Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: mpuIRfh3FFD/HsyHd94UnvEH6+36fZkm0VVQaTfUz9U=
Subject key identifier: 30:91:92:B2:30:1B:8F:CE:22:59:E8:17:F5:06:AA:93:9C:D3:87:F5
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019A2B8CB0CCC4280668E0C1E8F96BCF6D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 16:00:31 +0000
Manifest this update: Tue 28 Oct 2025 16:00:31 +0000
Manifest next update: Wed 29 Oct 2025 16:00:31 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: CJpxpMsIOnY3e/AI38McAKimrAD4vk643BfzwYoxX9w=)
2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:b0:cc:c4:28:06:68:e0:c1:e8:f9:6b:cf:6d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Oct 28 16:00:31 2025 GMT
Not After : Oct 29 16:00:31 2025 GMT
Subject: CN=309192b2301b8fce2259e817f506aa939cd387f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:48:56:fa:5b:7a:6c:c0:f3:ef:e6:87:9e:
e1:54:a1:6e:b3:05:cf:40:b4:e6:44:2d:58:6b:43:
20:d8:86:24:8a:13:b8:bd:b1:47:26:2e:69:cf:c7:
96:90:e1:79:12:4d:93:00:c6:dd:87:cf:e5:7a:80:
0f:2a:a6:44:7e:ca:21:ab:d3:20:e5:d2:3d:2a:2f:
1b:d6:5b:95:e8:3b:1d:05:cd:b1:24:a2:bc:39:f3:
2c:70:5f:0e:db:fe:05:8e:e8:73:9c:fd:38:cb:c3:
9f:40:de:ab:fe:f7:a4:04:42:fd:a6:d7:aa:f4:de:
c4:37:ca:d7:23:dc:0f:e3:39:15:81:07:35:c0:5f:
91:d1:4c:97:ba:fa:0c:9c:c2:11:20:08:db:85:00:
06:b2:3d:56:98:c5:92:90:6c:d5:4b:76:8b:e8:3a:
a0:10:aa:7e:94:82:05:7c:31:3a:4b:48:60:64:15:
04:b0:d6:ed:83:9e:85:47:5e:a2:e4:d6:42:9b:f5:
6a:6a:08:42:0f:fd:84:09:58:73:68:3d:0b:c0:13:
75:96:da:98:53:f2:e7:59:22:8e:c9:e5:17:06:20:
55:ad:20:06:86:05:e8:34:d5:f7:2b:fb:9e:3f:d5:
c5:4b:3b:7b:9d:57:20:f1:11:94:0f:2e:64:ca:f3:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:92:B2:30:1B:8F:CE:22:59:E8:17:F5:06:AA:93:9C:D3:87:F5
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:3e:2f:a3:4c:99:31:c2:fd:e4:31:3f:20:26:88:8c:c7:76:
27:f7:73:10:9c:fa:dc:7a:ac:bd:bb:bf:af:c3:b1:9a:a2:03:
4e:cf:00:b5:21:2f:1c:08:84:7c:e0:5c:3d:b9:cb:f5:48:eb:
f4:21:49:39:80:e3:2e:9b:b5:2a:53:f8:18:76:5c:53:5e:2b:
8c:89:5d:9e:9d:36:7a:4d:48:69:51:fa:14:ac:a5:e9:8a:bd:
4c:ec:f1:d5:65:9c:88:a1:04:a6:eb:a9:ea:0f:15:a3:85:f3:
26:dd:88:29:8b:30:00:0f:05:ea:7f:b4:68:83:15:7a:55:f9:
84:fb:b6:db:cb:13:cd:d4:d8:d2:48:89:c5:7a:d7:46:d2:49:
f6:db:d9:53:9a:c1:0e:65:9a:53:86:2d:6a:cb:51:9b:f3:b7:
7d:f4:a7:87:12:f5:c5:45:04:c5:df:b2:e7:ad:77:00:f6:03:
e1:9a:5d:66:e4:ca:bc:9e:e6:64:01:52:61:a8:ea:59:8e:d8:
ec:a6:2c:c1:d3:f6:2c:ae:b1:52:b1:3b:46:d6:32:1b:0a:77:
6e:d3:02:5a:f2:7b:48:1c:a8:9f:11:99:cd:72:99:af:4c:e5:
cb:8b:d8:05:d3:4f:6b:3f:2e:13:69:e1:fd:28:86:e8:3c:f5:
5a:31:27:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorjLDMxCgGaODB6Plrz20BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMWQ1YjlkODhiNTc5ZDBkZGY3YzIxY2IzZDM4N2Q2MWVh
NTE2YzEwHhcNMjUxMDI4MTYwMDMxWhcNMjUxMDI5MTYwMDMxWjAzMTEwLwYDVQQD
EygzMDkxOTJiMjMwMWI4ZmNlMjI1OWU4MTdmNTA2YWE5MzljZDM4N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8NIVvpbemzA8+/mh57hVKFuswXP
QLTmRC1Ya0Mg2IYkihO4vbFHJi5pz8eWkOF5Ek2TAMbdh8/leoAPKqZEfsohq9Mg
5dI9Ki8b1luV6DsdBc2xJKK8OfMscF8O2/4FjuhznP04y8OfQN6r/vekBEL9pteq
9N7EN8rXI9wP4zkVgQc1wF+R0UyXuvoMnMIRIAjbhQAGsj1WmMWSkGzVS3aL6Dqg
EKp+lIIFfDE6S0hgZBUEsNbtg56FR16i5NZCm/VqaghCD/2ECVhzaD0LwBN1ltqY
U/LnWSKOyeUXBiBVrSAGhgXoNNX3K/ueP9XFSzt7nVcg8RGUDy5kyvPnzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCRkrIwG4/OIlnoF/UGqpOc04f1MB8GA1UdIwQY
MBaAFA8dW52ItXnQ3ffCHLPTh9YepRbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUt
NzJkZjZmZWRkNzQ4LzEvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUtNzJkZjZmZWRkNzQ4
LzEvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2z4vo0yZ
McL95DE/ICaIjMd2J/dzEJz63Hqsvbu/r8OxmqIDTs8AtSEvHAiEfOBcPbnL9Ujr
9CFJOYDjLpu1KlP4GHZcU14rjIldnp02ek1IaVH6FKyl6Yq9TOzx1WWciKEEpuup
6g8Vo4XzJt2IKYswAA8F6n+0aIMVelX5hPu228sTzdTY0kiJxXrXRtJJ9tvZU5rB
DmWaU4YtastRm/O3ffSnhxL1xUUExd+y5613APYD4ZpdZuTKvJ7mZAFSYajqWY7Y
7KYswdP2LK6xUrE7RtYyGwp3btMCWvJ7SByonxGZzXKZr0zly4vYBdNPaz8uE2nh
/SiG6Dz1WjEnfQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:13:51 2025 by rpki-client