Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier: qrWDRXWCDyByNUprB/vOkZwzIVaecMVj9dGyL9z4Nfw=
Subject key identifier: FF:78:F8:71:93:A1:9D:A3:70:56:0B:BC:8F:9A:D4:D6:F5:81:00:A5
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial: 019A4C2A4C1ED98CC92B4B71C05F74361C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 00:00:31 +0000
Manifest this update: Tue 04 Nov 2025 00:00:31 +0000
Manifest next update: Wed 05 Nov 2025 00:00:31 +0000
Files and hashes: 1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: SqPW4o9ejz5Cv6+eqrsWcGQohtyRBiv5tdoHpiZn6Hs=)
2: 1-ZNTPcQUw8PaedWPij0FjBg6iOY.roa (hash: hVPLICluHooRq9Tlz1cpYKX47tdy3LL3+Q3QLkvNJ5E=)
3: 2Gw8QOnYAv2wXYmUeczArrriB1Q.roa (hash: scuEsz0Czk4jUI1o0fHWA1GaytybLeSIsLRXLL6rVAo=)
4: fXqeDNUF09E57BXRF0QIls-uZ44.roa (hash: hJ/0oVyr/hUhxK31bOGJWQ8EL165OcYQ6RwEzy2jKI8=)
5: uGd2svx2nM-ThRz4Z5ZLS4pryPE.roa (hash: miR6GHPuEFoodfHk/rc71EoG5Q+xZw/Ncoa5ppurE4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:4c:1e:d9:8c:c9:2b:4b:71:c0:5f:74:36:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
Validity
Not Before: Nov 4 00:00:31 2025 GMT
Not After : Nov 5 00:00:31 2025 GMT
Subject: CN=ff78f87193a19da370560bbc8f9ad4d6f58100a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:71:2f:26:ad:dd:15:ce:33:78:7f:6b:dc:
be:0f:dd:3e:a0:8b:27:83:87:c5:68:c2:e4:0b:75:
f6:a1:fd:5b:a4:e7:04:da:0c:43:3e:0b:b6:61:8d:
64:d0:9f:ea:c8:5d:2e:fc:cd:4e:34:27:bc:1a:1e:
22:08:94:00:22:35:b8:e9:f5:1e:d8:3f:be:49:e3:
49:78:5e:c8:8c:a7:cf:ea:25:6d:d7:eb:60:15:32:
2d:9b:df:36:d0:a1:cb:1e:67:38:2c:15:00:3d:81:
78:78:7d:f5:f1:e9:b6:a3:2b:0a:73:1f:e5:e4:54:
17:02:1e:14:98:e6:46:ca:34:91:34:c6:71:a8:66:
92:57:87:00:4a:a6:67:e2:f0:a8:1a:7a:a6:35:5b:
cd:a3:0c:1a:9f:bb:5a:5d:77:e4:9b:a0:08:46:02:
a0:cf:10:c1:53:c6:ad:c9:5d:90:1c:27:a3:b3:e3:
70:ea:ec:81:2f:40:c7:cc:f8:07:69:73:37:fc:8d:
a5:e9:e1:4d:c4:f4:c4:84:a0:7f:41:dd:f6:9a:e9:
4d:db:90:5d:f9:54:88:28:df:4e:2e:05:33:fa:f0:
7a:bb:f4:77:b7:03:4e:ea:d4:af:4b:3d:19:aa:d2:
0a:05:e4:8f:73:c2:f6:37:80:c1:94:97:4d:32:96:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:F8:71:93:A1:9D:A3:70:56:0B:BC:8F:9A:D4:D6:F5:81:00:A5
X509v3 Authority Key Identifier:
keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ba:3c:55:cf:77:02:90:70:aa:85:4d:40:58:92:38:02:e5:
b7:13:3f:29:3b:4e:82:a0:de:11:25:20:3f:da:f7:5b:3f:36:
d4:6f:d5:30:85:9c:ec:f9:c8:09:05:8b:2e:62:a7:a9:39:d6:
9a:f9:0d:0b:8d:76:20:93:66:54:a7:e5:80:fb:bd:19:4d:0f:
7b:e3:e1:9d:45:cd:c2:dc:af:ba:ff:f0:7b:a0:e2:62:62:57:
7a:b0:d6:15:2e:72:b1:d9:60:e5:33:f7:5d:af:f7:d1:b2:e5:
f8:bc:8e:78:b9:8b:09:a3:97:72:55:46:3f:dc:f1:f5:c7:60:
e7:e1:db:39:df:27:29:b0:18:07:42:07:5f:c7:f8:be:21:1f:
68:26:7b:1f:ff:93:c8:06:ee:6b:56:16:c8:dd:06:ac:3e:42:
30:8a:ed:f7:c9:d9:f5:da:42:26:a7:ea:2a:5e:d8:8f:33:7a:
52:03:34:60:9a:ca:8b:59:6e:bf:45:81:84:86:e4:2e:10:b3:
ca:f0:3a:c7:26:26:87:d5:14:1a:dc:bf:18:58:f7:a7:bb:02:
d6:1b:e3:b1:bd:22:bc:ca:8c:5c:4d:d9:30:a8:ce:41:7a:32:
41:23:64:05:0f:99:03:ff:88:5f:8c:cd:7e:60:09:3e:19:55:
b6:32:2c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMKkwe2YzJK0txwF90NhxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzA0NmQxNmNmYzM5MWIwMjhiODg3NDM3NzNjZTAwNWNm
OTdiMWQwHhcNMjUxMTA0MDAwMDMxWhcNMjUxMTA1MDAwMDMxWjAzMTEwLwYDVQQD
EyhmZjc4Zjg3MTkzYTE5ZGEzNzA1NjBiYmM4ZjlhZDRkNmY1ODEwMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwldxLyat3RXOM3h/a9y+D90+oIsn
g4fFaMLkC3X2of1bpOcE2gxDPgu2YY1k0J/qyF0u/M1ONCe8Gh4iCJQAIjW46fUe
2D++SeNJeF7IjKfP6iVt1+tgFTItm9820KHLHmc4LBUAPYF4eH318em2oysKcx/l
5FQXAh4UmOZGyjSRNMZxqGaSV4cASqZn4vCoGnqmNVvNowwan7taXXfkm6AIRgKg
zxDBU8atyV2QHCejs+Nw6uyBL0DHzPgHaXM3/I2l6eFNxPTEhKB/Qd32mulN25Bd
+VSIKN9OLgUz+vB6u/R3twNO6tSvSz0ZqtIKBeSPc8L2N4DBlJdNMpaREwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP94+HGToZ2jcFYLvI+a1Nb1gQClMB8GA1UdIwQY
MBaAFNAwRtFs/DkbAouIdDdzzgBc+XsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYt
ZGMwZTFhNzI1MjIxLzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYtZGMwZTFhNzI1MjIx
LzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObo8Vc93
ApBwqoVNQFiSOALltxM/KTtOgqDeESUgP9r3Wz821G/VMIWc7PnICQWLLmKnqTnW
mvkNC412IJNmVKflgPu9GU0Pe+PhnUXNwtyvuv/we6DiYmJXerDWFS5ysdlg5TP3
Xa/30bLl+LyOeLmLCaOXclVGP9zx9cdg5+HbOd8nKbAYB0IHX8f4viEfaCZ7H/+T
yAbua1YWyN0GrD5CMIrt98nZ9dpCJqfqKl7YjzN6UgM0YJrKi1luv0WBhIbkLhCz
yvA6xyYmh9UUGty/GFj3p7sC1hvjsb0ivMqMXE3ZMKjOQXoyQSNkBQ+ZA/+IX4zN
fmAJPhlVtjIs0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:12 2025 by rpki-client