Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: 0D6L11Z6aG3ZCvLrpX1XNe7CR8c1LS8JCPtNxHbWp+o=
Subject key identifier: 7E:F4:85:BE:57:4D:61:F5:50:A2:64:A5:2D:D0:08:52:0B:64:F1:62
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 019A70A4D87C9D5697CED8E7D2469FD3F8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:42 +0000
Manifest this update: Tue 11 Nov 2025 02:00:42 +0000
Manifest next update: Wed 12 Nov 2025 02:00:42 +0000
Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: WiGKVfHaNx06z8M8XHA8TpERrB+0H8tUmPhtxDS99VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d8:7c:9d:56:97:ce:d8:e7:d2:46:9f:d3:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Nov 11 02:00:42 2025 GMT
Not After : Nov 12 02:00:42 2025 GMT
Subject: CN=7ef485be574d61f550a264a52dd008520b64f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:37:41:16:98:c5:0d:ca:80:6d:71:72:76:
5e:10:df:1a:bb:84:c9:2c:35:1e:95:14:c6:36:4d:
7a:ba:c1:be:f4:d5:fc:c9:f8:6f:c9:75:61:71:c7:
69:a1:b2:23:21:38:23:e6:ec:d4:5c:c1:29:5d:8e:
27:5d:f3:6f:f3:06:79:9c:47:6b:97:8a:11:19:37:
35:cf:1c:96:f0:f4:66:a5:b7:ca:39:7e:dc:ba:8c:
f1:45:88:25:36:f2:a6:84:3c:55:02:32:eb:55:32:
a7:c1:32:99:49:95:3d:0b:b1:16:ba:d8:f6:68:70:
94:0d:66:74:46:33:bf:ee:3b:30:44:c2:eb:35:a5:
2c:44:54:8e:1c:f3:0b:f8:eb:a7:f7:55:20:4a:70:
ad:fc:31:9e:97:ee:d8:9e:26:e2:54:46:c3:93:ab:
5c:51:78:a3:b8:c4:23:1a:a1:5e:53:bd:06:66:69:
09:40:5e:6a:ad:4a:3b:12:22:87:32:e7:ea:4d:01:
fd:ed:74:1e:2b:62:5e:17:c7:f1:b1:5e:bb:89:5a:
76:34:e5:db:19:48:37:b5:63:1c:04:29:51:6c:4e:
c2:b2:53:f3:55:ed:ad:4d:14:2a:43:a1:46:45:ab:
98:bf:5b:6a:62:67:54:2b:07:7e:f8:3b:16:84:0d:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:85:BE:57:4D:61:F5:50:A2:64:A5:2D:D0:08:52:0B:64:F1:62
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:51:48:0d:c8:ef:98:92:f9:7e:2a:25:05:79:b0:d8:0f:3a:
59:8f:57:c4:e3:a8:ea:e6:44:f2:b8:51:4e:f8:38:49:ea:38:
5c:eb:71:e1:78:ba:8e:2f:21:31:95:c8:a7:02:11:77:10:d9:
9c:b2:c1:8d:36:71:88:c1:e8:f5:91:eb:69:b4:52:23:12:35:
78:44:34:71:1e:37:7c:df:e6:e3:ab:97:55:db:be:7e:42:1c:
ba:dd:22:87:03:b3:cc:c5:fe:d4:c4:d4:c5:b5:ae:cd:43:53:
d2:1a:8c:84:97:d5:c4:cd:98:02:20:04:5c:54:29:0c:c7:88:
41:17:2e:f4:3c:06:40:04:26:69:33:85:ea:00:4a:bf:de:92:
ab:75:5f:ac:de:3c:4a:e6:2d:ad:25:19:3c:0f:23:11:e7:bb:
cb:88:ab:23:6b:5e:c9:ec:7b:e6:cf:a9:26:89:50:db:36:e7:
a1:41:68:e9:37:c6:b4:ad:55:36:8b:73:c8:23:4d:eb:77:a2:
c8:40:ab:5b:97:58:d3:1a:f2:79:86:47:09:7a:0a:5d:39:85:
c0:04:45:6c:cf:d9:6e:16:59:fd:87:83:cd:b4:08:3e:f1:ab:
f7:83:a5:29:e8:ba:d8:2c:bb:dc:e9:79:27:c1:61:85:34:5b:
25:da:84:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpNh8nVaXztjn0kaf0/jJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz
ODYwMWEwHhcNMjUxMTExMDIwMDQyWhcNMjUxMTEyMDIwMDQyWjAzMTEwLwYDVQQD
Eyg3ZWY0ODViZTU3NGQ2MWY1NTBhMjY0YTUyZGQwMDg1MjBiNjRmMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucE3QRaYxQ3KgG1xcnZeEN8au4TJ
LDUelRTGNk16usG+9NX8yfhvyXVhccdpobIjITgj5uzUXMEpXY4nXfNv8wZ5nEdr
l4oRGTc1zxyW8PRmpbfKOX7cuozxRYglNvKmhDxVAjLrVTKnwTKZSZU9C7EWutj2
aHCUDWZ0RjO/7jswRMLrNaUsRFSOHPML+Oun91UgSnCt/DGel+7YnibiVEbDk6tc
UXijuMQjGqFeU70GZmkJQF5qrUo7EiKHMufqTQH97XQeK2JeF8fxsV67iVp2NOXb
GUg3tWMcBClRbE7CslPzVe2tTRQqQ6FGRauYv1tqYmdUKwd++DsWhA3/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH70hb5XTWH1UKJkpS3QCFILZPFiMB8GA1UdIwQY
MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt
NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz
LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1FIDcjv
mJL5fiolBXmw2A86WY9XxOOo6uZE8rhRTvg4Seo4XOtx4Xi6ji8hMZXIpwIRdxDZ
nLLBjTZxiMHo9ZHrabRSIxI1eEQ0cR43fN/m46uXVdu+fkIcut0ihwOzzMX+1MTU
xbWuzUNT0hqMhJfVxM2YAiAEXFQpDMeIQRcu9DwGQAQmaTOF6gBKv96Sq3VfrN48
SuYtrSUZPA8jEee7y4irI2teyex75s+pJolQ2zbnoUFo6TfGtK1VNotzyCNN63ei
yECrW5dY0xryeYZHCXoKXTmFwARFbM/ZbhZZ/YeDzbQIPvGr94OlKei62Cy73Ol5
J8FhhTRbJdqEVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:56 2025 by rpki-client