Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: /aLMj9XczKCkxnTnnYygz9TJWFViOiTR+Af/tBgc8ag=
Subject key identifier: 25:A6:BE:6F:B0:B3:9A:FA:E5:8A:46:D2:84:14:78:FB:0D:80:3F:13
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 019A2478EB68F645154345DEC5B47ED5EA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 11D1
Signing time: Mon 27 Oct 2025 07:01:35 +0000
Manifest this update: Mon 27 Oct 2025 07:01:35 +0000
Manifest next update: Tue 28 Oct 2025 07:01:35 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: ghmnbK2GAxte3lgP0VI26eBBeHP8Lt1g68i4NmjNXHE=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:eb:68:f6:45:15:43:45:de:c5:b4:7e:d5:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Oct 27 07:01:35 2025 GMT
Not After : Oct 28 07:01:35 2025 GMT
Subject: CN=25a6be6fb0b39afae58a46d2841478fb0d803f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:de:ef:4e:4a:7c:03:d6:a3:56:04:fd:b7:
a1:dd:bb:87:2d:0f:e7:13:b6:13:26:1a:96:d4:07:
ce:98:2e:97:e8:c5:93:cc:ea:6d:a1:76:70:96:1d:
11:cb:c9:7c:4a:10:02:f8:2d:90:8c:31:f9:54:1c:
21:7a:f5:8c:9b:df:44:74:22:9e:ce:72:f8:6c:76:
3e:35:0e:01:c4:c0:f6:03:64:a8:2b:a1:e3:05:d7:
ce:c6:99:4b:c1:a9:bf:6c:a0:b0:3c:71:24:cc:e5:
c0:d3:72:13:d2:43:0e:38:25:bc:f1:a7:57:25:7d:
92:cc:5c:52:cf:18:eb:c0:17:45:af:9f:48:e8:7a:
97:62:c6:b8:92:22:16:3b:ad:77:34:9f:a9:89:da:
61:25:36:4e:34:7e:39:9b:6a:14:6d:27:b8:57:0b:
44:6a:41:28:a0:d0:eb:da:8a:56:a2:62:d4:30:39:
43:44:ba:60:75:89:8d:9d:53:58:a7:ef:9e:ad:4c:
6c:4c:af:61:07:7a:97:82:d2:de:6b:24:2b:a1:62:
82:fe:ab:6c:b3:c8:74:4e:74:4e:9b:14:a1:98:56:
47:5d:05:71:dc:fa:6e:2a:5f:5a:03:c6:47:bc:c8:
4c:39:65:fc:55:4a:9b:82:42:48:ba:11:8d:f0:4c:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:BE:6F:B0:B3:9A:FA:E5:8A:46:D2:84:14:78:FB:0D:80:3F:13
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e5:2b:79:b5:2b:6a:39:63:47:1f:32:49:19:35:ff:af:5a:
e0:d4:90:6e:6a:f3:3e:ce:45:d8:c5:2c:68:39:69:b0:48:00:
3b:30:08:35:05:70:97:b7:93:27:5b:a0:31:ac:cd:f0:6f:29:
c7:93:ae:58:4e:c0:a7:60:6b:f1:6f:08:ee:30:d0:9d:7c:fd:
03:2a:29:39:e7:f6:14:2a:71:bb:51:df:dc:a8:fc:9c:b0:84:
b4:fc:a1:1a:db:05:e4:75:cf:75:57:eb:f2:6f:4b:92:56:c4:
e6:43:79:be:9c:67:b4:0a:40:3b:05:2a:51:dc:08:55:16:08:
88:da:9a:ba:af:3e:9e:9c:9b:41:3f:3f:6c:3b:52:c9:d7:8b:
c4:61:7c:48:1f:9e:be:ca:ac:e5:60:92:09:77:22:8b:89:ee:
e6:d3:eb:fc:00:87:b3:e3:90:a0:4a:09:0a:78:91:95:74:0f:
32:61:da:a5:c1:b0:ef:51:d8:75:9d:75:c1:1c:f3:70:d7:a7:
30:aa:52:0f:05:f1:8a:da:7d:43:68:f5:10:5d:ee:76:50:2c:
be:04:3a:1c:34:3f:6b:fc:1a:b7:96:a7:66:df:ad:5b:f1:f6:
a9:f9:fe:a5:04:4b:74:61:12:a4:4c:21:71:bb:bf:d9:e6:2a:
e4:e4:e5:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeOto9kUVQ0XexbR+1epMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjUxMDI3MDcwMTM1WhcNMjUxMDI4MDcwMTM1WjAzMTEwLwYDVQQD
EygyNWE2YmU2ZmIwYjM5YWZhZTU4YTQ2ZDI4NDE0NzhmYjBkODAzZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhTe705KfAPWo1YE/beh3buHLQ/n
E7YTJhqW1AfOmC6X6MWTzOptoXZwlh0Ry8l8ShAC+C2QjDH5VBwhevWMm99EdCKe
znL4bHY+NQ4BxMD2A2SoK6HjBdfOxplLwam/bKCwPHEkzOXA03IT0kMOOCW88adX
JX2SzFxSzxjrwBdFr59I6HqXYsa4kiIWO613NJ+pidphJTZONH45m2oUbSe4VwtE
akEooNDr2opWomLUMDlDRLpgdYmNnVNYp++erUxsTK9hB3qXgtLeayQroWKC/qts
s8h0TnROmxShmFZHXQVx3PpuKl9aA8ZHvMhMOWX8VUqbgkJIuhGN8Ey5RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWmvm+ws5r65YpG0oQUePsNgD8TMB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+UrebUr
ajljRx8ySRk1/69a4NSQbmrzPs5F2MUsaDlpsEgAOzAINQVwl7eTJ1ugMazN8G8p
x5OuWE7Ap2Br8W8I7jDQnXz9AyopOef2FCpxu1Hf3Kj8nLCEtPyhGtsF5HXPdVfr
8m9LklbE5kN5vpxntApAOwUqUdwIVRYIiNqauq8+npybQT8/bDtSydeLxGF8SB+e
vsqs5WCSCXcii4nu5tPr/ACHs+OQoEoJCniRlXQPMmHapcGw71HYdZ11wRzzcNen
MKpSDwXxitp9Q2j1EF3udlAsvgQ6HDQ/a/wat5anZt+tW/H2qfn+pQRLdGESpEwh
cbu/2eYq5OTl+w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:24 2025 by rpki-client