Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier: LfqHl65tzinH0AjpPeei9bVQleFDBOu3L9nS28CxkUk=
Subject key identifier: DE:F8:2A:09:E9:D6:89:A9:D6:43:79:39:5C:8B:73:A5:A6:C3:D6:A7
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 019A4C616C69FFA9979E1AD973CF24AA36E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number: 120B
Signing time: Tue 04 Nov 2025 01:00:44 +0000
Manifest this update: Tue 04 Nov 2025 01:00:44 +0000
Manifest next update: Wed 05 Nov 2025 01:00:44 +0000
Files and hashes: 1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: n94mRABJemLD4RG1R4H1jRD04aJZd6zDlzpfAessQhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:6c:69:ff:a9:97:9e:1a:d9:73:cf:24:aa:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Nov 4 01:00:44 2025 GMT
Not After : Nov 5 01:00:44 2025 GMT
Subject: CN=def82a09e9d689a9d64379395c8b73a5a6c3d6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:db:40:51:00:00:aa:44:33:2f:22:79:40:ab:
b9:d4:f8:99:90:63:97:21:ea:50:f3:b9:7a:20:6f:
fa:74:9c:09:4c:68:09:88:b7:7b:e9:7c:16:5b:14:
4d:33:71:30:80:cc:ee:a7:1c:ae:50:2d:2c:ff:1c:
7c:ad:cc:eb:b0:f8:5e:f5:e7:dd:b0:8b:50:bc:c2:
5f:ad:53:3a:ea:3f:42:fd:e5:8a:7f:63:34:4d:49:
9f:0a:0c:7b:74:bc:3e:79:50:ed:9c:81:86:4a:4d:
51:19:01:83:ce:0b:c3:73:fd:aa:75:6a:bd:c5:37:
18:98:ea:f5:21:3e:a0:98:4b:df:94:59:2b:c9:0f:
e9:04:84:cc:9f:a6:4e:92:14:40:d6:28:45:45:4b:
e4:a3:9e:ff:14:75:a9:46:9e:ed:bd:f3:3d:b6:5c:
ae:52:7e:df:c3:7f:a8:fe:2c:c8:47:1f:77:e7:c6:
54:05:c8:43:6e:33:6c:d6:db:22:d3:c1:fd:07:56:
38:37:5b:ad:7f:b9:2f:ef:b6:18:8b:a9:06:b4:6f:
e4:0e:d1:ae:2f:4a:9c:9a:f3:e1:cc:d0:b5:41:11:
f5:af:40:27:53:72:8f:2a:e2:d3:17:34:b3:41:e8:
c3:6e:85:16:ce:9b:7d:8a:1c:02:20:da:b6:92:02:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F8:2A:09:E9:D6:89:A9:D6:43:79:39:5C:8B:73:A5:A6:C3:D6:A7
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2e:38:5c:f4:88:74:0e:27:7b:56:21:b7:0d:f4:3c:63:24:
a6:71:42:92:0b:9d:2c:9e:c9:b4:ae:23:f0:e7:84:26:63:8a:
a8:72:e3:b4:30:8c:e9:be:ec:4f:c0:20:d2:4e:57:09:56:6b:
5e:88:63:3a:90:a8:0a:ca:dc:6b:7f:9d:d7:95:de:76:bb:d2:
c0:64:6e:8d:c2:26:8c:af:fa:e5:4a:e6:d0:d1:fd:fa:bb:b1:
e3:be:60:4b:e9:fb:7b:d7:2d:a4:4a:25:5b:b9:1a:0d:da:da:
34:68:8d:e5:a3:e1:e8:6a:08:23:7c:5e:01:4b:43:a0:e0:d2:
6e:02:fb:37:e6:d7:34:a3:19:af:62:95:d9:ed:b6:e4:30:2d:
71:ed:4e:95:4a:c3:bb:4e:f9:ad:d6:c5:8b:29:e6:4f:a7:4b:
36:81:6e:3f:b6:8d:5e:75:48:af:4e:b0:19:da:61:08:2e:9b:
1f:11:c5:07:2c:50:21:a2:3e:e4:13:fe:14:39:59:a1:62:e9:
cd:3d:3e:f2:0e:1e:40:c6:29:8d:1f:8f:3e:83:47:c6:6f:3d:
63:2b:49:5e:1e:66:5f:6a:16:49:a6:80:d2:4e:3e:39:51:3b:
a5:e7:ab:d8:a9:e5:d1:4a:4f:78:b2:b5:e7:69:54:c4:93:38:
49:b4:76:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYWxp/6mXnhrZc88kqjblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh
NTk0NTYwHhcNMjUxMTA0MDEwMDQ0WhcNMjUxMTA1MDEwMDQ0WjAzMTEwLwYDVQQD
EyhkZWY4MmEwOWU5ZDY4OWE5ZDY0Mzc5Mzk1YzhiNzNhNWE2YzNkNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79tAUQAAqkQzLyJ5QKu51PiZkGOX
IepQ87l6IG/6dJwJTGgJiLd76XwWWxRNM3EwgMzupxyuUC0s/xx8rczrsPhe9efd
sItQvMJfrVM66j9C/eWKf2M0TUmfCgx7dLw+eVDtnIGGSk1RGQGDzgvDc/2qdWq9
xTcYmOr1IT6gmEvflFkryQ/pBITMn6ZOkhRA1ihFRUvko57/FHWpRp7tvfM9tlyu
Un7fw3+o/izIRx9358ZUBchDbjNs1tsi08H9B1Y4N1utf7kv77YYi6kGtG/kDtGu
L0qcmvPhzNC1QRH1r0AnU3KPKuLTFzSzQejDboUWzpt9ihwCINq2kgI00QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN74Kgnp1omp1kN5OVyLc6Wmw9anMB8GA1UdIwQY
MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt
NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl
LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZS44XPSI
dA4ne1Yhtw30PGMkpnFCkgudLJ7JtK4j8OeEJmOKqHLjtDCM6b7sT8Ag0k5XCVZr
XohjOpCoCsrca3+d15XedrvSwGRujcImjK/65Urm0NH9+rux475gS+n7e9ctpEol
W7kaDdraNGiN5aPh6GoII3xeAUtDoODSbgL7N+bXNKMZr2KV2e225DAtce1OlUrD
u075rdbFiynmT6dLNoFuP7aNXnVIr06wGdphCC6bHxHFByxQIaI+5BP+FDlZoWLp
zT0+8g4eQMYpjR+PPoNHxm89YytJXh5mX2oWSaaA0k4+OVE7peer2Knl0UpPeLK1
52lUxJM4SbR24w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:28:01 2025 by rpki-client