTjfnIUwwdiwsEJbEyAbRaplyX6rcF7eYK+cM=)
2: wTSz4RaVBPCmK0HhyQREVFlvLYM.roa (hash: wdXTmnLgaVa+d8xmW5YsOirXRbVi1BqCeeIaYwQr+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:17:0e:84:28:63:e1:5b:69:c0:db:f8:b4:c6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Oct 27 09:00:50 2025 GMT
Not After : Oct 28 09:00:50 2025 GMT
Subject: CN=c5602a0f6750cf6bd4eb5338a551b2e642af082d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:0d:51:9d:53:c2:b5:b4:79:81:98:cb:fb:
a1:fe:da:94:ca:8f:46:31:c2:79:82:7b:a1:c4:f1:
bd:29:fe:b4:b6:90:75:ee:44:20:5c:f7:14:fc:c3:
b5:eb:3b:99:c2:94:63:7f:41:1e:bc:8a:3e:14:a5:
53:bb:ef:f4:e6:00:1a:04:6b:b8:39:1d:22:9d:87:
7e:bc:ef:3e:3b:7f:14:5e:c3:d2:37:2a:7c:29:d3:
02:bf:55:76:ea:71:9c:04:99:80:cd:ba:b2:e6:48:
62:6c:af:37:9a:0a:91:be:a8:89:9c:78:b8:b6:2b:
27:a4:51:80:7e:ff:1b:17:a3:9a:20:dc:5e:48:1e:
b3:e1:bd:44:7e:51:e6:ca:d6:34:1c:75:88:f8:1c:
5a:31:84:c8:2d:6d:f6:8b:af:54:a6:64:10:17:d2:
6a:30:f8:e9:ed:70:a6:f4:92:b0:bb:1a:28:19:29:
94:ed:2f:db:b4:b1:5c:51:d7:ac:10:6a:97:b1:a7:
28:a1:6c:83:7f:ea:6a:27:65:40:c9:3d:17:a4:7e:
9b:7c:f5:d3:8f:41:d1:9b:d4:a3:5f:6c:63:88:52:
fb:9f:4a:6c:73:d5:6a:b1:41:96:81:af:8d:1e:e6:
f6:4a:22:42:fc:d2:96:66:f4:3e:9e:e2:bb:bd:7f:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:60:2A:0F:67:50:CF:6B:D4:EB:53:38:A5:51:B2:E6:42:AF:08:2D
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:21:60:29:e0:a3:b1:d4:9f:22:a3:e0:c6:bb:45:bb:ac:d7:
c5:d9:e9:11:75:29:05:49:19:8e:76:63:5b:74:85:98:85:c4:
77:82:ee:15:fb:b3:4f:cb:df:8b:9a:1c:49:b7:59:97:08:78:
dd:f7:81:e3:57:c1:a2:01:e7:18:8b:c8:6b:06:e2:9c:66:31:
70:4b:7c:01:5e:99:bf:3a:f2:7e:ff:c3:09:19:6b:00:80:fb:
87:99:35:79:26:ad:a4:f1:71:3f:5c:34:da:43:23:a1:5d:5b:
d9:7b:c5:78:78:54:7f:48:51:f6:4c:07:0f:ae:d0:85:7c:0b:
3d:10:65:66:e5:4a:22:b6:cd:47:51:c8:8d:f4:ad:88:45:16:
e5:12:b2:49:e3:ea:57:59:53:8a:df:f6:25:45:bf:cf:80:5a:
8d:a1:1b:8e:87:cd:dc:33:4b:80:3e:8d:1c:b6:71:16:10:44:
49:3d:ef:fa:aa:1d:00:df:38:7a:27:67:53:86:9b:8d:13:d6:
50:bd:16:4e:3f:ce:12:fc:1f:d7:d4:dc:0b:30:f8:d9:59:99:
61:40:aa:3b:7e:40:e1:ba:d2:56:bc:6d:2f:ab:a1:f8:9b:bc:
2c:37:4a:1f:59:e0:8c:56:55:c0:22:93:e5:51:12:83:18:e2:
7b:1a:d7:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5hcOhChj4VtpwNv4tMZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi
MzJlMjYwHhcNMjUxMDI3MDkwMDUwWhcNMjUxMDI4MDkwMDUwWjAzMTEwLwYDVQQD
EyhjNTYwMmEwZjY3NTBjZjZiZDRlYjUzMzhhNTUxYjJlNjQyYWYwODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H4NUZ1TwrW0eYGYy/uh/tqUyo9G
McJ5gnuhxPG9Kf60tpB17kQgXPcU/MO16zuZwpRjf0EevIo+FKVTu+/05gAaBGu4
OR0inYd+vO8+O38UXsPSNyp8KdMCv1V26nGcBJmAzbqy5khibK83mgqRvqiJnHi4
tisnpFGAfv8bF6OaINxeSB6z4b1EflHmytY0HHWI+BxaMYTILW32i69UpmQQF9Jq
MPjp7XCm9JKwuxooGSmU7S/btLFcUdesEGqXsacooWyDf+pqJ2VAyT0XpH6bfPXT
j0HRm9SjX2xjiFL7n0psc9VqsUGWga+NHub2SiJC/NKWZvQ+nuK7vX9O1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVgKg9nUM9r1OtTOKVRsuZCrwgtMB8GA1UdIwQY
MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt
ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4
LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyFgKeCj
sdSfIqPgxrtFu6zXxdnpEXUpBUkZjnZjW3SFmIXEd4LuFfuzT8vfi5ocSbdZlwh4
3feB41fBogHnGIvIawbinGYxcEt8AV6Zvzryfv/DCRlrAID7h5k1eSatpPFxP1w0
2kMjoV1b2XvFeHhUf0hR9kwHD67QhXwLPRBlZuVKIrbNR1HIjfStiEUW5RKySePq
V1lTit/2JUW/z4BajaEbjofN3DNLgD6NHLZxFhBEST3v+qodAN84eidnU4abjRPW
UL0WTj/OEvwf19TcCzD42VmZYUCqO35A4brSVrxtL6uh+Ju8LDdKH1ngjFZVwCKT
5VESgxjiexrXuA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:30:43 2025 by rpki-client