Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: AGmPxLavq+/O8hApWzaNPMqZfxi+2glMzBxZOd16mzI=
Subject key identifier: 36:16:0B:FD:B6:98:75:AB:01:70:20:CF:50:52:13:25:E3:B9:57:45
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 019A72265155AF0ECDE7AB9CF1D9137E8463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 13D5
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: Jod5mZPmb6rC2LwX2shAImq/IuCs1sSEFOhxVue9m6Y=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:51:55:af:0e:cd:e7:ab:9c:f1:d9:13:7e:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=36160bfdb69875ab017020cf50521325e3b95745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:56:4a:8b:97:22:84:4b:75:52:89:6e:62:
21:67:44:60:b4:26:ec:19:4f:55:e4:c8:90:ec:a2:
51:7c:a5:48:cb:15:4b:9e:d5:df:a7:b1:67:a7:bc:
c1:28:20:ce:64:98:17:c1:7a:b4:e8:3d:e4:5c:90:
c6:92:ab:b5:a4:22:41:84:6a:41:3b:6b:cb:96:bc:
d7:a2:f0:d3:f1:e2:22:85:86:ab:45:4d:c7:98:f7:
65:ab:85:3d:d7:f9:1b:a5:ea:c2:f8:94:cd:58:19:
03:d4:d0:a5:62:df:bd:ff:73:f7:8a:39:20:ef:f0:
b4:15:bb:87:04:45:20:db:6e:e2:fa:65:4d:0d:c7:
5e:59:ef:f0:80:bc:fa:c8:45:d4:00:89:b3:05:34:
20:9e:0a:f5:c0:c8:ab:3c:61:0c:9d:17:66:ec:ae:
79:87:f3:e0:1f:cd:41:ee:ed:a0:00:fd:e2:5f:7e:
fb:75:f0:63:a0:5b:e8:b3:27:bd:52:0f:54:be:ae:
10:38:ce:94:8a:81:58:04:2f:95:1d:55:d4:6d:e6:
4d:0d:e9:68:3b:b8:20:0c:8e:46:1b:07:1e:ef:16:
a8:2d:93:cf:9e:c6:0e:81:0a:30:49:8b:e3:82:4b:
df:14:89:43:49:71:4d:e2:d5:23:a3:96:62:24:39:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:0B:FD:B6:98:75:AB:01:70:20:CF:50:52:13:25:E3:B9:57:45
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:04:f8:63:6b:b9:f0:76:fd:7d:71:df:ed:81:01:a2:d6:ad:
55:bf:6c:81:07:a8:75:d3:0d:77:e4:a4:63:3c:21:27:7f:05:
f3:e2:b8:55:b0:0b:0d:81:b4:d5:39:33:13:b5:cd:43:2c:8f:
88:b3:95:b4:b4:25:86:f9:db:06:35:cd:49:a4:10:db:18:42:
25:b9:2a:6b:87:71:6d:3b:f1:54:d7:0d:1f:a2:b4:ad:8f:ca:
28:d3:37:7f:a0:11:e0:0d:8a:61:09:29:8e:a0:1f:b4:ee:83:
7b:fe:fe:a2:95:28:11:29:f4:15:7c:a7:ed:5d:51:e6:b6:8e:
4c:4e:2c:69:5e:fa:9f:7a:aa:7c:45:f2:cb:0e:35:b7:1b:2b:
8c:61:67:0c:94:af:a4:47:c7:b3:47:b4:a3:dd:03:00:27:40:
09:4b:0e:17:fb:99:4b:eb:60:cb:e4:a7:d4:13:9c:1a:b2:14:
29:66:98:7c:7d:40:96:17:37:3c:54:cf:2f:1f:e8:cc:d1:1b:
d4:99:9e:b7:63:c1:07:e9:d8:4a:2d:36:36:68:72:58:b9:ac:
1a:19:93:7e:af:3a:35:99:cc:7c:90:9e:ce:9d:45:4a:8f:1a:
c4:16:83:62:ca:74:ee:00:d0:54:65:29:59:da:59:cd:21:f4:
cd:6f:a4:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlFVrw7N56uc8dkTfoRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3
Mjg4NjUwHhcNMjUxMTExMDkwMTQ1WhcNMjUxMTEyMDkwMTQ1WjAzMTEwLwYDVQQD
EygzNjE2MGJmZGI2OTg3NWFiMDE3MDIwY2Y1MDUyMTMyNWUzYjk1NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsNWSouXIoRLdVKJbmIhZ0RgtCbs
GU9V5MiQ7KJRfKVIyxVLntXfp7Fnp7zBKCDOZJgXwXq06D3kXJDGkqu1pCJBhGpB
O2vLlrzXovDT8eIihYarRU3HmPdlq4U91/kbperC+JTNWBkD1NClYt+9/3P3ijkg
7/C0FbuHBEUg227i+mVNDcdeWe/wgLz6yEXUAImzBTQgngr1wMirPGEMnRdm7K55
h/PgH81B7u2gAP3iX377dfBjoFvosye9Ug9Uvq4QOM6UioFYBC+VHVXUbeZNDelo
O7ggDI5GGwce7xaoLZPPnsYOgQowSYvjgkvfFIlDSXFN4tUjo5ZiJDkrTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYWC/22mHWrAXAgz1BSEyXjuVdFMB8GA1UdIwQY
MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt
ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj
LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgT4Y2u5
8Hb9fXHf7YEBotatVb9sgQeoddMNd+SkYzwhJ38F8+K4VbALDYG01TkzE7XNQyyP
iLOVtLQlhvnbBjXNSaQQ2xhCJbkqa4dxbTvxVNcNH6K0rY/KKNM3f6AR4A2KYQkp
jqAftO6De/7+opUoESn0FXyn7V1R5raOTE4saV76n3qqfEXyyw41txsrjGFnDJSv
pEfHs0e0o90DACdACUsOF/uZS+tgy+Sn1BOcGrIUKWaYfH1Alhc3PFTPLx/ozNEb
1Jmet2PBB+nYSi02NmhyWLmsGhmTfq86NZnMfJCezp1FSo8axBaDYsp07gDQVGUp
WdpZzSH0zW+kuA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:22 2025 by rpki-client