Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: ljjUp8SpNY99erdXuEK0SrPR7G4s5z/4TIBbEAcSnKI=
Subject key identifier: 28:B1:B9:70:CE:2F:1B:81:BC:D3:22:BD:EB:BF:23:C3:7B:E2:94:11
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 019A7293964E7C8AB5100A24D5733847E52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 053A
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: W5/Hw1L7J4GA5S2WMcHzdcfZl6o8Jf3wD127I0X8oi0=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:96:4e:7c:8a:b5:10:0a:24:d5:73:38:47:e5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=28b1b970ce2f1b81bcd322bdebbf23c37be29411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:50:e6:26:34:bf:96:23:85:db:9c:06:0e:
a4:09:00:9e:07:a4:4d:f4:2b:8d:56:7a:75:e6:70:
0b:4b:cd:f5:80:27:3d:f4:f0:71:fa:36:fe:09:6b:
9a:9f:ae:03:b4:15:b0:ce:cf:2f:d0:3f:dc:78:ad:
2f:1b:08:1c:06:0e:0b:42:68:58:63:ab:aa:01:05:
74:01:84:89:96:b5:e8:ca:02:51:a5:b1:3f:7e:2e:
75:e8:eb:8d:bf:47:31:aa:e1:aa:98:9b:02:6c:5c:
86:d4:05:51:5e:18:20:0c:4d:63:fd:21:07:df:9c:
51:0a:68:3c:71:f3:c8:1b:26:22:92:e0:9d:ec:0a:
45:fd:15:16:de:c2:ae:5f:19:e3:26:d5:39:33:48:
af:c0:a9:49:16:a9:d5:15:f5:31:bb:2f:ea:2f:ac:
27:ef:e8:6e:9d:ec:86:7d:0b:60:2a:f9:ef:b4:c9:
29:74:27:b1:97:2d:cd:01:57:a0:74:59:bf:51:b2:
20:4c:15:7c:83:71:0f:f9:85:db:c2:75:10:62:e8:
c0:aa:ec:a2:ba:bf:33:c7:74:c8:90:cd:53:a7:19:
f6:3a:f3:0c:32:d7:ba:b2:dc:47:5a:ec:1b:8f:0d:
25:3e:2e:15:de:b0:84:8a:ea:0e:61:7a:ef:06:ac:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:B9:70:CE:2F:1B:81:BC:D3:22:BD:EB:BF:23:C3:7B:E2:94:11
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9f:ee:bb:6a:5b:a3:94:67:39:63:8f:67:0d:ce:83:c9:0d:
4e:40:d9:0e:cb:6a:41:c2:93:95:dc:27:c0:44:a8:d1:a9:ca:
0a:59:10:5a:a1:6a:b6:84:49:c8:78:09:c0:03:22:a8:2b:8d:
d1:55:43:03:53:fa:9b:07:60:0b:ab:a2:6a:1a:2f:b2:d9:36:
48:48:40:61:82:80:fc:65:bf:53:ec:61:6a:a4:61:82:47:42:
4a:a7:f6:f5:75:9d:64:5b:52:82:15:0d:69:2a:ee:9b:2c:72:
e1:60:71:d3:58:76:71:df:c1:f0:5f:e0:03:d1:bb:76:5a:d9:
4d:16:8d:80:8f:7d:39:91:1c:ed:e5:12:47:1b:ab:a2:92:41:
ed:ab:ae:01:b7:83:72:c3:4a:1a:9c:19:db:c2:26:c1:9a:28:
cf:1f:d9:b9:5b:2c:57:c2:b4:01:26:6d:03:45:2f:24:bd:aa:
eb:67:d5:8c:85:75:cc:ef:d2:f3:71:e6:02:c2:16:d4:64:cd:
5a:f9:5e:40:f3:58:a6:73:74:81:7a:d0:94:f4:07:8d:09:bc:
45:5d:d3:48:fe:b1:eb:88:be:56:27:69:a2:67:35:c8:e7:51:
6a:d7:4d:c8:b3:58:09:e2:63:ad:07:7c:2e:f3:17:80:ec:da:
79:33:9e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk5ZOfIq1EAok1XM4R+UsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjI4M2U2ZTZhZjk5MTQyMjc0MzcxMWY3YTcyMzEzNzY4
MGU2OWUwHhcNMjUxMTExMTEwMTA2WhcNMjUxMTEyMTEwMTA2WjAzMTEwLwYDVQQD
EygyOGIxYjk3MGNlMmYxYjgxYmNkMzIyYmRlYmJmMjNjMzdiZTI5NDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+1Q5iY0v5YjhducBg6kCQCeB6RN
9CuNVnp15nALS831gCc99PBx+jb+CWuan64DtBWwzs8v0D/ceK0vGwgcBg4LQmhY
Y6uqAQV0AYSJlrXoygJRpbE/fi516OuNv0cxquGqmJsCbFyG1AVRXhggDE1j/SEH
35xRCmg8cfPIGyYikuCd7ApF/RUW3sKuXxnjJtU5M0ivwKlJFqnVFfUxuy/qL6wn
7+huneyGfQtgKvnvtMkpdCexly3NAVegdFm/UbIgTBV8g3EP+YXbwnUQYujAquyi
ur8zx3TIkM1Tpxn2OvMMMte6stxHWuwbjw0lPi4V3rCEiuoOYXrvBqxveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCixuXDOLxuBvNMiveu/I8N74pQRMB8GA1UdIwQY
MBaAFA4ig+bmr5kUInQ3EfenIxN2gOaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTct
ZTBhZGFiN2YxMTEyLzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTctZTBhZGFiN2YxMTEy
LzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5/uu2pb
o5RnOWOPZw3Og8kNTkDZDstqQcKTldwnwESo0anKClkQWqFqtoRJyHgJwAMiqCuN
0VVDA1P6mwdgC6uiahovstk2SEhAYYKA/GW/U+xhaqRhgkdCSqf29XWdZFtSghUN
aSrumyxy4WBx01h2cd/B8F/gA9G7dlrZTRaNgI99OZEc7eUSRxuropJB7auuAbeD
csNKGpwZ28ImwZoozx/ZuVssV8K0ASZtA0UvJL2q62fVjIV1zO/S83HmAsIW1GTN
WvleQPNYpnN0gXrQlPQHjQm8RV3TSP6x64i+Vidpomc1yOdRatdNyLNYCeJjrQd8
LvMXgOzaeTOerw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:50 2025 by rpki-client