Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: uGVwly0h0x74Tihem8lgHuiUUC/X98P2T3ferJpOT70=
Subject key identifier: 1F:82:CB:3D:5E:79:01:71:94:68:81:4F:FB:1F:57:B4:57:21:B8:3B
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 019A71EEF34B275D71FED696BB4043896B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: ak3rBndKpq/aZn8dMIFuOVrLjqchmSIiHFclu8+nlDk=)
2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f3:4b:27:5d:71:fe:d6:96:bb:40:43:89:6b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=1f82cb3d5e7901719468814ffb1f57b45721b83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:eb:c6:0b:7d:cc:78:50:4f:6d:bf:0e:8c:
68:e9:0c:54:99:3a:80:ab:06:ec:41:32:9e:b3:7a:
78:b4:41:c6:92:a5:0c:cd:e9:3a:41:75:51:16:d4:
17:01:02:27:e1:3c:39:fa:7b:94:3b:e2:d2:94:fd:
d2:4e:b3:e5:39:fc:2c:a7:97:1b:12:3c:3a:cc:35:
0f:63:00:25:94:51:f7:f7:14:e7:eb:72:c2:e6:f6:
bb:94:b4:9a:17:a4:3b:81:11:c6:e0:d5:2e:86:70:
78:af:77:95:fe:19:b1:d6:ac:58:2a:02:05:0f:a2:
54:ed:c3:61:4d:86:84:b1:c0:6b:30:77:14:05:7a:
26:f0:1e:9e:15:c4:d2:bf:b5:bf:0e:72:2c:b0:dc:
6e:31:0d:8c:13:39:40:66:2f:40:c5:5b:5a:a1:0a:
74:a0:7c:ec:25:eb:95:50:65:c7:b8:08:2b:ed:a0:
08:19:69:73:f8:55:b5:e4:af:a6:5c:b2:b8:88:fa:
d9:d5:ce:39:e8:3b:1a:18:7b:60:30:c2:4f:21:d5:
a5:28:6d:99:bd:9f:a7:7d:fb:b0:e3:ce:3e:b5:a7:
0b:14:97:48:6e:8f:f1:60:a1:27:46:39:7f:fc:cc:
a3:8e:5b:46:35:8e:54:7d:f6:e0:68:92:b3:cd:8a:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:CB:3D:5E:79:01:71:94:68:81:4F:FB:1F:57:B4:57:21:B8:3B
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:c3:0d:16:b5:ad:ab:62:8b:00:34:b7:70:c9:6c:c8:f2:
49:10:61:a1:74:5b:25:31:b9:46:1e:9a:30:dd:7c:0c:84:ed:
16:e1:ba:9a:e7:e5:f2:83:66:88:6e:ba:36:06:22:87:00:7c:
0b:54:1a:51:ef:97:74:cb:0d:d9:cc:52:74:4a:10:01:bc:e6:
f0:d1:f5:4e:08:de:99:2e:55:c4:9c:bd:7b:a9:2c:dd:2c:ab:
8d:ef:df:99:80:1d:e8:9d:9a:63:9c:fd:bd:44:1d:ef:33:3e:
a8:98:0e:f0:c6:bd:6d:df:0e:af:2b:1d:9e:b4:7c:56:7d:03:
0b:1c:ba:ca:ac:bd:7f:96:fb:d5:96:72:85:db:fb:2d:03:f4:
78:d0:7a:2c:71:68:d3:39:4f:de:c4:71:41:ec:6b:76:72:a2:
40:fc:17:08:0f:1b:86:34:b5:3e:86:7b:3a:6b:30:d0:d1:4e:
65:38:2b:b4:f4:cb:4d:32:1e:8b:0c:80:b2:ec:6a:fc:35:86:
c4:f2:5d:1e:f9:48:02:8b:15:92:6c:45:c6:62:7b:43:1f:4e:
2a:50:b2:fd:5b:ea:ca:48:b0:c4:3a:bf:55:23:7a:21:3b:1d:
7a:33:93:f5:b8:83:87:c2:65:d6:9e:4d:23:c0:5f:89:9c:55:
cf:84:e7:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vNLJ11x/taWu0BDiWtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh
YzYzY2MwHhcNMjUxMTExMDgwMTE2WhcNMjUxMTEyMDgwMTE2WjAzMTEwLwYDVQQD
EygxZjgyY2IzZDVlNzkwMTcxOTQ2ODgxNGZmYjFmNTdiNDU3MjFiODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNnrxgt9zHhQT22/Doxo6QxUmTqA
qwbsQTKes3p4tEHGkqUMzek6QXVRFtQXAQIn4Tw5+nuUO+LSlP3STrPlOfwsp5cb
Ejw6zDUPYwAllFH39xTn63LC5va7lLSaF6Q7gRHG4NUuhnB4r3eV/hmx1qxYKgIF
D6JU7cNhTYaEscBrMHcUBXom8B6eFcTSv7W/DnIssNxuMQ2MEzlAZi9AxVtaoQp0
oHzsJeuVUGXHuAgr7aAIGWlz+FW15K+mXLK4iPrZ1c456DsaGHtgMMJPIdWlKG2Z
vZ+nffuw484+tacLFJdIbo/xYKEnRjl//MyjjltGNY5UffbgaJKzzYrXYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+Cyz1eeQFxlGiBT/sfV7RXIbg7MB8GA1UdIwQY
MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt
MWQxOTQ5OWQwOThmLzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm
LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqzDDRa1
ratiiwA0t3DJbMjySRBhoXRbJTG5Rh6aMN18DITtFuG6mufl8oNmiG66NgYihwB8
C1QaUe+XdMsN2cxSdEoQAbzm8NH1TgjemS5VxJy9e6ks3Syrje/fmYAd6J2aY5z9
vUQd7zM+qJgO8Ma9bd8OrysdnrR8Vn0DCxy6yqy9f5b71ZZyhdv7LQP0eNB6LHFo
0zlP3sRxQexrdnKiQPwXCA8bhjS1PoZ7Omsw0NFOZTgrtPTLTTIeiwyAsuxq/DWG
xPJdHvlIAosVkmxFxmJ7Qx9OKlCy/VvqykiwxDq/VSN6ITsdejOT9biDh8Jl1p5N
I8BfiZxVz4TnrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:49 2025 by rpki-client