Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: l267GQDFLZ58rVnmpH2/LiMl3PENm2DuxeIb3ie86UM=
Subject key identifier: A1:92:68:21:95:DC:11:B1:82:93:9C:17:3A:D9:2A:EA:75:C3:23:1A
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019A71B7C0E787F78D8B462916BF263FA121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: asY3XaI4LCYGxTDJOUkJ7PB69ZvA/C0FV0zTX3ntCjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c0:e7:87:f7:8d:8b:46:29:16:bf:26:3f:a1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=a192682195dc11b182939c173ad92aea75c3231a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:53:20:eb:2b:1f:91:94:86:27:24:84:61:
d7:12:c1:9d:93:65:b9:86:26:39:1c:b1:1f:3c:de:
b3:02:4b:73:e8:42:35:00:77:09:69:32:d8:37:57:
c5:c3:0d:1b:05:e0:ec:07:67:ec:05:d5:f9:06:67:
25:69:6a:d7:04:f5:d2:38:46:3d:28:cc:7c:76:dc:
37:2f:0c:12:86:5d:4c:7f:7e:90:bd:72:d5:cf:e9:
7b:3e:40:44:56:c9:07:08:be:76:23:3b:79:79:a3:
70:92:cd:0b:02:39:ea:c0:1c:ee:a0:5a:24:74:d5:
c7:1a:d0:8a:3c:cf:15:3d:74:3b:e7:33:d0:be:5c:
c5:30:aa:7c:c2:8d:b1:ec:30:b3:57:9a:f5:f3:58:
ec:25:32:a3:73:45:cf:12:e5:1b:fd:e6:5e:fd:6b:
97:2c:f1:01:4a:03:90:c2:7f:d7:5f:18:f3:85:80:
88:1a:cd:f8:7e:2c:d2:52:40:be:a0:2c:f5:7c:dc:
76:b4:99:31:4b:eb:30:22:59:9b:5a:c9:1e:ec:23:
6e:f6:81:a7:c9:c3:b0:57:c8:8d:c5:76:c5:89:91:
d3:ac:be:7b:a3:b3:71:bb:30:1c:2d:bf:ce:a4:7d:
8c:c5:88:03:9a:8a:92:f8:48:b3:3e:46:78:9c:8a:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:92:68:21:95:DC:11:B1:82:93:9C:17:3A:D9:2A:EA:75:C3:23:1A
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:26:f7:ab:dd:91:4d:28:d9:a0:e9:5d:63:1a:e9:9b:31:9f:
22:35:9f:11:b1:31:44:af:0d:5e:0f:d5:cd:e8:fb:39:60:ab:
77:8c:15:c3:5d:6c:39:f7:91:f6:0a:57:7d:ba:fe:85:fd:cc:
1e:34:db:08:b5:fc:7a:47:d1:62:63:d9:bc:02:6f:35:a9:16:
06:ee:c9:65:c3:cc:92:5c:9c:f9:3f:48:e1:f3:46:00:54:eb:
5a:f5:75:4d:4e:4a:51:cb:55:7c:7a:de:d1:42:09:27:fa:4b:
7d:ce:3e:bc:f7:93:01:74:c4:d6:70:be:02:ca:7b:6b:26:06:
db:db:5d:4b:3a:77:68:cf:af:3f:9a:35:96:cf:68:71:68:fe:
f7:83:83:60:62:ef:33:fc:e8:de:bd:f1:12:a1:a3:a7:ab:ae:
95:34:2f:cf:ea:57:e2:99:b2:63:93:ab:89:a5:be:de:17:e5:
76:19:c6:a7:b5:bc:ee:46:1f:53:45:2c:c1:a9:26:59:69:84:
b7:2b:68:44:e2:b4:cf:98:fd:71:c0:e7:85:de:de:a1:5e:1f:
17:d2:0e:9d:cc:6e:0c:04:38:cb:0b:5c:99:64:6b:4e:c5:02:
97:f5:35:d1:ef:af:f7:33:39:09:40:40:df:ee:c9:6f:13:7d:
bd:78:89:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8Dnh/eNi0YpFr8mP6EhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl
NWJhNzUwHhcNMjUxMTExMDcwMDU5WhcNMjUxMTEyMDcwMDU5WjAzMTEwLwYDVQQD
EyhhMTkyNjgyMTk1ZGMxMWIxODI5MzljMTczYWQ5MmFlYTc1YzMyMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndJTIOsrH5GUhickhGHXEsGdk2W5
hiY5HLEfPN6zAktz6EI1AHcJaTLYN1fFww0bBeDsB2fsBdX5BmclaWrXBPXSOEY9
KMx8dtw3LwwShl1Mf36QvXLVz+l7PkBEVskHCL52Izt5eaNwks0LAjnqwBzuoFok
dNXHGtCKPM8VPXQ75zPQvlzFMKp8wo2x7DCzV5r181jsJTKjc0XPEuUb/eZe/WuX
LPEBSgOQwn/XXxjzhYCIGs34fizSUkC+oCz1fNx2tJkxS+swIlmbWske7CNu9oGn
ycOwV8iNxXbFiZHTrL57o7NxuzAcLb/OpH2MxYgDmoqS+EizPkZ4nIoanQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGSaCGV3BGxgpOcFzrZKup1wyMaMB8GA1UdIwQY
MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt
ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1
LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyb3q92R
TSjZoOldYxrpmzGfIjWfEbExRK8NXg/Vzej7OWCrd4wVw11sOfeR9gpXfbr+hf3M
HjTbCLX8ekfRYmPZvAJvNakWBu7JZcPMklyc+T9I4fNGAFTrWvV1TU5KUctVfHre
0UIJJ/pLfc4+vPeTAXTE1nC+Asp7ayYG29tdSzp3aM+vP5o1ls9ocWj+94ODYGLv
M/zo3r3xEqGjp6uulTQvz+pX4pmyY5OriaW+3hfldhnGp7W87kYfU0UswakmWWmE
tytoROK0z5j9ccDnhd7eoV4fF9IOncxuDAQ4ywtcmWRrTsUCl/U10e+v9zM5CUBA
3+7JbxN9vXiJVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:09 2025 by rpki-client