Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
File: DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json)
Hash identifier: 43wVMn5dM/hkTRU2FJAl2wqapgSaD5sJHBK5+MbX9G8=
Subject key identifier: 23:3C:F4:A5:D0:6F:47:BC:9C:C4:03:76:B7:D2:4A:46:4D:77:43:B4
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial: 019A7293DB43218D9F5DBD8FEEB195D9F9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:23 +0000
Manifest this update: Tue 11 Nov 2025 11:01:23 +0000
Manifest next update: Wed 12 Nov 2025 11:01:23 +0000
Files and hashes: 1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: fHOP6kQEFakzQ6KNgLR+bp0bgutfDcQr5Q+NEWZgyWI=)
2: ULOFbzP3h9-3w0H4Yx7Si28ClYo.roa (hash: d25VIffAJQDV7vgvStWkaS/C+7kyYqCn7zctEo0yqWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:db:43:21:8d:9f:5d:bd:8f:ee:b1:95:d9:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Validity
Not Before: Nov 11 11:01:23 2025 GMT
Not After : Nov 12 11:01:23 2025 GMT
Subject: CN=233cf4a5d06f47bc9cc40376b7d24a464d7743b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:54:e7:78:0d:94:2d:a5:6b:3d:38:14:59:
94:5c:2b:ba:3e:40:cd:1a:aa:2e:e2:d9:64:83:0d:
98:74:c9:db:1e:be:d4:37:13:40:4f:47:34:98:bd:
c6:de:1b:da:e2:94:b2:f7:1d:2f:16:2a:53:29:8f:
8e:f3:6d:b6:07:1a:04:29:57:44:2b:ad:bf:00:32:
ed:a6:7c:04:b9:e1:9f:b3:6e:86:e4:e3:9c:55:97:
16:d6:1e:0a:b5:ca:f7:b6:4f:2d:7f:e7:2b:15:f5:
77:15:74:65:2f:41:60:a8:0a:6b:9c:54:c1:ff:c0:
c3:ef:dd:39:14:f4:78:0b:71:89:7c:96:e7:39:16:
f3:31:21:7e:4b:eb:dc:85:d4:eb:e5:62:7c:e0:c6:
6c:59:cf:fd:6c:cc:64:f2:a2:47:94:db:ec:3f:41:
ae:a3:01:2b:f2:17:0f:a5:67:c8:cf:8c:e0:fa:32:
64:d6:5e:a8:c7:a4:46:d7:0d:e7:53:5f:22:1e:71:
d6:7f:c2:ff:02:84:a3:44:e9:a6:ea:91:88:59:2c:
e6:74:9b:ba:5f:3d:e1:49:78:4a:06:e9:d4:7b:0d:
a8:e9:81:1c:94:fa:a3:a6:1d:33:c1:e2:33:19:fc:
b3:c4:31:76:ab:6c:66:6e:74:b6:a8:e0:8c:e5:a9:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:F4:A5:D0:6F:47:BC:9C:C4:03:76:B7:D2:4A:46:4D:77:43:B4
X509v3 Authority Key Identifier:
keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c3:78:05:34:32:31:20:24:73:04:c6:ac:7d:ea:94:55:59:
7e:d1:b5:28:ac:99:53:e0:46:e0:6d:b6:a8:88:03:0e:43:6d:
1c:b5:72:af:cf:95:39:8a:2d:15:f1:2b:1a:cb:1e:19:38:28:
f7:b2:18:fa:07:8f:59:62:8c:d7:a9:ec:14:77:75:ef:4d:eb:
5d:2a:05:f6:0d:89:94:13:a0:bd:ae:e0:ce:43:5a:50:99:3b:
8f:e0:70:7a:b8:32:c4:ac:94:f6:6a:f4:81:67:5b:50:3c:83:
0e:22:57:1f:25:51:7f:3e:fe:e4:34:58:d1:2f:18:6d:81:83:
ba:97:26:b3:c2:8b:39:cb:27:40:fd:48:3c:b2:04:fa:af:c7:
f3:8d:61:8a:4b:df:45:79:52:4e:de:9d:20:6a:46:d9:8c:bc:
02:0d:71:19:6b:38:4a:39:c0:29:d8:cf:31:13:95:da:ad:1c:
f7:a1:9d:83:ba:16:02:2f:12:cd:ad:10:22:eb:49:e4:c9:cf:
69:a2:70:8d:cd:15:df:fb:67:e3:ed:ca:ed:44:68:3e:1f:6b:
68:ee:fc:80:b7:d3:25:93:17:b2:6d:43:5e:50:1b:9d:0d:94:
c8:b1:db:a9:65:c6:a3:79:11:24:9f:88:5f:80:9d:3f:d8:db:
6a:b3:d1:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk9tDIY2fXb2P7rGV2fn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTcwZWU4NTllOTFmNDk3M2RlNGE1NzJiMWJhZDJmM2E1
ZDE4MjUwHhcNMjUxMTExMTEwMTIzWhcNMjUxMTEyMTEwMTIzWjAzMTEwLwYDVQQD
EygyMzNjZjRhNWQwNmY0N2JjOWNjNDAzNzZiN2QyNGE0NjRkNzc0M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKdU53gNlC2laz04FFmUXCu6PkDN
Gqou4tlkgw2YdMnbHr7UNxNAT0c0mL3G3hva4pSy9x0vFipTKY+O8222BxoEKVdE
K62/ADLtpnwEueGfs26G5OOcVZcW1h4Ktcr3tk8tf+crFfV3FXRlL0FgqAprnFTB
/8DD7905FPR4C3GJfJbnORbzMSF+S+vchdTr5WJ84MZsWc/9bMxk8qJHlNvsP0Gu
owEr8hcPpWfIz4zg+jJk1l6ox6RG1w3nU18iHnHWf8L/AoSjROmm6pGIWSzmdJu6
Xz3hSXhKBunUew2o6YEclPqjph0zweIzGfyzxDF2q2xmbnS2qOCM5akb4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM89KXQb0e8nMQDdrfSSkZNd0O0MB8GA1UdIwQY
MBaAFA4XDuhZ6R9Jc95KVysbrS86XRglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jZjcyMGUtNGQzMy00ZGIxLTg2ZTkt
ZmMyZWM0YmI1OTY3LzEvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jZjcyMGUtNGQzMy00ZGIxLTg2ZTktZmMyZWM0YmI1OTY3
LzEvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8N4BTQy
MSAkcwTGrH3qlFVZftG1KKyZU+BG4G22qIgDDkNtHLVyr8+VOYotFfErGsseGTgo
97IY+gePWWKM16nsFHd1703rXSoF9g2JlBOgva7gzkNaUJk7j+BwergyxKyU9mr0
gWdbUDyDDiJXHyVRfz7+5DRY0S8YbYGDupcms8KLOcsnQP1IPLIE+q/H841hikvf
RXlSTt6dIGpG2Yy8Ag1xGWs4SjnAKdjPMROV2q0c96Gdg7oWAi8Sza0QIutJ5MnP
aaJwjc0V3/tn4+3K7URoPh9raO78gLfTJZMXsm1DXlAbnQ2UyLHbqWXGo3kRJJ+I
X4CdP9jbarPR7Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:51 2025 by rpki-client