Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier: Wi0t2dmfD9Ug0z5eESerWUPp8OMQVuVxcxpK6kGUTUc=
Subject key identifier: 09:E2:F6:0A:87:34:E4:02:CC:4A:C9:C5:F5:3D:A0:6D:82:6B:17:FA
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial: 019A71B929759C1AA9C58317A3D9EE7CB124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number: 0DC3
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: baTnOocRLcBHXyiZhyM+hRzoF/1f7rah2/gjS0q7s9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:29:75:9c:1a:a9:c5:83:17:a3:d9:ee:7c:b1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=09e2f60a8734e402cc4ac9c5f53da06d826b17fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:57:2c:38:85:ac:b9:1e:c1:b8:2c:08:0b:
65:40:9c:f9:17:75:06:86:74:45:1d:08:0e:5b:ff:
da:c3:a3:3b:9e:9f:e9:2f:a7:b6:9c:2e:e1:4a:7f:
30:7f:d9:f2:26:01:17:df:e6:f5:4c:ad:bf:9b:fa:
89:33:41:04:b9:6c:fd:06:5b:f9:9c:1b:63:24:00:
1b:55:e8:54:ab:c7:c9:80:a2:d3:c3:0a:83:bf:d4:
32:72:87:d3:9e:14:3e:09:b5:63:1f:9a:52:68:dd:
e1:9a:5b:3b:b6:80:f9:6e:ed:d7:21:52:2e:3d:64:
fb:c1:a6:74:86:fd:f8:fe:55:bb:6a:ec:0f:0a:aa:
79:55:67:23:b5:dd:c6:2a:72:73:e2:a3:7b:35:db:
73:9a:57:49:ec:c0:14:b9:52:02:7e:03:10:8a:be:
68:48:de:83:96:81:92:fa:79:fa:be:99:35:13:da:
fc:14:81:7c:db:05:06:71:30:3d:28:76:56:85:2c:
9e:f5:5e:21:69:31:aa:6a:b9:22:d9:ca:de:d4:e0:
c2:d8:13:88:42:d2:d7:67:45:1a:72:ee:98:a1:ed:
3f:a6:b7:96:30:89:0f:ba:df:b0:bf:74:df:a4:15:
6f:bb:11:e9:fb:46:d4:f5:da:ce:0e:cd:f7:46:7b:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:F6:0A:87:34:E4:02:CC:4A:C9:C5:F5:3D:A0:6D:82:6B:17:FA
X509v3 Authority Key Identifier:
keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:22:5a:8f:d6:a9:f2:a2:1a:a8:78:3b:f9:4b:df:09:3a:
c0:fe:c1:da:3b:27:d7:c9:88:e1:b0:6f:05:4c:ba:3b:af:a5:
a6:3e:ae:70:78:44:84:9f:b8:80:9d:41:c0:ac:27:37:63:27:
d1:dc:7c:49:96:9e:b0:32:52:73:5b:0f:ee:d1:dc:d7:65:dc:
22:8d:52:f9:c6:7a:de:ab:c1:d3:d6:d6:e6:23:53:64:ee:c6:
db:71:a1:ad:3e:7a:db:ad:6f:12:74:ec:7b:f3:2d:47:ac:8f:
51:b0:5c:84:10:a1:24:5c:f3:d6:51:0d:6a:84:6c:09:d3:1e:
30:ec:e7:5c:6b:f3:45:0e:b3:51:a6:b5:5e:2e:88:31:f4:d5:
dd:fd:f7:d3:99:4a:47:9c:1b:10:dc:59:42:86:0e:e3:f2:6c:
ec:fe:9f:2f:4d:73:7e:96:ea:a2:b4:f3:2e:53:b3:01:16:5e:
60:9c:5b:e8:51:3c:19:ba:92:0a:4a:9f:c7:ca:5e:ed:37:ae:
8c:70:05:0f:21:61:3a:17:45:65:f9:89:ff:26:1f:3b:56:fd:
e6:95:bd:86:91:f1:32:39:36:01:41:33:53:51:43:a4:ec:a8:
04:2d:fe:b2:dd:60:c9:73:43:73:16:db:21:51:ae:bc:fe:ce:
08:7b:ed:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSl1nBqpxYMXo9nufLEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWVlZmIxOTIzOGJlOWFlZTM3OTk1YmVmNGQyYWZkMTc5
ZmYyY2MwHhcNMjUxMTExMDcwMjMxWhcNMjUxMTEyMDcwMjMxWjAzMTEwLwYDVQQD
EygwOWUyZjYwYTg3MzRlNDAyY2M0YWM5YzVmNTNkYTA2ZDgyNmIxN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXdXLDiFrLkewbgsCAtlQJz5F3UG
hnRFHQgOW//aw6M7np/pL6e2nC7hSn8wf9nyJgEX3+b1TK2/m/qJM0EEuWz9Blv5
nBtjJAAbVehUq8fJgKLTwwqDv9QycofTnhQ+CbVjH5pSaN3hmls7toD5bu3XIVIu
PWT7waZ0hv34/lW7auwPCqp5VWcjtd3GKnJz4qN7NdtzmldJ7MAUuVICfgMQir5o
SN6DloGS+nn6vpk1E9r8FIF82wUGcTA9KHZWhSye9V4haTGqarki2cre1ODC2BOI
QtLXZ0Uacu6Yoe0/preWMIkPut+wv3TfpBVvuxHp+0bU9drODs33Rns+qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAni9gqHNOQCzErJxfU9oG2Caxf6MB8GA1UdIwQY
MBaAFA0e77GSOL6a7jeZW+9NKv0Xn/LMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYt
MzQ0OWYzM2ExODQyLzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYtMzQ0OWYzM2ExODQy
LzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/IiWo/W
qfKiGqh4O/lL3wk6wP7B2jsn18mI4bBvBUy6O6+lpj6ucHhEhJ+4gJ1BwKwnN2Mn
0dx8SZaesDJSc1sP7tHc12XcIo1S+cZ63qvB09bW5iNTZO7G23GhrT56261vEnTs
e/MtR6yPUbBchBChJFzz1lENaoRsCdMeMOznXGvzRQ6zUaa1Xi6IMfTV3f3305lK
R5wbENxZQoYO4/Js7P6fL01zfpbqorTzLlOzARZeYJxb6FE8GbqSCkqfx8pe7Teu
jHAFDyFhOhdFZfmJ/yYfO1b95pW9hpHxMjk2AUEzU1FDpOyoBC3+st1gyXNDcxbb
IVGuvP7OCHvtrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:06 2025 by rpki-client