Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: n0ecptsTxcL7RISvkw/SiEExvaFOi23BGPGTeyZsSSw=
Subject key identifier: A7:F6:FC:6C:5D:26:2A:E8:4C:DB:6B:D2:E7:69:DE:54:91:8B:30:AB
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019A71B8F63EAABF053715BAF75AF8E5AE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 1610
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: euSZoytOaD8Z5RGpy6l62Ek9z9M1osB2ylwxo118Tr0=)
2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=)
3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f6:3e:aa:bf:05:37:15:ba:f7:5a:f8:e5:ae:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=a7f6fc6c5d262ae84cdb6bd2e769de54918b30ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:f0:d9:38:eb:5e:41:7f:5f:b1:6b:f3:1e:
b0:b5:fe:61:a9:3c:48:92:2a:61:be:1d:88:24:03:
fa:5e:07:a9:70:ed:02:cb:e8:2b:04:f0:07:73:bb:
91:62:23:c1:70:f1:6f:00:14:0f:18:e5:da:1a:e2:
9e:4b:c3:33:14:93:35:fd:7e:88:7e:fe:0f:da:47:
ef:19:b7:ea:f5:0f:a3:9b:51:55:a3:68:f8:ba:20:
50:41:0c:10:95:bc:5c:9e:d3:39:bb:36:10:c3:c8:
74:8a:c2:bc:eb:68:27:b1:a2:71:c5:a4:82:c0:7d:
a5:b6:ee:9c:0f:80:3b:35:ee:cd:6f:e5:01:d1:27:
fe:38:c1:7d:31:e5:01:89:f2:83:ba:d4:96:3e:67:
62:70:cc:2b:74:96:2d:ab:f2:9c:29:3c:3c:a7:a4:
3f:a5:88:04:6f:e7:30:54:0a:9a:ae:2a:c7:b3:c7:
c9:94:97:4f:11:90:56:32:a4:83:62:bc:fa:85:9f:
64:3d:6c:d6:1b:7a:07:9c:5f:5f:0d:c0:9f:2f:dd:
c6:67:82:4f:2f:c1:49:26:e1:81:33:2b:ce:25:95:
47:10:e0:29:d4:26:59:c0:27:a3:fa:79:21:92:38:
31:7a:00:ee:7e:f1:fc:eb:94:d0:d6:31:e3:46:09:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:FC:6C:5D:26:2A:E8:4C:DB:6B:D2:E7:69:DE:54:91:8B:30:AB
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ca:19:fe:90:c4:b1:f9:bd:a7:e5:45:6c:50:ee:11:b3:82:
04:75:1b:61:64:d7:0e:6e:c6:31:de:d1:bf:dc:64:9e:55:7f:
34:93:5c:96:a4:61:c1:a7:38:e4:11:ff:62:0a:05:0f:a5:54:
93:2e:c5:f2:35:54:9d:56:65:2c:81:db:6c:a7:44:29:f6:0b:
47:b6:8c:32:38:db:ce:f6:d8:54:49:c8:12:6d:da:80:20:3d:
0a:3d:be:59:bd:4d:ff:6b:08:e5:d0:f9:87:2c:d4:f0:d3:f2:
16:c3:c0:29:7a:ce:00:25:76:13:f5:6e:78:47:29:96:be:c0:
12:78:8e:a8:92:ac:03:b1:04:91:c2:76:83:59:9a:23:9f:5c:
c0:ce:be:73:af:11:5a:21:a7:18:1f:aa:ed:94:ce:65:4c:72:
9e:b1:3e:93:73:8b:bc:8d:81:2c:03:11:e7:b4:b6:df:b9:20:
d6:65:0a:fe:0b:d5:29:41:82:79:df:86:56:93:a0:21:54:55:
de:d0:04:98:38:1c:1d:2e:09:89:40:23:cd:25:15:9c:dc:0a:
d6:c4:2f:96:2d:86:59:2e:50:bf:d6:08:2e:72:05:3b:12:10:
a3:af:51:48:70:cc:b2:97:d7:5a:f5:19:a2:96:c2:3b:80:24:
a3:f5:3f:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPY+qr8FNxW691r45a4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm
MDRmNjEwHhcNMjUxMTExMDcwMjE3WhcNMjUxMTEyMDcwMjE3WjAzMTEwLwYDVQQD
EyhhN2Y2ZmM2YzVkMjYyYWU4NGNkYjZiZDJlNzY5ZGU1NDkxOGIzMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Dw2TjrXkF/X7Fr8x6wtf5hqTxI
kiphvh2IJAP6XgepcO0Cy+grBPAHc7uRYiPBcPFvABQPGOXaGuKeS8MzFJM1/X6I
fv4P2kfvGbfq9Q+jm1FVo2j4uiBQQQwQlbxcntM5uzYQw8h0isK862gnsaJxxaSC
wH2ltu6cD4A7Ne7Nb+UB0Sf+OMF9MeUBifKDutSWPmdicMwrdJYtq/KcKTw8p6Q/
pYgEb+cwVAqarirHs8fJlJdPEZBWMqSDYrz6hZ9kPWzWG3oHnF9fDcCfL93GZ4JP
L8FJJuGBMyvOJZVHEOAp1CZZwCej+nkhkjgxegDufvH865TQ1jHjRgmO7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf2/GxdJiroTNtr0udp3lSRizCrMB8GA1UdIwQY
MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt
MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk
LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssoZ/pDE
sfm9p+VFbFDuEbOCBHUbYWTXDm7GMd7Rv9xknlV/NJNclqRhwac45BH/YgoFD6VU
ky7F8jVUnVZlLIHbbKdEKfYLR7aMMjjbzvbYVEnIEm3agCA9Cj2+Wb1N/2sI5dD5
hyzU8NPyFsPAKXrOACV2E/VueEcplr7AEniOqJKsA7EEkcJ2g1maI59cwM6+c68R
WiGnGB+q7ZTOZUxynrE+k3OLvI2BLAMR57S237kg1mUK/gvVKUGCed+GVpOgIVRV
3tAEmDgcHS4JiUAjzSUVnNwK1sQvli2GWS5Qv9YILnIFOxIQo69RSHDMspfXWvUZ
opbCO4Ako/U/EQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:25 2025 by rpki-client