Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: q2FX0+GccOsgvQBqah47IucV04l09Pk9R9sDFHFovSY=
Subject key identifier: 59:CF:A3:00:93:3B:4A:A9:DC:C8:F5:C1:B0:AA:70:01:4A:F6:22:B3
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019A7226557F6230D148E503FF3DA6B5F04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0D29
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: KqHv7uJIqAutAwXziH4BkEom81658c6YearPtAx1GoQ=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:55:7f:62:30:d1:48:e5:03:ff:3d:a6:b5:f0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=59cfa300933b4aa9dcc8f5c1b0aa70014af622b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:eb:27:7a:5a:dd:88:5d:e9:da:6f:e9:79:
91:f8:94:63:3d:c3:a9:aa:8f:f5:49:b5:78:ec:c8:
fb:4d:11:33:17:39:f8:29:2d:c1:e3:10:4b:fa:3e:
95:57:22:d0:4e:0f:41:fd:d7:41:ca:d9:44:38:3c:
29:a7:bd:1f:e0:8e:ca:40:5e:11:02:0c:eb:e1:1a:
9c:d8:6c:9c:2f:86:6b:be:50:d0:3b:a0:31:b5:28:
98:9c:c5:a9:40:1d:71:79:24:74:69:85:fc:86:af:
fb:80:16:f6:76:5d:7d:15:20:e2:6a:ab:99:6c:5a:
11:f6:3e:0c:1c:a6:83:23:90:69:7a:49:c7:9f:0b:
c3:91:c3:a3:00:4a:31:cb:e1:7e:7b:17:d0:c7:ff:
d4:39:5b:5a:60:08:a8:b2:e2:e3:58:09:a1:84:e0:
a4:c9:df:ba:c6:e0:e7:84:26:15:3c:79:ae:1a:f9:
5a:cb:48:a3:a2:e8:b5:aa:65:dd:35:db:b9:3d:53:
a7:ce:c4:6a:ef:e3:2a:95:fe:c8:f4:93:5d:e3:ff:
98:fe:f7:ba:54:da:24:83:a6:3e:93:ef:ff:0b:96:
3b:2e:74:86:e9:96:61:02:fc:0e:74:d1:8c:99:84:
17:98:42:50:b7:07:9f:13:0d:b5:8f:3a:31:8b:38:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:A3:00:93:3B:4A:A9:DC:C8:F5:C1:B0:AA:70:01:4A:F6:22:B3
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:71:63:a6:a8:98:ef:3b:57:b3:9e:97:83:2e:2a:13:eb:2d:
0b:1d:f3:3d:ae:8f:b6:45:23:d1:e4:31:34:13:42:49:57:93:
64:0c:19:5a:62:99:95:2d:d2:81:cb:de:a4:44:a3:05:9d:0f:
67:d6:37:7f:c2:38:45:1a:7c:77:72:e6:6e:84:6e:6f:72:9d:
8a:5b:43:f5:c7:d9:ef:6c:61:99:9f:75:a4:d4:1f:19:38:c5:
96:7c:a7:db:22:b2:fe:d3:c5:d3:d7:f9:0b:c4:0a:c6:dc:65:
03:4d:42:ca:80:55:d6:36:ad:db:91:6b:02:b5:4b:a1:a9:f7:
92:0b:86:8a:e9:c5:8a:38:8c:c9:d6:99:bb:98:d1:23:0d:03:
1c:ad:08:93:d0:3f:3f:78:39:a8:d3:f3:89:41:fb:0b:f5:73:
11:37:5e:cf:70:61:62:57:ba:8f:47:31:cc:40:74:1f:41:67:
11:c1:85:bf:a9:b2:30:f3:1e:6b:e8:c4:9e:d6:5e:26:17:97:
aa:b2:06:59:ee:2d:68:23:17:bc:1d:29:d0:9c:45:3b:a2:05:
60:56:74:d7:20:1c:43:c9:f6:10:56:5d:ae:ea:8a:3d:c3:01:
f9:dc:9a:cf:73:33:a0:62:17:61:58:64:9b:9e:54:76:6f:bc:
30:09:11:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlV/YjDRSOUD/z2mtfBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw
YTI5YzAwHhcNMjUxMTExMDkwMTQ2WhcNMjUxMTEyMDkwMTQ2WjAzMTEwLwYDVQQD
Eyg1OWNmYTMwMDkzM2I0YWE5ZGNjOGY1YzFiMGFhNzAwMTRhZjYyMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn7rJ3pa3Yhd6dpv6XmR+JRjPcOp
qo/1SbV47Mj7TREzFzn4KS3B4xBL+j6VVyLQTg9B/ddBytlEODwpp70f4I7KQF4R
Agzr4Rqc2GycL4ZrvlDQO6AxtSiYnMWpQB1xeSR0aYX8hq/7gBb2dl19FSDiaquZ
bFoR9j4MHKaDI5BpeknHnwvDkcOjAEoxy+F+exfQx//UOVtaYAiosuLjWAmhhOCk
yd+6xuDnhCYVPHmuGvlay0ijoui1qmXdNdu5PVOnzsRq7+Mqlf7I9JNd4/+Y/ve6
VNokg6Y+k+//C5Y7LnSG6ZZhAvwOdNGMmYQXmEJQtwefEw21jzoxizgGEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnPowCTO0qp3Mj1wbCqcAFK9iKzMB8GA1UdIwQY
MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt
NDJhZTc1Yjc5NTdkLzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk
LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXFjpqiY
7ztXs56Xgy4qE+stCx3zPa6PtkUj0eQxNBNCSVeTZAwZWmKZlS3SgcvepESjBZ0P
Z9Y3f8I4RRp8d3LmboRub3KdiltD9cfZ72xhmZ91pNQfGTjFlnyn2yKy/tPF09f5
C8QKxtxlA01CyoBV1jat25FrArVLoan3kguGiunFijiMydaZu5jRIw0DHK0Ik9A/
P3g5qNPziUH7C/VzETdez3BhYle6j0cxzEB0H0FnEcGFv6myMPMea+jEntZeJheX
qrIGWe4taCMXvB0p0JxFO6IFYFZ01yAcQ8n2EFZdruqKPcMB+dyaz3MzoGIXYVhk
m55Udm+8MAkRgA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:44 2025 by rpki-client