Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: oOnu6boW8A8XgPEdGvc5zjv77CHbkrHcQVOuwNdgNSY=
Subject key identifier: 27:E4:56:30:D8:E5:07:79:D9:AC:FB:AB:66:F9:F7:1D:52:C8:51:B4
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 019A7149D31A57EBD77F5A0843C975AEE817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 0197
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: hOQjZvtFfGHgHORtkoZ4SFQ8UjapWjJNKXBqQiM7zVI=)
2: paTtElWGmU9hAIEDu_IgYgPtAVs.roa (hash: gF5VuGVggwKtY1Dsuv7xJ4ySU2bi6uUiiENjoaY2rmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d3:1a:57:eb:d7:7f:5a:08:43:c9:75:ae:e8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=27e45630d8e50779d9acfbab66f9f71d52c851b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:73:97:ae:ff:82:5c:17:fa:84:50:be:4c:
f1:c6:6b:ca:e7:c4:9b:cf:ce:5c:d6:95:e9:98:57:
b7:a0:4a:ee:a1:4d:1f:1a:df:c2:4b:0b:de:b2:35:
ff:49:50:cf:5d:4c:34:bf:d4:f2:85:76:df:ed:74:
35:a4:d9:e0:c2:a2:d1:b8:9d:0b:bc:f7:d5:5b:47:
20:08:de:3e:77:86:63:a0:2e:ff:93:cc:b7:64:c7:
af:68:26:21:25:79:da:82:9d:f1:64:d4:9b:b0:16:
c8:0d:97:88:ac:76:8e:75:c2:03:66:bd:57:1b:32:
96:a2:97:36:01:f7:8e:2b:99:98:d0:d6:1b:06:a0:
8b:a6:aa:2e:4e:a1:70:11:84:f9:06:24:ca:23:18:
92:c8:83:10:40:5b:12:9c:ff:7f:a3:7a:4d:e1:4b:
b4:dc:1b:e4:83:98:47:73:33:b4:0e:c9:4a:af:52:
63:a7:e9:9c:31:4e:eb:91:ec:3f:5e:c8:87:6e:65:
58:7e:54:1d:8c:b8:79:5c:5c:0f:e1:70:c7:45:9d:
02:f2:02:bf:c6:ae:f7:95:3d:17:06:16:34:c7:df:
17:b0:28:13:08:d7:e4:b9:db:59:c7:4e:f7:b6:76:
ed:a1:e7:8d:5f:7e:c3:6c:38:08:c1:3d:c4:e5:c6:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:56:30:D8:E5:07:79:D9:AC:FB:AB:66:F9:F7:1D:52:C8:51:B4
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fe:43:61:b9:c8:88:20:08:e5:d1:79:f1:ff:a7:6c:6d:fe:
3c:d8:ad:c6:8a:01:bc:3f:d2:4c:db:a3:2f:67:cf:83:b7:53:
1d:59:c3:43:87:ea:b3:27:11:fe:6d:89:e5:cd:72:a3:03:32:
16:6d:28:db:ae:5f:ac:c7:c6:f7:32:88:6f:ae:44:b8:73:f4:
ba:3a:88:0f:3b:ea:cb:b2:5e:ea:5d:93:c3:90:0b:de:5d:b9:
64:e3:25:4d:08:3d:0e:ff:c3:0e:af:7c:5e:65:27:38:df:b5:
81:5d:38:09:52:f3:df:5c:0a:dc:af:fa:40:16:dd:63:4d:17:
75:b5:fe:5a:3d:44:58:77:82:8f:98:3a:76:ce:48:40:08:36:
fc:3a:91:88:cc:d9:51:ae:87:6a:f5:26:c6:b0:d5:5a:c5:a2:
3f:fa:fa:e9:df:01:bd:6f:94:1b:2c:8f:92:93:31:e0:24:7f:
5e:2e:f8:38:6d:29:f1:b6:b2:a0:85:cd:41:02:5f:3b:3c:c0:
48:4f:81:15:4b:f4:d6:75:f0:d6:8f:e3:5c:a8:0e:72:e4:c6:
9e:5c:5c:71:40:e5:12:68:31:1b:d0:22:9a:9a:4d:2f:12:d3:
ed:cb:fb:15:00:f6:4d:8a:ce:59:f7:09:8c:0a:d2:87:69:60:
7b:48:19:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSdMaV+vXf1oIQ8l1rugXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNWUzMmZmMjA3YzMyZjVhNjk4OTRiYWVhYjU2YmY2MzNk
YmFhMWUwHhcNMjUxMTExMDUwMDU0WhcNMjUxMTEyMDUwMDU0WjAzMTEwLwYDVQQD
EygyN2U0NTYzMGQ4ZTUwNzc5ZDlhY2ZiYWI2NmY5ZjcxZDUyYzg1MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJVzl67/glwX+oRQvkzxxmvK58Sb
z85c1pXpmFe3oEruoU0fGt/CSwvesjX/SVDPXUw0v9TyhXbf7XQ1pNngwqLRuJ0L
vPfVW0cgCN4+d4ZjoC7/k8y3ZMevaCYhJXnagp3xZNSbsBbIDZeIrHaOdcIDZr1X
GzKWopc2AfeOK5mY0NYbBqCLpqouTqFwEYT5BiTKIxiSyIMQQFsSnP9/o3pN4Uu0
3Bvkg5hHczO0DslKr1Jjp+mcMU7rkew/XsiHbmVYflQdjLh5XFwP4XDHRZ0C8gK/
xq73lT0XBhY0x98XsCgTCNfkudtZx073tnbtoeeNX37DbDgIwT3E5cZ5SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfkVjDY5Qd52az7q2b59x1SyFG0MB8GA1UdIwQY
MBaAFA5eMv8gfDL1ppiUuuq1a/Yz26oeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0Mzct
NGJhOGNiMTUwMWZkLzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0MzctNGJhOGNiMTUwMWZk
LzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAev5DYbnI
iCAI5dF58f+nbG3+PNitxooBvD/STNujL2fPg7dTHVnDQ4fqsycR/m2J5c1yowMy
Fm0o265frMfG9zKIb65EuHP0ujqIDzvqy7Je6l2Tw5AL3l25ZOMlTQg9Dv/DDq98
XmUnON+1gV04CVLz31wK3K/6QBbdY00XdbX+Wj1EWHeCj5g6ds5IQAg2/DqRiMzZ
Ua6HavUmxrDVWsWiP/r66d8BvW+UGyyPkpMx4CR/Xi74OG0p8bayoIXNQQJfOzzA
SE+BFUv01nXw1o/jXKgOcuTGnlxccUDlEmgxG9AimppNLxLT7cv7FQD2TYrOWfcJ
jArSh2lge0gZ+w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:21 2025 by rpki-client