Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: 87iAESMKW3vvFPvh+0bPBfdqqq2KKul5n3PGA1FzVEo=
Subject key identifier: A7:45:10:06:6D:5E:D5:19:95:C1:D1:EB:C2:42:17:12:5D:B6:8A:DF
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019A217693816EE008C5E9B19A7E7B33EBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 14E5
Signing time: Sun 26 Oct 2025 17:00:10 +0000
Manifest this update: Sun 26 Oct 2025 17:00:10 +0000
Manifest next update: Mon 27 Oct 2025 17:00:10 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: sn9Q+PNyUscLoFfETJWsirP9p32JS4Bt0bef9whVjE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:93:81:6e:e0:08:c5:e9:b1:9a:7e:7b:33:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Oct 26 17:00:10 2025 GMT
Not After : Oct 27 17:00:10 2025 GMT
Subject: CN=a74510066d5ed51995c1d1ebc24217125db68adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:f8:ac:77:ca:08:57:61:56:b5:8f:a5:7c:
f3:38:9c:ee:4f:63:d9:5b:dd:99:a8:38:22:f3:31:
6b:37:57:33:25:14:cf:e5:7e:6d:d8:3c:5f:36:d5:
bb:bd:7f:c8:c9:ad:96:92:29:6c:06:70:f4:7e:7d:
af:fa:89:68:47:2b:11:22:27:3d:1b:85:ee:f5:9e:
f8:20:30:82:d6:91:9a:c3:fe:2c:de:ce:eb:91:ff:
2e:87:b2:82:0a:b5:5d:87:6d:28:e5:c8:d2:34:b2:
80:78:90:90:05:15:86:bc:84:47:d0:4f:6a:80:8e:
5d:32:20:a1:06:9c:94:d4:76:f4:5b:b9:62:d8:8e:
59:7a:bd:ff:42:a1:f1:5b:81:7e:c1:3f:76:65:87:
3d:02:92:1e:64:1e:f5:dd:29:9f:45:ac:91:e1:c5:
f7:5a:c3:6b:6b:e9:b9:37:bd:ec:14:ee:d2:03:a2:
c3:7b:e2:62:96:f2:f4:68:03:56:f2:c5:f5:75:b1:
70:d9:c8:36:b1:44:30:54:a7:47:16:9c:ae:bd:3a:
11:89:2a:71:08:66:27:5f:11:3d:72:b1:1a:c2:cc:
df:a3:4a:54:3d:d8:3e:ef:d2:88:0b:32:a5:21:3c:
40:ef:0c:a6:a8:b5:42:87:0b:24:59:66:e9:73:03:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:10:06:6D:5E:D5:19:95:C1:D1:EB:C2:42:17:12:5D:B6:8A:DF
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:99:f5:ae:10:42:6c:bf:58:0a:2a:26:e4:8c:d7:79:1b:30:
f3:dd:f1:24:87:a4:5a:a9:1d:ee:ff:62:c0:7d:56:74:57:6e:
59:4b:3c:6d:b6:50:d1:b0:28:e0:18:73:67:13:8e:b1:d7:f7:
11:2d:a1:4d:44:24:4a:dc:b1:48:c8:44:4f:ba:d0:4e:23:25:
58:78:ac:cc:a9:45:c5:42:0f:db:90:05:e9:bd:da:24:53:8a:
4e:e4:0c:27:41:37:1b:58:07:b7:6f:5e:f2:6b:54:d4:dc:3f:
f2:5d:1b:70:61:47:4c:7d:c7:fa:2e:5d:4c:8f:fe:ed:ff:fe:
24:e0:69:4d:5d:0a:5f:9b:67:f2:88:eb:69:be:45:fa:d6:95:
b1:7e:75:24:f8:db:11:5f:b5:4f:24:f0:a9:35:cc:ba:a6:74:
13:ca:bb:5c:05:84:e2:fc:f4:7c:a9:fb:0c:65:c3:74:93:88:
a3:ff:c1:ce:45:51:5a:03:bc:ac:75:7a:eb:73:18:b8:6b:91:
de:f1:d4:5b:44:32:f6:11:8f:68:58:5f:62:ed:f8:c6:d0:36:
d1:67:fb:4b:14:99:fb:c8:5a:ba:63:55:8c:53:a5:88:48:52:
ab:85:26:a8:d5:03:94:c9:8b:6a:ae:81:a0:35:b5:f2:39:d5:
34:d7:f0:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohdpOBbuAIxemxmn57M+ulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYTNjOWM0NDk3YzFmYTQ4NWU5ZGQxNzU4YWY5ZjAwMGUy
YmQ0YmYwHhcNMjUxMDI2MTcwMDEwWhcNMjUxMDI3MTcwMDEwWjAzMTEwLwYDVQQD
EyhhNzQ1MTAwNjZkNWVkNTE5OTVjMWQxZWJjMjQyMTcxMjVkYjY4YWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHf4rHfKCFdhVrWPpXzzOJzuT2PZ
W92ZqDgi8zFrN1czJRTP5X5t2DxfNtW7vX/Iya2WkilsBnD0fn2v+oloRysRIic9
G4Xu9Z74IDCC1pGaw/4s3s7rkf8uh7KCCrVdh20o5cjSNLKAeJCQBRWGvIRH0E9q
gI5dMiChBpyU1Hb0W7li2I5Zer3/QqHxW4F+wT92ZYc9ApIeZB713SmfRayR4cX3
WsNra+m5N73sFO7SA6LDe+JilvL0aANW8sX1dbFw2cg2sUQwVKdHFpyuvToRiSpx
CGYnXxE9crEawszfo0pUPdg+79KICzKlITxA7wymqLVChwskWWbpcwMklQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdFEAZtXtUZlcHR68JCFxJdtorfMB8GA1UdIwQY
MBaAFA6jycRJfB+khendF1ivnwAOK9S/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2Ut
YTk5MGY5MDY0YTU3LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2UtYTk5MGY5MDY0YTU3
LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJn1rhBC
bL9YCiom5IzXeRsw893xJIekWqkd7v9iwH1WdFduWUs8bbZQ0bAo4BhzZxOOsdf3
ES2hTUQkStyxSMhET7rQTiMlWHiszKlFxUIP25AF6b3aJFOKTuQMJ0E3G1gHt29e
8mtU1Nw/8l0bcGFHTH3H+i5dTI/+7f/+JOBpTV0KX5tn8ojrab5F+taVsX51JPjb
EV+1TyTwqTXMuqZ0E8q7XAWE4vz0fKn7DGXDdJOIo//BzkVRWgO8rHV663MYuGuR
3vHUW0Qy9hGPaFhfYu34xtA20Wf7SxSZ+8haumNVjFOliEhSq4UmqNUDlMmLaq6B
oDW18jnVNNfwbQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:59:45 2025 by rpki-client