Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: 2LdOLbUxyJrfoz4dd/dX+RLl6v63W+kxlRgNWPdgInw=
Subject key identifier: A3:32:79:FB:B3:F7:DE:05:6D:8B:99:A9:36:F2:6C:7C:43:82:1F:11
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019A2289F7FFBB3CB7990A407E74FF33543F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1701
Signing time: Sun 26 Oct 2025 22:00:58 +0000
Manifest this update: Sun 26 Oct 2025 22:00:58 +0000
Manifest next update: Mon 27 Oct 2025 22:00:58 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: I1pULpGXvxd4Us0C4vF5piO+9JaAqDbjPra6tk1cHBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:f7:ff:bb:3c:b7:99:0a:40:7e:74:ff:33:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Oct 26 22:00:58 2025 GMT
Not After : Oct 27 22:00:58 2025 GMT
Subject: CN=a33279fbb3f7de056d8b99a936f26c7c43821f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:74:23:ce:bb:e0:a7:c4:8f:ff:c5:8f:5b:
e0:a5:38:7c:be:28:f2:f1:13:c9:66:df:ee:72:61:
21:f6:fa:e8:e6:ae:3b:b8:4b:46:88:d9:2c:66:db:
84:7c:3c:dc:9a:f3:23:92:3f:d5:67:71:20:64:e5:
42:c1:ae:26:6a:47:7a:57:7e:3d:96:17:7b:3e:f0:
ed:9c:c8:2d:6d:75:83:28:b8:3a:21:b4:e5:fe:bb:
ab:71:43:47:32:04:b6:10:ea:d4:e4:bd:aa:27:9a:
97:ea:ab:39:a5:54:3f:10:97:45:a1:9e:8d:e2:88:
41:3d:8e:a4:52:14:08:c0:43:9d:b8:83:a1:56:d1:
54:15:cc:ec:64:29:32:e0:0d:6b:49:1c:f0:db:28:
35:26:09:20:a3:44:7e:c9:af:02:50:74:6b:8e:98:
4d:56:80:0f:1c:66:6b:24:28:12:e9:a1:1a:f6:7d:
e5:1f:94:2e:8c:af:9c:be:e1:2f:c8:4e:4e:a5:ec:
46:f4:cb:eb:d0:36:6e:93:26:0c:80:42:37:43:7e:
ba:47:eb:25:6b:07:3c:1b:1f:5c:ec:c6:6d:71:6e:
3b:c7:84:74:92:6d:be:34:7f:79:c9:92:f3:e7:1a:
be:cc:7f:8b:71:29:f2:aa:4d:4a:f6:f5:14:80:e4:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:32:79:FB:B3:F7:DE:05:6D:8B:99:A9:36:F2:6C:7C:43:82:1F:11
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cc:c6:e6:a1:63:60:c4:6d:d1:a2:54:95:f3:d8:f2:b4:56:
13:ed:0c:e4:0e:85:b7:6b:ba:c3:d4:9d:10:8c:a5:ab:ac:90:
83:8d:6c:b3:31:50:9f:ae:cb:c0:51:23:29:03:1d:18:3d:d2:
73:30:30:99:0e:bc:5f:c3:39:64:ab:21:a2:d6:41:45:bf:a9:
63:68:75:40:ca:23:84:2e:cf:be:8f:f1:b5:84:73:e2:ea:24:
82:35:bc:0f:d7:4b:3f:42:cb:1e:b0:26:f5:af:4e:18:23:16:
4b:c4:82:71:4d:ff:41:55:6e:c5:1f:0d:6f:2d:68:b9:e6:8e:
43:9f:92:45:da:36:5d:d3:ab:91:38:c3:eb:9f:33:4e:87:4e:
5a:87:44:26:b8:c5:22:97:96:19:8b:38:7e:ce:0c:eb:9d:60:
08:2e:ce:a5:37:7c:99:44:a9:e6:43:b0:4c:7c:9d:3d:eb:54:
48:d0:05:ae:99:49:aa:f6:d1:2b:9b:d5:d7:1e:38:72:ff:6a:
4a:fe:28:8d:ba:db:d9:78:ff:b8:05:9b:f2:e3:ce:17:bf:b3:
28:66:c2:69:2d:62:ec:74:2e:21:f9:70:7d:1d:c0:1a:4e:e5:
70:fb:35:8d:70:73:7d:28:ce:52:b2:dc:27:e0:1c:3f:f3:61:
b1:43:12:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiff/uzy3mQpAfnT/M1Q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi
NjFiMDUwHhcNMjUxMDI2MjIwMDU4WhcNMjUxMDI3MjIwMDU4WjAzMTEwLwYDVQQD
EyhhMzMyNzlmYmIzZjdkZTA1NmQ4Yjk5YTkzNmYyNmM3YzQzODIxZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1d0I8674KfEj//Fj1vgpTh8vijy
8RPJZt/ucmEh9vro5q47uEtGiNksZtuEfDzcmvMjkj/VZ3EgZOVCwa4makd6V349
lhd7PvDtnMgtbXWDKLg6IbTl/rurcUNHMgS2EOrU5L2qJ5qX6qs5pVQ/EJdFoZ6N
4ohBPY6kUhQIwEOduIOhVtFUFczsZCky4A1rSRzw2yg1Jgkgo0R+ya8CUHRrjphN
VoAPHGZrJCgS6aEa9n3lH5QujK+cvuEvyE5OpexG9Mvr0DZukyYMgEI3Q366R+sl
awc8Gx9c7MZtcW47x4R0km2+NH95yZLz5xq+zH+LcSnyqk1K9vUUgOTqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMyefuz994FbYuZqTbybHxDgh8RMB8GA1UdIwQY
MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt
YzgyZjQyNGI2ZDBkLzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk
LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMzG5qFj
YMRt0aJUlfPY8rRWE+0M5A6Ft2u6w9SdEIylq6yQg41sszFQn67LwFEjKQMdGD3S
czAwmQ68X8M5ZKshotZBRb+pY2h1QMojhC7Pvo/xtYRz4uokgjW8D9dLP0LLHrAm
9a9OGCMWS8SCcU3/QVVuxR8Nby1oueaOQ5+SRdo2XdOrkTjD658zTodOWodEJrjF
IpeWGYs4fs4M651gCC7OpTd8mUSp5kOwTHydPetUSNAFrplJqvbRK5vV1x44cv9q
Sv4ojbrb2Xj/uAWb8uPOF7+zKGbCaS1i7HQuIflwfR3AGk7lcPs1jXBzfSjOUrLc
J+AcP/NhsUMSLw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:29:46 2025 by rpki-client