Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: uUbZs6hme8/YsxJpKrQx3PXV2NY/oTrM6N4h5Wq19/0=
Subject key identifier: BC:FD:F2:07:51:4E:D6:01:E1:71:B0:FE:34:FC:5A:C7:E8:0E:FC:F6
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 019A73019454DA227649AA447BF15C34845B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 13:01:14 +0000
Manifest this update: Tue 11 Nov 2025 13:01:14 +0000
Manifest next update: Wed 12 Nov 2025 13:01:14 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: C4VRgg+4K4+YzjYkXUvVmlfgIYRhyKvENfAP+UtNJDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:94:54:da:22:76:49:aa:44:7b:f1:5c:34:84:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Nov 11 13:01:14 2025 GMT
Not After : Nov 12 13:01:14 2025 GMT
Subject: CN=bcfdf207514ed601e171b0fe34fc5ac7e80efcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:15:d3:23:a5:b5:98:4b:6e:4b:a2:32:bf:
2d:dc:54:95:c5:58:47:cc:d7:04:be:57:41:24:dd:
54:c3:69:d4:58:73:dc:db:93:54:4e:3c:56:4f:c2:
b5:fc:6e:1d:2a:3a:a4:91:93:30:0f:eb:70:7c:38:
ab:7d:08:72:9a:61:83:c0:7e:21:46:8d:8a:8f:08:
6c:c5:ba:d7:ec:a5:35:bb:56:a7:2c:e4:27:87:fd:
70:71:3b:a5:9a:ab:fc:53:65:ac:e4:a8:2b:4b:d8:
83:30:70:11:7a:33:34:6c:f0:3d:b2:86:ac:81:b5:
00:37:55:f0:29:8c:e1:a3:b6:39:18:40:44:08:0e:
7c:dc:91:7e:f2:7b:1b:a6:e7:99:87:94:59:f2:2c:
97:34:14:53:a0:6a:f2:92:6f:a3:32:bd:ce:a7:1b:
ff:57:e0:c9:8c:27:3a:28:7c:f9:0e:3c:46:47:f1:
b6:16:eb:9b:4b:de:12:1f:6d:cf:d5:d9:3f:cd:df:
9b:0e:97:c2:38:96:f2:9d:db:2d:fc:ee:4f:71:b1:
1b:e8:e3:2b:cb:4a:7c:00:82:90:f2:d7:d5:14:f1:
5e:0b:51:7a:8e:41:ab:b9:fb:15:25:0b:70:3b:bd:
6a:d5:c1:ef:1f:de:e4:0b:55:6a:0f:1f:6b:e0:6f:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:F2:07:51:4E:D6:01:E1:71:B0:FE:34:FC:5A:C7:E8:0E:FC:F6
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:23:35:bb:7a:2a:cf:45:98:36:14:d6:c8:bf:3f:be:5d:8a:
35:06:f9:43:52:fa:e1:2c:29:cd:cd:f8:41:29:7c:7f:23:90:
56:ab:b3:a1:ec:dd:94:30:36:af:2a:d4:57:e1:26:ec:01:2f:
d4:4d:d8:f3:7c:f7:dd:70:33:f6:4a:0a:2f:c6:be:07:9d:c6:
0b:c2:a5:f9:e3:ea:22:9a:b4:ba:72:41:03:10:62:32:0a:9c:
72:ae:e9:5a:2a:99:17:1b:81:92:85:48:62:3d:36:34:a5:80:
9e:be:bf:df:20:b0:6f:82:8f:43:0d:ad:38:3b:3b:89:fb:c6:
63:02:20:f8:79:24:d7:bd:20:21:60:6c:4c:ca:d5:45:f0:8f:
44:42:ec:17:85:6a:5e:d3:d6:0a:1c:38:01:b1:c8:f2:d9:2b:
92:05:f8:14:a8:b5:79:b1:17:22:84:54:49:5b:0f:3d:4a:76:
33:03:60:65:4b:93:21:56:ab:46:25:61:59:3a:9a:50:3c:62:
53:b6:e1:e4:ee:f9:2d:9f:15:4e:57:c9:c3:8b:3e:51:e3:36:
44:a2:cd:1c:bb:90:27:87:56:27:7c:59:a3:4a:9f:d3:fe:e4:
b7:b8:cc:71:91:92:f3:ba:6e:6a:44:4e:47:1d:f4:c6:3c:b4:
51:bc:be:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAZRU2iJ2SapEe/FcNIRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzI1NWRkYzkwYTRkMGY4MmZiMjY3NDQ2OTNlZDdjOTg2
ZDhhOGIwHhcNMjUxMTExMTMwMTE0WhcNMjUxMTEyMTMwMTE0WjAzMTEwLwYDVQQD
EyhiY2ZkZjIwNzUxNGVkNjAxZTE3MWIwZmUzNGZjNWFjN2U4MGVmY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVAV0yOltZhLbkuiMr8t3FSVxVhH
zNcEvldBJN1Uw2nUWHPc25NUTjxWT8K1/G4dKjqkkZMwD+twfDirfQhymmGDwH4h
Ro2KjwhsxbrX7KU1u1anLOQnh/1wcTulmqv8U2Ws5KgrS9iDMHARejM0bPA9soas
gbUAN1XwKYzho7Y5GEBECA583JF+8nsbpueZh5RZ8iyXNBRToGrykm+jMr3Opxv/
V+DJjCc6KHz5DjxGR/G2FuubS94SH23P1dk/zd+bDpfCOJbyndst/O5PcbEb6OMr
y0p8AIKQ8tfVFPFeC1F6jkGrufsVJQtwO71q1cHvH97kC1VqDx9r4G8q6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLz98gdRTtYB4XGw/jT8WsfoDvz2MB8GA1UdIwQY
MBaAFHVyVd3JCk0PgvsmdEaT7XyYbYqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUt
YzAyZjc3NWZiZjNmLzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUtYzAyZjc3NWZiZjNm
LzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiM1u3oq
z0WYNhTWyL8/vl2KNQb5Q1L64Swpzc34QSl8fyOQVquzoezdlDA2ryrUV+Em7AEv
1E3Y83z33XAz9koKL8a+B53GC8Kl+ePqIpq0unJBAxBiMgqccq7pWiqZFxuBkoVI
Yj02NKWAnr6/3yCwb4KPQw2tODs7ifvGYwIg+Hkk170gIWBsTMrVRfCPRELsF4Vq
XtPWChw4AbHI8tkrkgX4FKi1ebEXIoRUSVsPPUp2MwNgZUuTIVarRiVhWTqaUDxi
U7bh5O75LZ8VTlfJw4s+UeM2RKLNHLuQJ4dWJ3xZo0qf0/7kt7jMcZGS87puakRO
Rx30xjy0Uby+Lw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:17 2025 by rpki-client