Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: o1qCzK95y68w3eCOSvULVYmUa9f8wBw12EZk6ANoCek=
Subject key identifier: 49:BE:63:82:E3:B4:A7:5A:FD:11:A3:94:EF:4C:F3:68:C6:4B:91:DE
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 019A7293375B7B6B63E803561768F6952CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0C2A
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: syxRl6fAtanLmqQ5xH3MEizZC6iA1Px719cBnwwlrZw=)
2: xx1FjY8JYYnnymM_Usd0dhEPXMc.roa (hash: jThxXylFfBYyWhSUb/DWJLhZb//oHbnd3oYRtsD1klg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:37:5b:7b:6b:63:e8:03:56:17:68:f6:95:2c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=49be6382e3b4a75afd11a394ef4cf368c64b91de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:01:2f:ed:2e:46:c8:eb:54:a1:94:8f:02:
a6:ea:71:e9:e9:0d:dd:e7:59:71:a4:c4:f6:c7:0b:
64:cf:ad:bb:f6:88:b6:e1:c6:56:fd:3c:da:81:54:
94:6a:ac:7c:45:c6:34:8f:e8:c4:69:6f:04:d2:39:
8f:96:2b:73:70:70:ed:0d:b8:5a:d7:06:ca:f4:81:
34:d4:25:b8:73:94:9a:45:31:e0:26:2f:3d:b6:87:
08:49:5d:c9:6a:03:14:30:a2:08:3a:9f:92:ed:d4:
c6:5a:58:92:c1:da:7b:ca:b5:36:c9:d8:19:f5:ab:
2b:81:6a:78:6e:af:db:f5:26:98:2c:36:86:ad:ca:
77:35:7a:cc:0a:d5:01:6c:c6:6d:27:a6:86:f9:a8:
0a:26:27:84:cc:c5:18:e4:fe:36:64:97:26:f7:89:
89:67:62:a9:20:34:8e:00:73:e1:4e:01:2c:bd:67:
50:eb:99:c7:f1:eb:a0:ea:87:f8:17:b5:2c:f1:d2:
bd:05:4d:38:68:5d:7e:df:d4:8f:34:3e:64:39:ab:
3b:04:bc:d2:e7:28:3d:eb:29:88:ea:47:46:6c:7e:
4d:3e:bf:88:bc:41:91:16:f2:b6:d4:01:76:2b:04:
9f:52:64:59:14:6c:ab:45:e5:87:af:bd:33:36:86:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BE:63:82:E3:B4:A7:5A:FD:11:A3:94:EF:4C:F3:68:C6:4B:91:DE
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1c:6d:4e:3e:57:62:2d:9e:f9:29:1c:61:ac:e4:be:eb:32:
a1:86:66:4d:ef:5c:d9:f8:6c:30:2b:67:dc:b9:78:ae:b0:a7:
24:46:12:5a:5a:b7:5f:62:0b:85:1f:36:15:07:77:9a:0a:b8:
d2:28:19:76:a6:74:fb:11:26:91:56:e8:f5:27:2a:22:98:f2:
f0:15:a2:46:9c:35:73:15:93:8f:8b:3f:c8:24:8e:c8:bf:bc:
91:97:be:b5:00:a6:a7:ba:de:5f:d3:d7:8c:15:76:cf:c0:dc:
80:81:8d:1d:20:10:17:1a:0d:05:ef:07:16:d3:9d:73:18:19:
b7:65:5e:28:17:b2:9d:eb:bb:1d:34:5a:08:63:4a:78:d3:f3:
38:b9:95:26:f8:ee:87:24:28:2a:d4:85:60:41:12:29:9b:26:
5b:e6:5d:42:ab:11:69:12:07:6a:bc:1d:11:4b:1b:cb:6f:85:
a7:97:d5:f1:7a:98:81:85:f9:e6:08:90:e8:dd:b1:8b:c6:7c:
55:fb:42:aa:05:54:5b:e4:33:a5:44:b1:4f:0e:b9:7b:69:57:
72:93:20:a1:1a:3b:cd:36:ed:99:9d:ec:5e:13:80:12:0f:d1:
cb:6c:74:48:a5:1e:97:7a:b2:56:11:29:7a:12:39:19:6f:5c:
00:f0:37:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpykzdbe2tj6ANWF2j2lSz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjgyNDE1OGI3MzBjNDQxNjdlYTc3M2E5NzcyMThjYzYy
ZjQxNmEwHhcNMjUxMTExMTEwMDQxWhcNMjUxMTEyMTEwMDQxWjAzMTEwLwYDVQQD
Eyg0OWJlNjM4MmUzYjRhNzVhZmQxMWEzOTRlZjRjZjM2OGM2NGI5MWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjsBL+0uRsjrVKGUjwKm6nHp6Q3d
51lxpMT2xwtkz6279oi24cZW/TzagVSUaqx8RcY0j+jEaW8E0jmPlitzcHDtDbha
1wbK9IE01CW4c5SaRTHgJi89tocISV3JagMUMKIIOp+S7dTGWliSwdp7yrU2ydgZ
9asrgWp4bq/b9SaYLDaGrcp3NXrMCtUBbMZtJ6aG+agKJieEzMUY5P42ZJcm94mJ
Z2KpIDSOAHPhTgEsvWdQ65nH8eug6of4F7Us8dK9BU04aF1+39SPND5kOas7BLzS
5yg96ymI6kdGbH5NPr+IvEGRFvK21AF2KwSfUmRZFGyrReWHr70zNob82QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm+Y4LjtKda/RGjlO9M82jGS5HeMB8GA1UdIwQY
MBaAFAxoJBWLcwxEFn6nc6l3IYzGL0FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUt
ZmEyMTc2YWFhODQ5LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUtZmEyMTc2YWFhODQ5
LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihxtTj5X
Yi2e+SkcYazkvusyoYZmTe9c2fhsMCtn3Ll4rrCnJEYSWlq3X2ILhR82FQd3mgq4
0igZdqZ0+xEmkVbo9ScqIpjy8BWiRpw1cxWTj4s/yCSOyL+8kZe+tQCmp7reX9PX
jBV2z8DcgIGNHSAQFxoNBe8HFtOdcxgZt2VeKBeyneu7HTRaCGNKeNPzOLmVJvju
hyQoKtSFYEESKZsmW+ZdQqsRaRIHarwdEUsby2+Fp5fV8XqYgYX55giQ6N2xi8Z8
VftCqgVUW+QzpUSxTw65e2lXcpMgoRo7zTbtmZ3sXhOAEg/Ry2x0SKUel3qyVhEp
ehI5GW9cAPA3JQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:30 2025 by rpki-client