Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: +NaMPq7km7TAG2jlIN08qDxCLTYk9Et3E3baRMGqC7Q=
Subject key identifier: 13:5E:AD:6C:62:31:BA:CC:8E:31:93:0E:03:C8:5E:B7:2B:9A:E8:1D
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 019A72265683604931023A99DEAA7D678E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1340
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: hxCYOhWaH6HTK4GGnt9OqeGODgSS8F2X+TmWAfEQzxU=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:56:83:60:49:31:02:3a:99:de:aa:7d:67:8e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=135ead6c6231bacc8e31930e03c85eb72b9ae81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:1b:86:c1:b6:ee:08:86:bf:dc:9e:50:4a:
a0:c4:4b:08:f5:41:8a:a8:f1:71:ce:fa:40:3a:a3:
3f:b8:31:44:fb:15:b4:d8:08:11:6d:9f:19:cd:54:
5a:68:f3:88:d0:46:30:fa:99:06:74:a9:1d:d2:6c:
f0:32:3f:96:cf:82:60:19:8b:be:35:c3:e0:91:db:
46:53:54:41:60:99:d3:e4:c0:2b:e9:a8:36:a9:71:
bd:ef:09:13:7b:aa:eb:1f:dc:12:87:28:69:04:00:
8a:78:e0:f2:8d:82:d4:e5:2c:4c:74:98:07:df:b9:
0e:35:5e:e1:66:b5:ce:ad:9f:10:96:bc:b6:35:7d:
da:69:8b:71:35:70:6c:ba:18:80:dd:68:68:05:69:
0b:68:42:42:d4:40:e3:f8:5e:d1:bd:c2:6f:fc:52:
97:93:6e:f6:0b:13:39:8a:74:b3:23:0b:1d:d9:28:
31:25:99:0a:8d:78:3a:6a:c3:be:00:83:92:7b:45:
d8:ec:1a:70:48:45:c2:6c:9e:5a:1a:57:89:f8:e4:
ae:de:8d:4c:2a:77:f5:d2:f7:b8:1a:42:c7:3c:13:
d2:41:c7:40:9e:29:58:11:10:1e:55:27:f3:1b:fd:
06:bc:93:e8:a9:bd:77:f3:bd:fa:56:3d:a6:79:13:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5E:AD:6C:62:31:BA:CC:8E:31:93:0E:03:C8:5E:B7:2B:9A:E8:1D
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c5:60:ef:ba:e9:86:c1:c9:3a:51:00:16:9c:7c:3c:81:3c:
42:fb:54:d7:61:42:37:60:e2:a8:cd:a2:61:ae:87:6e:e8:9b:
a5:ff:24:d7:18:3b:cb:f0:ca:e5:3d:66:08:18:cb:88:61:44:
99:e7:c1:29:5b:6b:a9:2a:4a:d2:7b:03:2a:49:c5:7f:02:6c:
5f:59:3d:77:b7:c4:cd:bf:0a:8e:9e:a7:6a:09:24:51:2f:87:
10:38:f9:41:ac:7e:b0:0a:ca:e6:41:23:93:d9:a7:74:35:f7:
d9:53:de:2f:7b:9f:21:02:f0:ca:c6:8f:79:11:8c:6a:46:d8:
b4:f2:c4:da:df:b8:29:e7:70:8c:bd:34:59:20:68:6a:99:86:
d9:a3:eb:92:5d:ca:2a:75:31:58:1a:e8:ca:91:7c:bb:4f:f2:
c9:02:f2:23:31:ec:7b:ba:33:69:9c:ee:8f:21:50:5f:f0:dc:
7a:f7:5e:1e:cd:2a:52:41:c6:0b:0a:7b:97:42:1c:30:1a:fa:
c4:58:a2:4e:45:92:32:ef:d2:cb:2f:aa:0f:e6:59:ed:81:17:
45:85:66:8b:e5:c3:12:00:48:41:56:50:87:02:df:68:dd:5a:
91:6c:c8:ec:8c:10:c2:3a:44:39:9b:87:a3:96:68:db:cd:13:
ec:be:71:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlaDYEkxAjqZ3qp9Z44SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjUxMTExMDkwMTQ2WhcNMjUxMTEyMDkwMTQ2WjAzMTEwLwYDVQQD
EygxMzVlYWQ2YzYyMzFiYWNjOGUzMTkzMGUwM2M4NWViNzJiOWFlODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC4bhsG27giGv9yeUEqgxEsI9UGK
qPFxzvpAOqM/uDFE+xW02AgRbZ8ZzVRaaPOI0EYw+pkGdKkd0mzwMj+Wz4JgGYu+
NcPgkdtGU1RBYJnT5MAr6ag2qXG97wkTe6rrH9wShyhpBACKeODyjYLU5SxMdJgH
37kONV7hZrXOrZ8Qlry2NX3aaYtxNXBsuhiA3WhoBWkLaEJC1EDj+F7RvcJv/FKX
k272CxM5inSzIwsd2SgxJZkKjXg6asO+AIOSe0XY7BpwSEXCbJ5aGleJ+OSu3o1M
Knf10ve4GkLHPBPSQcdAnilYERAeVSfzG/0GvJPoqb138736Vj2meRP5ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNerWxiMbrMjjGTDgPIXrcrmugdMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8Vg77rp
hsHJOlEAFpx8PIE8QvtU12FCN2DiqM2iYa6Hbuibpf8k1xg7y/DK5T1mCBjLiGFE
mefBKVtrqSpK0nsDKknFfwJsX1k9d7fEzb8Kjp6nagkkUS+HEDj5Qax+sArK5kEj
k9mndDX32VPeL3ufIQLwysaPeRGMakbYtPLE2t+4KedwjL00WSBoapmG2aPrkl3K
KnUxWBroypF8u0/yyQLyIzHse7ozaZzujyFQX/DcevdeHs0qUkHGCwp7l0IcMBr6
xFiiTkWSMu/Syy+qD+ZZ7YEXRYVmi+XDEgBIQVZQhwLfaN1akWzI7IwQwjpEOZuH
o5Zo280T7L5xFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:36 2025 by rpki-client