Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: R/SCm7iAHWz3oOqrFu7xFvWbrYbUBEyvApbtJ6qCah8=
Subject key identifier: 08:CE:35:2C:D3:00:96:00:0B:8C:F7:AD:0C:7A:14:A0:B1:18:FE:68
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 019A71EEF2E73C61C460FEB8106A9D8C923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=)
2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: y122bDLtsbL+nyb720xIWWUqXuucT3qBKrZV949gVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f2:e7:3c:61:c4:60:fe:b8:10:6a:9d:8c:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=08ce352cd30096000b8cf7ad0c7a14a0b118fe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:cd:61:5a:da:3d:ac:60:bc:75:c4:38:8b:
0c:59:d7:00:b5:1d:a5:6b:05:65:48:70:47:6e:40:
8c:2a:08:c6:88:61:45:a8:34:1f:3a:43:a7:0e:cd:
df:0c:e3:ed:2c:68:04:6e:26:9a:4b:3a:6c:89:02:
97:d6:95:ed:eb:c3:0e:9f:e0:46:10:21:30:e3:f3:
f4:26:36:f2:6f:eb:e5:bf:04:44:2d:e4:bd:40:a7:
6e:74:7d:03:71:0c:60:65:fa:a6:75:a9:7e:44:ca:
86:a4:64:a6:c4:d8:da:4d:a0:6b:d4:3f:58:86:25:
ac:85:a5:62:82:65:29:24:b1:ce:f2:59:78:ee:ea:
f9:9f:b4:0e:41:77:52:6b:bd:ca:99:74:e5:bd:48:
6e:7a:c5:27:ae:e7:4a:77:67:39:30:ca:f0:cc:bf:
cf:5a:c1:f0:e5:44:7b:a3:4a:dd:bc:bb:f5:c0:cf:
93:38:87:8c:a1:1b:f7:63:c1:0b:df:6c:c2:3e:5b:
e8:71:cc:e1:29:6b:e0:71:9d:bd:63:68:09:f6:d1:
18:03:1e:37:36:17:ce:84:9f:88:db:48:32:31:f2:
7e:77:cb:e3:15:06:29:cb:cb:99:97:6a:a7:4a:26:
f4:d8:11:fa:87:18:6f:69:07:33:6b:86:86:b4:ee:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CE:35:2C:D3:00:96:00:0B:8C:F7:AD:0C:7A:14:A0:B1:18:FE:68
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f7:a4:0b:44:47:98:fd:a2:88:f7:98:28:8a:f0:33:69:d4:
a1:48:c2:9f:12:0f:63:bc:51:7c:be:f1:57:e1:d9:80:fe:16:
99:4c:55:38:f4:07:67:fe:6e:76:b2:b0:32:0f:9f:5c:fd:87:
c3:e0:2c:99:31:9d:4d:ac:f9:3f:3d:93:1c:2f:61:62:2e:9e:
a8:b3:67:2a:f4:04:02:08:09:6a:d7:85:43:85:d4:6f:8c:fe:
e0:5e:69:6a:f3:d0:be:fe:d5:06:cf:ed:0c:ae:58:20:72:07:
c1:81:54:3f:fa:09:d7:66:18:b8:db:64:cc:de:22:85:9b:88:
74:37:51:be:a5:80:fb:87:86:73:b9:5d:f3:0b:30:61:17:3b:
50:a4:68:1f:d4:b4:58:4f:e9:e6:75:d8:9f:97:f4:04:f1:91:
59:bc:52:a2:48:f7:43:8f:95:9b:ba:51:8b:59:c1:a5:ef:af:
50:5a:4d:20:e6:52:22:cd:17:cf:33:50:46:db:39:a7:8c:de:
cc:fe:01:bd:ed:6c:3f:f8:fd:06:a5:d6:0f:69:2b:b2:07:f0:
29:65:25:85:98:1d:67:79:26:9a:f9:e2:9b:fc:1a:16:43:75:
9d:9a:e4:46:54:f0:c7:7b:c5:53:f2:1c:ed:0e:90:16:66:6a:
c0:f3:ce:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vLnPGHEYP64EGqdjJI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTJlMjBmNTEwYjIyYjgyMTdjZGYwZDIxMTQ5NmIxYjlj
MWVkYjgwHhcNMjUxMTExMDgwMTE2WhcNMjUxMTEyMDgwMTE2WjAzMTEwLwYDVQQD
EygwOGNlMzUyY2QzMDA5NjAwMGI4Y2Y3YWQwYzdhMTRhMGIxMThmZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4LNYVraPaxgvHXEOIsMWdcAtR2l
awVlSHBHbkCMKgjGiGFFqDQfOkOnDs3fDOPtLGgEbiaaSzpsiQKX1pXt68MOn+BG
ECEw4/P0Jjbyb+vlvwRELeS9QKdudH0DcQxgZfqmdal+RMqGpGSmxNjaTaBr1D9Y
hiWshaVigmUpJLHO8ll47ur5n7QOQXdSa73KmXTlvUhuesUnrudKd2c5MMrwzL/P
WsHw5UR7o0rdvLv1wM+TOIeMoRv3Y8EL32zCPlvocczhKWvgcZ29Y2gJ9tEYAx43
NhfOhJ+I20gyMfJ+d8vjFQYpy8uZl2qnSib02BH6hxhvaQcza4aGtO7WawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjONSzTAJYAC4z3rQx6FKCxGP5oMB8GA1UdIwQY
MBaAFHcS4g9RCyK4IXzfDSEUlrG5we24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEt
NDNjZTk0OTY2M2Q5LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEtNDNjZTk0OTY2M2Q5
LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/ekC0RH
mP2iiPeYKIrwM2nUoUjCnxIPY7xRfL7xV+HZgP4WmUxVOPQHZ/5udrKwMg+fXP2H
w+AsmTGdTaz5Pz2THC9hYi6eqLNnKvQEAggJateFQ4XUb4z+4F5pavPQvv7VBs/t
DK5YIHIHwYFUP/oJ12YYuNtkzN4ihZuIdDdRvqWA+4eGc7ld8wswYRc7UKRoH9S0
WE/p5nXYn5f0BPGRWbxSokj3Q4+Vm7pRi1nBpe+vUFpNIOZSIs0XzzNQRts5p4ze
zP4Bve1sP/j9BqXWD2krsgfwKWUlhZgdZ3kmmvnim/waFkN1nZrkRlTwx3vFU/Ic
7Q6QFmZqwPPOrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:55 2025 by rpki-client