Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: hsXnxAK+PbJPDuzcSFdae4iykiKVUOF5DFQjjGdVRiI=
Subject key identifier: 94:4A:BF:9F:30:4F:71:FE:97:93:ED:10:D5:09:CC:EB:2C:54:AB:1F
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019A25F8191135E08F8EBDE4C332F2A71987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 15F7
Signing time: Mon 27 Oct 2025 14:00:07 +0000
Manifest this update: Mon 27 Oct 2025 14:00:07 +0000
Manifest next update: Tue 28 Oct 2025 14:00:07 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: ZxLPF9FJ3sY8VY0uEkSSwsVZd+FAFD+jmOF3U17bS2w=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:19:11:35:e0:8f:8e:bd:e4:c3:32:f2:a7:19:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Oct 27 14:00:07 2025 GMT
Not After : Oct 28 14:00:07 2025 GMT
Subject: CN=944abf9f304f71fe9793ed10d509cceb2c54ab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:fb:80:2d:9b:d9:6a:d1:0d:0e:e4:e5:1e:
ef:88:47:00:f2:54:d1:97:63:b4:9a:59:32:96:e5:
b1:ef:1d:4f:39:ec:b0:a5:5a:89:ff:69:00:68:b8:
c2:32:a0:43:3a:79:1f:10:47:11:54:6d:3e:6c:f3:
3d:be:18:d3:5c:f1:6a:5a:a1:3a:ae:75:27:66:1f:
96:32:8a:44:c6:61:37:9c:5c:52:54:33:aa:7f:02:
e2:cb:8e:6e:3e:d5:1c:9f:9c:d2:ea:7f:bb:37:e6:
56:17:20:3d:ea:5a:6e:5d:93:f1:8c:0c:dd:16:cb:
f3:fb:2d:1e:02:f6:05:c4:94:59:4e:97:5d:72:96:
f6:19:81:a0:84:9c:73:74:9a:ed:84:29:20:d5:0b:
60:52:8b:ea:a7:b4:6d:f8:8c:8d:ab:89:5c:48:62:
58:2b:3c:1e:1a:ca:42:64:1b:11:3e:5d:16:6e:d0:
38:fd:96:fd:64:4e:a7:11:01:6b:58:96:a2:45:4a:
5c:aa:aa:68:10:11:88:af:60:cc:22:19:f2:1d:2a:
36:69:44:ae:6c:5e:7c:9e:3a:33:ff:96:2c:db:a5:
0e:ee:cb:50:13:20:69:ee:14:22:cb:87:9a:be:37:
41:ef:65:1a:c8:5a:d5:48:a7:0f:ad:8a:1c:95:9b:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:BF:9F:30:4F:71:FE:97:93:ED:10:D5:09:CC:EB:2C:54:AB:1F
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:eb:ed:86:22:57:1e:6e:da:aa:bd:71:0a:98:ca:15:39:
f9:58:cc:a1:f1:16:cd:c4:62:8f:3e:72:df:0a:f4:2d:08:59:
cd:52:39:79:45:cc:fe:3f:47:39:b8:3b:b8:d0:0d:f2:ad:57:
75:67:3b:77:65:80:01:64:aa:95:72:6d:85:17:21:9a:5e:a5:
42:c6:cf:2c:ab:4e:42:3e:8d:2d:44:70:a1:02:08:4d:e7:ee:
13:f5:ac:69:84:f5:fd:61:9d:d1:d5:08:d1:ce:d9:99:79:85:
ce:a6:61:e4:b4:34:c8:3d:06:de:04:f9:92:6c:81:da:c7:c9:
3a:35:97:5d:ee:54:f1:35:92:92:78:1a:c5:85:93:42:cc:ac:
48:49:12:4f:6b:bf:ea:e7:76:a8:b3:a0:20:3a:cb:cd:01:df:
0e:b5:d8:46:f4:57:43:77:a4:95:52:ff:cc:50:02:ef:97:2d:
ce:ea:a2:7a:e1:eb:aa:7a:21:53:d8:0d:a3:2f:f8:8d:82:e4:
11:5e:29:bd:16:13:6e:a4:9d:da:b6:04:12:45:2c:ce:d5:e4:
c9:0b:d4:92:80:dd:63:68:4d:0d:06:a0:0d:78:8b:5e:53:63:
8c:b2:a1:11:b8:59:96:e0:e5:9c:fb:d0:48:85:2c:f6:f1:e0:
12:92:5b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+BkRNeCPjr3kwzLypxmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0
ODAwZmEwHhcNMjUxMDI3MTQwMDA3WhcNMjUxMDI4MTQwMDA3WjAzMTEwLwYDVQQD
Eyg5NDRhYmY5ZjMwNGY3MWZlOTc5M2VkMTBkNTA5Y2NlYjJjNTRhYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcf7gC2b2WrRDQ7k5R7viEcA8lTR
l2O0mlkyluWx7x1POeywpVqJ/2kAaLjCMqBDOnkfEEcRVG0+bPM9vhjTXPFqWqE6
rnUnZh+WMopExmE3nFxSVDOqfwLiy45uPtUcn5zS6n+7N+ZWFyA96lpuXZPxjAzd
Fsvz+y0eAvYFxJRZTpddcpb2GYGghJxzdJrthCkg1QtgUovqp7Rt+IyNq4lcSGJY
KzweGspCZBsRPl0WbtA4/Zb9ZE6nEQFrWJaiRUpcqqpoEBGIr2DMIhnyHSo2aUSu
bF58njoz/5Ys26UO7stQEyBp7hQiy4eavjdB72UayFrVSKcPrYoclZuoJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRKv58wT3H+l5PtENUJzOssVKsfMB8GA1UdIwQY
MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt
ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy
LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoHr7YYi
Vx5u2qq9cQqYyhU5+VjMofEWzcRijz5y3wr0LQhZzVI5eUXM/j9HObg7uNAN8q1X
dWc7d2WAAWSqlXJthRchml6lQsbPLKtOQj6NLURwoQIITefuE/WsaYT1/WGd0dUI
0c7ZmXmFzqZh5LQ0yD0G3gT5kmyB2sfJOjWXXe5U8TWSkngaxYWTQsysSEkST2u/
6ud2qLOgIDrLzQHfDrXYRvRXQ3eklVL/zFAC75ctzuqieuHrqnohU9gNoy/4jYLk
EV4pvRYTbqSd2rYEEkUsztXkyQvUkoDdY2hNDQagDXiLXlNjjLKhEbhZluDlnPvQ
SIUs9vHgEpJbfQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:47:49 2025 by rpki-client