Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File: dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier: wCTyIDpCEBphNVF5UjDCy+KxoIgrvitp8qxRlB+xJwk=
Subject key identifier: 68:D6:0E:A2:A8:03:9E:9D:7E:1A:93:DB:13:F3:F0:14:1B:09:8F:DF
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer: /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial: 019A73A6EDACEB3A6DA35F74EE0C251F4A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number: 0B05
Signing time: Tue 11 Nov 2025 16:01:50 +0000
Manifest this update: Tue 11 Nov 2025 16:01:50 +0000
Manifest next update: Wed 12 Nov 2025 16:01:50 +0000
Files and hashes: 1: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: ox/LURVeZQJEBiUIyOPhYLWCI9KNc2OXg8OHp2Rpxv0=)
2: uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa (hash: JKMyKU4R0Hs07ETR6QJe5cFRF5p9HW1pjj1e0SHJl68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:ed:ac:eb:3a:6d:a3:5f:74:ee:0c:25:1f:4a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Validity
Not Before: Nov 11 16:01:50 2025 GMT
Not After : Nov 12 16:01:50 2025 GMT
Subject: CN=68d60ea2a8039e9d7e1a93db13f3f0141b098fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:d1:a3:7a:79:27:92:1f:dd:7d:d7:2a:6c:
1e:ab:b7:8d:c0:38:24:2a:ce:1d:86:20:a0:cb:f5:
a8:97:58:ca:d3:da:c5:06:c3:1e:7d:46:59:8b:94:
06:2f:44:db:78:7b:96:77:e4:10:e4:e4:31:74:4b:
58:24:af:4e:ad:67:d6:2c:85:c2:89:cc:f3:f4:b3:
03:8c:82:3a:8d:52:3f:6c:a0:47:e4:68:a4:e1:06:
38:97:8b:5f:06:60:1b:01:30:12:35:4a:10:56:45:
1b:d1:75:8d:01:4f:79:7a:63:84:46:20:a4:96:2a:
d5:39:06:4e:10:7b:ea:6c:87:5c:39:17:d1:a4:02:
89:6c:c5:49:9c:6c:45:72:9b:b5:5b:4b:66:31:85:
3a:59:3d:59:32:92:17:93:4b:7f:34:e8:51:cc:25:
97:7b:56:64:a1:05:b8:33:4c:a2:f4:a7:b0:a5:04:
57:be:64:1e:56:bb:c7:4a:83:9f:00:82:8e:4f:8c:
14:22:d5:4d:b5:66:cd:8c:70:bb:64:4a:87:b8:4c:
bb:80:33:20:47:61:b2:38:76:4a:df:f0:36:81:19:
70:d0:d2:07:31:3a:dc:2e:ba:a6:11:f1:f5:c5:6c:
30:14:4d:42:e6:3b:1d:10:1f:ba:41:fe:f4:ed:06:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D6:0E:A2:A8:03:9E:9D:7E:1A:93:DB:13:F3:F0:14:1B:09:8F:DF
X509v3 Authority Key Identifier:
keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:db:fc:13:28:3d:ac:b0:80:30:7b:bf:5c:5f:c4:0a:93:28:
4d:9b:c4:be:8e:7f:b3:11:7a:66:e6:33:c1:64:a8:86:fa:79:
a7:8e:c3:81:88:12:d6:90:e6:63:d7:50:d8:ba:7a:20:f5:57:
7d:6e:47:a0:65:1a:37:83:fa:7e:e9:29:9d:99:17:a1:74:6e:
69:3d:4e:b7:6d:e5:75:49:27:68:3e:39:18:21:a4:4a:1c:69:
93:98:c4:5b:71:ef:62:ff:b6:74:bb:01:10:39:a5:5e:7f:29:
ae:33:68:17:04:85:34:55:fc:0f:14:06:a2:71:a6:07:a9:96:
db:6c:ba:9d:f8:e7:8a:04:df:59:c9:ec:55:32:73:37:42:a0:
e5:66:3f:69:d5:bd:ee:e8:05:5d:63:b8:4c:74:6e:63:79:aa:
bb:37:f8:99:1f:ef:0c:37:44:fc:ca:9e:45:94:8e:1f:e2:dd:
b5:e0:66:5c:60:6a:4e:e0:05:02:3a:0d:69:c3:70:2d:ce:6c:
7b:f3:b7:f0:f4:0a:7d:79:b5:d5:71:59:2d:e6:3f:4e:d6:7f:
94:f5:39:bc:7a:46:63:ff:31:08:f3:41:a3:b4:2b:e4:5f:e8:
93:97:1e:22:60:d3:a3:e3:b8:97:2b:76:a4:d8:47:8e:54:c1:
b1:6b:f0:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzpu2s6zpto1907gwlH0pDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDEzNmMzY2RiZmQ1ZmI2MGNhZmQ0YTliMWQ0NzNhM2I2
NzI2MzUwHhcNMjUxMTExMTYwMTUwWhcNMjUxMTEyMTYwMTUwWjAzMTEwLwYDVQQD
Eyg2OGQ2MGVhMmE4MDM5ZTlkN2UxYTkzZGIxM2YzZjAxNDFiMDk4ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLTRo3p5J5If3X3XKmweq7eNwDgk
Ks4dhiCgy/Wol1jK09rFBsMefUZZi5QGL0TbeHuWd+QQ5OQxdEtYJK9OrWfWLIXC
iczz9LMDjII6jVI/bKBH5Gik4QY4l4tfBmAbATASNUoQVkUb0XWNAU95emOERiCk
lirVOQZOEHvqbIdcORfRpAKJbMVJnGxFcpu1W0tmMYU6WT1ZMpIXk0t/NOhRzCWX
e1ZkoQW4M0yi9KewpQRXvmQeVrvHSoOfAIKOT4wUItVNtWbNjHC7ZEqHuEy7gDMg
R2GyOHZK3/A2gRlw0NIHMTrcLrqmEfH1xWwwFE1C5jsdEB+6Qf707QYhSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjWDqKoA56dfhqT2xPz8BQbCY/fMB8GA1UdIwQY
MBaAFHZBNsPNv9X7YMr9SpsdRzo7ZyY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMt
ZTRkZjVhODdkNGVkLzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMtZTRkZjVhODdkNGVk
LzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNv8Eyg9
rLCAMHu/XF/ECpMoTZvEvo5/sxF6ZuYzwWSohvp5p47DgYgS1pDmY9dQ2Lp6IPVX
fW5HoGUaN4P6fukpnZkXoXRuaT1Ot23ldUknaD45GCGkShxpk5jEW3HvYv+2dLsB
EDmlXn8prjNoFwSFNFX8DxQGonGmB6mW22y6nfjnigTfWcnsVTJzN0Kg5WY/adW9
7ugFXWO4THRuY3mquzf4mR/vDDdE/MqeRZSOH+LdteBmXGBqTuAFAjoNacNwLc5s
e/O38PQKfXm11XFZLeY/TtZ/lPU5vHpGY/8xCPNBo7Qr5F/ok5ceImDTo+O4lyt2
pNhHjlTBsWvwsQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:41 2025 by rpki-client