Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: jcEaCf4kFcXatbhYYaAA8KFMfjnXzZabIAybECDBVhc=
Subject key identifier: 43:56:A7:F7:DA:3B:E6:23:28:B7:34:68:AB:D8:15:9A:CD:9C:6F:CC
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 019A71B87A78757CE6306235F0BC088C7D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 08B0
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: hLUh8uLrdm7ZyF1RiBvhmdOEaK0zTJhdwLO9yx5SJzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7a:78:75:7c:e6:30:62:35:f0:bc:08:8c:7d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=4356a7f7da3be62328b73468abd8159acd9c6fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:88:87:df:1c:3a:c6:08:0a:50:5e:c7:70:
ca:07:00:21:01:7e:85:84:60:13:ce:c8:83:ca:5b:
da:45:c9:28:e5:8e:23:c9:af:38:2c:bf:e5:b7:9c:
72:fe:3f:08:9e:02:b8:52:ae:47:bb:25:2d:c0:dc:
aa:4c:44:cc:cc:6a:2c:0d:f0:a3:6b:70:8e:73:cb:
d3:0f:59:50:d2:3c:32:f3:ff:b2:66:c1:38:2c:d0:
68:25:1a:a2:08:9e:e0:cc:aa:a8:02:a4:8a:b8:d1:
97:e5:f0:f0:d4:1d:cd:05:58:9f:8a:90:a0:a3:f4:
c0:66:f6:fc:f6:5d:81:cf:0f:de:57:5a:67:7d:50:
dd:f0:6d:a6:91:ec:0c:78:e5:7d:b7:76:0d:c7:78:
5f:14:90:c6:f4:77:82:c8:98:6b:08:bb:d9:90:5d:
e6:f0:a9:71:20:3d:13:46:5e:55:bf:f1:58:e4:3f:
b2:29:dd:e3:99:22:f9:3c:33:1d:93:84:f1:67:20:
a0:0f:7b:21:ce:9a:74:0d:b5:83:f7:18:98:70:20:
24:ed:61:3c:ba:fb:8a:d5:a0:d0:81:10:93:36:e8:
60:38:06:4c:d2:3f:81:c7:eb:78:98:92:37:24:b2:
31:db:e2:eb:6d:25:02:31:8d:38:94:73:87:22:f8:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:A7:F7:DA:3B:E6:23:28:B7:34:68:AB:D8:15:9A:CD:9C:6F:CC
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:65:f3:eb:12:18:75:a3:32:2b:4e:68:9f:0d:fe:75:15:f8:
02:14:69:ab:ea:9e:80:23:41:93:66:b5:ac:c3:c9:6d:6a:25:
aa:22:f6:90:78:8b:22:fc:45:fd:ce:4e:58:1d:b5:b4:2c:4d:
58:5e:fc:cb:9c:c3:ac:b5:05:6a:ee:bd:ef:27:94:55:26:7a:
56:7d:06:17:2b:2c:54:1e:1b:f4:8e:f1:57:ad:1a:4e:74:d6:
6d:83:d4:88:35:b6:d8:53:57:1a:06:4e:df:f1:28:6b:7d:72:
8e:bf:2f:6e:c0:ca:69:e6:d3:21:be:e3:2f:06:5f:89:f8:ad:
dd:d4:dc:40:db:e2:bc:76:55:7c:dd:e6:89:73:6e:14:de:a6:
da:0a:5f:51:6b:5d:6a:2f:5e:fa:6b:75:c1:a9:bf:ba:62:df:
f8:74:b0:c6:e7:d7:29:e8:eb:a7:8a:46:71:82:13:99:52:08:
70:62:79:4d:23:5f:1b:65:a6:1b:48:7c:4a:44:e4:18:b7:28:
9a:06:19:68:ab:00:73:36:d6:f4:14:6a:9f:2f:45:5c:88:90:
c9:ac:2f:07:8c:49:9d:fd:2e:c9:7e:04:bf:4f:51:f8:20:fd:
af:73:ba:35:d5:e1:75:88:42:3b:25:05:c5:6b:d2:26:39:4c:
84:a6:a9:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHp4dXzmMGI18LwIjH0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOWM1NmExOGM5ODdhMmQxYTJlNzA0NGI3ZTMxYjMyMWJm
N2FjMTYwHhcNMjUxMTExMDcwMTQ2WhcNMjUxMTEyMDcwMTQ2WjAzMTEwLwYDVQQD
Eyg0MzU2YTdmN2RhM2JlNjIzMjhiNzM0NjhhYmQ4MTU5YWNkOWM2ZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kiIh98cOsYIClBex3DKBwAhAX6F
hGATzsiDylvaRcko5Y4jya84LL/lt5xy/j8IngK4Uq5HuyUtwNyqTETMzGosDfCj
a3COc8vTD1lQ0jwy8/+yZsE4LNBoJRqiCJ7gzKqoAqSKuNGX5fDw1B3NBVifipCg
o/TAZvb89l2Bzw/eV1pnfVDd8G2mkewMeOV9t3YNx3hfFJDG9HeCyJhrCLvZkF3m
8KlxID0TRl5Vv/FY5D+yKd3jmSL5PDMdk4TxZyCgD3shzpp0DbWD9xiYcCAk7WE8
uvuK1aDQgRCTNuhgOAZM0j+Bx+t4mJI3JLIx2+LrbSUCMY04lHOHIviNxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENWp/faO+YjKLc0aKvYFZrNnG/MMB8GA1UdIwQY
MBaAFA2cVqGMmHotGi5wRLfjGzIb96wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iZDFiOGYtZDA2NS00Y2M3LTlhMWYt
NDVhYjNmNTIwZjAwLzEvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iZDFiOGYtZDA2NS00Y2M3LTlhMWYtNDVhYjNmNTIwZjAw
LzEvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2Xz6xIY
daMyK05onw3+dRX4AhRpq+qegCNBk2a1rMPJbWolqiL2kHiLIvxF/c5OWB21tCxN
WF78y5zDrLUFau697yeUVSZ6Vn0GFyssVB4b9I7xV60aTnTWbYPUiDW22FNXGgZO
3/Eoa31yjr8vbsDKaebTIb7jLwZfifit3dTcQNvivHZVfN3miXNuFN6m2gpfUWtd
ai9e+mt1wam/umLf+HSwxufXKejrp4pGcYITmVIIcGJ5TSNfG2WmG0h8SkTkGLco
mgYZaKsAczbW9BRqny9FXIiQyawvB4xJnf0uyX4Ev09R+CD9r3O6NdXhdYhCOyUF
xWvSJjlMhKapAg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:46 2025 by rpki-client