Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: KpfBGudZ5VYU9OWMcpOTVYitQ8c2nPlztWZRtOTT+Dg=
Subject key identifier: EF:F8:C2:A1:2D:6F:B8:4A:C1:EA:6F:3E:E5:36:BA:EC:A8:65:48:93
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019A72CA4D02381FDA789C8B2FB64A6920AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 05C4
Signing time: Tue 11 Nov 2025 12:00:51 +0000
Manifest this update: Tue 11 Nov 2025 12:00:51 +0000
Manifest next update: Wed 12 Nov 2025 12:00:51 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: dGxaYhdn7lSGbSX9Rv4zKUqjVC55yQRC67bBklI3yPM=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:4d:02:38:1f:da:78:9c:8b:2f:b6:4a:69:20:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Nov 11 12:00:51 2025 GMT
Not After : Nov 12 12:00:51 2025 GMT
Subject: CN=eff8c2a12d6fb84ac1ea6f3ee536baeca8654893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:86:2e:6a:dd:40:53:71:81:40:37:46:83:
c3:b1:e0:53:19:34:19:ad:2a:8b:13:47:04:ea:7a:
d7:f6:dd:99:68:1b:5e:e9:77:56:1e:88:98:7a:f6:
36:04:1c:70:ad:43:58:08:cd:17:97:1a:95:7a:34:
1e:1c:72:3f:51:7a:0f:92:c9:ac:e4:ff:cd:18:f9:
65:19:78:5d:eb:69:e2:8b:bf:37:3b:96:88:a9:41:
5e:99:2c:49:f6:5b:1c:4f:a8:ed:55:2d:29:15:71:
e9:bb:fd:73:ea:38:3c:8c:11:ea:48:79:ba:46:32:
87:46:7a:cc:c1:c3:ce:e8:26:2f:9b:1b:73:6c:c0:
fc:97:9c:b6:62:2d:3a:38:a6:d9:b1:af:bc:11:62:
74:4a:08:ec:6e:69:2c:88:39:1e:d0:4b:14:64:6a:
c8:21:8d:d3:93:82:95:44:16:86:10:14:5d:52:81:
18:a6:19:35:39:d1:25:99:d8:bf:fa:18:2f:7a:4e:
26:5e:d7:1d:e8:bf:f0:43:f0:63:26:de:15:ae:97:
43:db:46:d2:f1:8f:5f:a8:b1:39:d5:87:7b:91:20:
08:51:e6:1c:4e:dc:81:3f:26:79:8e:de:82:e6:2e:
f0:ca:f7:c8:08:3f:53:6e:28:f8:9a:49:9e:0d:e6:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:C2:A1:2D:6F:B8:4A:C1:EA:6F:3E:E5:36:BA:EC:A8:65:48:93
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:32:0a:58:9d:24:71:71:7f:18:d6:26:ad:6d:63:89:fa:e8:
ff:15:1c:2d:26:fd:97:ff:9b:c8:35:62:e0:cb:0a:00:d2:e3:
d1:66:58:ba:45:9c:ce:6f:d9:fc:9e:e2:12:81:75:bc:c7:04:
2e:29:fd:bb:1a:6d:90:f1:91:7c:5b:f0:26:66:95:ad:da:c9:
34:cd:b3:64:6c:d5:25:7b:f0:85:1e:1c:87:92:64:17:79:0e:
ae:8d:29:ed:ee:fc:2c:52:d5:bc:a4:56:9a:8b:90:db:2b:8a:
4f:51:c7:f7:5d:3b:50:e8:6e:33:0f:53:22:59:a8:ba:e3:b1:
72:b5:76:0a:bc:a1:e5:37:c3:4e:7f:47:ab:6c:e4:bc:1f:09:
3a:eb:2f:4d:2b:b1:23:cb:b1:b6:f0:40:6d:71:ef:fb:de:88:
c1:c9:de:63:d2:af:a4:a0:e6:d3:1b:cb:9f:d7:3c:62:67:a2:
12:58:bb:19:4a:cc:4f:8c:a6:eb:4a:30:a2:d4:61:54:23:de:
7f:da:fb:94:f1:45:4f:42:5c:74:5d:a7:97:36:20:bb:a3:00:
2c:ad:25:90:8c:0d:02:4d:08:45:f2:66:07:12:94:c6:18:ca:
93:ed:c7:e6:54:35:aa:d8:e4:22:4c:46:2a:f5:86:a2:5d:ac:
0e:c2:20:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyk0COB/aeJyLL7ZKaSCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm
NWNlNTEwHhcNMjUxMTExMTIwMDUxWhcNMjUxMTEyMTIwMDUxWjAzMTEwLwYDVQQD
EyhlZmY4YzJhMTJkNmZiODRhYzFlYTZmM2VlNTM2YmFlY2E4NjU0ODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFGGLmrdQFNxgUA3RoPDseBTGTQZ
rSqLE0cE6nrX9t2ZaBte6XdWHoiYevY2BBxwrUNYCM0XlxqVejQeHHI/UXoPksms
5P/NGPllGXhd62nii783O5aIqUFemSxJ9lscT6jtVS0pFXHpu/1z6jg8jBHqSHm6
RjKHRnrMwcPO6CYvmxtzbMD8l5y2Yi06OKbZsa+8EWJ0SgjsbmksiDke0EsUZGrI
IY3Tk4KVRBaGEBRdUoEYphk1OdElmdi/+hgvek4mXtcd6L/wQ/BjJt4VrpdD20bS
8Y9fqLE51Yd7kSAIUeYcTtyBPyZ5jt6C5i7wyvfICD9Tbij4mkmeDeYZ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/4wqEtb7hKwepvPuU2uuyoZUiTMB8GA1UdIwQY
MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt
NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm
LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjIKWJ0k
cXF/GNYmrW1jifro/xUcLSb9l/+byDVi4MsKANLj0WZYukWczm/Z/J7iEoF1vMcE
Lin9uxptkPGRfFvwJmaVrdrJNM2zZGzVJXvwhR4ch5JkF3kOro0p7e78LFLVvKRW
mouQ2yuKT1HH9107UOhuMw9TIlmouuOxcrV2Cryh5TfDTn9Hq2zkvB8JOusvTSux
I8uxtvBAbXHv+96IwcneY9KvpKDm0xvLn9c8YmeiEli7GUrMT4ym60owotRhVCPe
f9r7lPFFT0JcdF2nlzYgu6MALK0lkIwNAk0IRfJmBxKUxhjKk+3H5lQ1qtjkIkxG
KvWGol2sDsIgXQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:33 2025 by rpki-client