Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: jgiGZo/VFppnbWOKd1Uw3ixNvVrj6P3II1Cy9OtsIrU=
Subject key identifier: BF:58:F3:C3:C7:7D:FF:28:FD:DE:B8:FF:31:D3:DF:E7:85:9D:C4:54
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 019A22F701CE6EC66A2DF9855C96EE0D0CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 10DB
Signing time: Mon 27 Oct 2025 00:00:04 +0000
Manifest this update: Mon 27 Oct 2025 00:00:04 +0000
Manifest next update: Tue 28 Oct 2025 00:00:04 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: nvhVXSEYFhk7cSH1l/VomprLg6Kfy2VmHJgaADJLdkw=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:01:ce:6e:c6:6a:2d:f9:85:5c:96:ee:0d:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Oct 27 00:00:04 2025 GMT
Not After : Oct 28 00:00:04 2025 GMT
Subject: CN=bf58f3c3c77dff28fddeb8ff31d3dfe7859dc454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:ca:be:0d:5e:4b:32:a9:26:49:22:d5:c2:
79:88:56:36:65:70:ff:20:df:42:87:2d:39:82:7b:
af:fd:97:db:0e:58:32:ae:3c:5d:4b:3e:6b:47:49:
55:78:cd:7b:be:b2:26:d6:3d:eb:1a:54:ff:30:4f:
ba:5e:7e:17:b9:37:fc:9b:e6:5b:d8:59:25:5f:25:
9a:8c:82:3d:c2:33:15:83:b1:2f:a4:8c:5a:eb:4f:
48:89:fd:ba:0a:c6:50:e8:fa:1c:74:0a:79:57:8e:
f6:7a:11:f4:db:79:da:45:41:f3:73:12:27:f0:48:
45:bc:13:4c:1d:e7:de:f3:c9:0c:ee:1d:94:91:49:
de:7c:a1:a3:65:59:6b:0f:05:bd:47:ff:80:ff:2f:
11:54:48:5c:7b:6c:51:4f:13:f2:5b:80:20:1f:d5:
08:b7:39:d7:23:b7:b7:ba:87:a5:78:07:1c:be:47:
cc:02:fa:90:85:d5:8a:53:8a:3b:a8:17:d4:7b:93:
a2:53:97:b4:55:b7:62:93:24:2e:fc:5c:e5:e1:ef:
c1:27:d1:d0:f5:cd:37:31:75:41:9b:52:a1:78:4e:
49:39:0a:2e:12:61:96:1f:8b:b9:5b:5d:e7:f9:07:
b2:f0:0b:f6:e9:52:66:e6:44:7d:0e:8f:8a:c4:f2:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:F3:C3:C7:7D:FF:28:FD:DE:B8:FF:31:D3:DF:E7:85:9D:C4:54
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cc:6e:65:6c:a0:aa:e5:e1:71:7e:42:71:81:ab:19:60:a3:
4d:18:e9:e7:82:2e:58:70:f6:7d:93:d3:21:14:48:2c:7f:20:
51:87:f9:81:f1:8a:80:19:36:38:ff:5a:bb:e5:dd:8d:3b:ef:
f9:7b:70:7d:08:e1:f6:e6:48:29:18:d5:62:8f:b1:a7:8d:92:
d1:74:01:a9:46:c7:11:1a:1e:4e:3b:3a:7b:a5:34:8a:8e:54:
c9:ad:61:bd:3e:9d:66:e2:25:35:02:ed:60:7d:8f:9a:c5:23:
3f:63:3f:b1:67:71:ab:35:73:9f:19:01:d9:e8:ad:09:28:0d:
de:65:b9:9c:df:e0:91:18:33:a6:fe:9c:35:a3:bf:ff:b3:9a:
f0:9d:a3:89:93:07:2f:26:4a:72:d1:ae:5b:ca:d7:e6:65:11:
3b:29:6c:43:77:1f:bf:b1:45:07:e3:36:59:e5:ea:08:dd:ba:
2a:79:9a:a1:30:1b:3c:a3:55:84:b1:a0:da:b1:c6:d6:ea:73:
c9:4c:bd:2c:ce:38:29:bb:37:b0:6a:48:9b:f4:32:c2:74:49:
1b:3b:ec:7f:44:cc:7d:9c:fe:15:a6:d7:58:6f:8a:62:90:ce:
b4:7e:62:b8:2e:25:4d:ce:b3:9e:37:2a:71:0e:83:6c:50:a6:
d7:bd:de:06
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoi9wHObsZqLfmFXJbuDQywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MzI3MmMwYzMyZGIwMDRmMDc4Zjg3NGI5OWRhOWEwYjdl
NjNhZmQwHhcNMjUxMDI3MDAwMDA0WhcNMjUxMDI4MDAwMDA0WjAzMTEwLwYDVQQD
EyhiZjU4ZjNjM2M3N2RmZjI4ZmRkZWI4ZmYzMWQzZGZlNzg1OWRjNDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq97Kvg1eSzKpJkki1cJ5iFY2ZXD/
IN9Chy05gnuv/ZfbDlgyrjxdSz5rR0lVeM17vrIm1j3rGlT/ME+6Xn4XuTf8m+Zb
2FklXyWajII9wjMVg7EvpIxa609Iif26CsZQ6PocdAp5V472ehH023naRUHzcxIn
8EhFvBNMHefe88kM7h2UkUnefKGjZVlrDwW9R/+A/y8RVEhce2xRTxPyW4AgH9UI
tznXI7e3uoeleAccvkfMAvqQhdWKU4o7qBfUe5OiU5e0VbdikyQu/Fzl4e/BJ9HQ
9c03MXVBm1KheE5JOQouEmGWH4u5W13n+Qey8Av26VJm5kR9Do+KxPJZMwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL9Y88PHff8o/d64/zHT3+eFncRUMB8GA1UdIwQY
MBaAFPgycsDDLbAE8Hj4dLmdqaC35jr9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ESnl3TU10c0FUd2VQaDB1WjJwb0xmbU92MC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvOTRhMWUwLWMxODAtNGJhZi05ZWEw
LWY2N2U3MDc4ODc4ZS8xLzEtREp5d01NdHNBVHdlUGgwdVoycG9MZm1PdjAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzkzLzk0YTFlMC1jMTgwLTRiYWYtOWVhMC1mNjdlNzA3ODg3
OGUvMS8xLURKeXdNTXRzQVR3ZVBoMHVaMnBvTGZtT3YwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8xu
ZWygquXhcX5CcYGrGWCjTRjp54IuWHD2fZPTIRRILH8gUYf5gfGKgBk2OP9au+Xd
jTvv+XtwfQjh9uZIKRjVYo+xp42S0XQBqUbHERoeTjs6e6U0io5Uya1hvT6dZuIl
NQLtYH2PmsUjP2M/sWdxqzVznxkB2eitCSgN3mW5nN/gkRgzpv6cNaO//7Oa8J2j
iZMHLyZKctGuW8rX5mUROylsQ3cfv7FFB+M2WeXqCN26KnmaoTAbPKNVhLGg2rHG
1upzyUy9LM44Kbs3sGpIm/QywnRJGzvsf0TMfZz+FabXWG+KYpDOtH5iuC4lTc6z
njcqcQ6DbFCm173eBg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 06:52:11 2025 by rpki-client