Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: IY979LhI5b8ZYw/VZ624Leg7i+2Sr/XJRzSA3He+1eM=
Subject key identifier: C3:E7:23:62:5F:72:6F:68:06:F6:81:E5:19:14:71:40:C7:20:F1:F3
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019A7113141CAB805CCFC5C719E21D09605E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: 06h6d3BaYT+4s8g0zYVlbBXG+yOA9jHDLkI23GZva1U=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:14:1c:ab:80:5c:cf:c5:c7:19:e2:1d:09:60:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=c3e723625f726f6806f681e519147140c720f1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:db:11:54:46:78:24:48:a5:52:f1:01:f7:
79:56:31:b8:16:e1:ff:6a:0b:f5:8c:b9:84:90:56:
de:66:9e:e2:02:62:1f:6a:d5:df:83:b0:49:c2:b0:
de:0f:8d:94:5a:54:dd:9c:c2:49:5f:68:5b:8c:8b:
c9:8f:68:5f:59:90:f4:76:d7:78:fc:71:88:b7:50:
72:cb:b6:33:3e:7d:8d:81:dd:dc:7d:5c:4c:3f:a4:
f4:64:91:83:52:2d:ab:76:d1:2e:35:a3:78:4a:3a:
3d:58:c3:44:2a:57:58:d1:23:8d:8f:5e:f6:f3:32:
c2:0e:db:79:8a:8c:6f:49:f0:f7:9f:59:ba:7a:cd:
ba:f3:4b:0b:61:e0:42:35:a1:21:c7:c6:af:8e:b4:
77:3d:e4:ff:53:cd:28:88:64:55:2a:2c:07:57:3f:
cb:f5:6a:21:b5:b0:6d:8f:7a:84:ea:c1:df:f9:9a:
d3:ba:cd:b0:f4:4c:b9:ed:ed:d1:60:b6:92:ad:4f:
e6:67:13:f4:d6:a1:fb:7d:5a:b4:98:4e:83:cc:e2:
32:06:e0:b6:0c:f1:28:a1:85:8f:00:b1:f1:a1:37:
26:d3:b0:3b:8e:6c:c7:c3:bf:66:7f:87:e3:34:9b:
60:6c:47:5c:7b:ad:5d:77:4d:2b:29:33:03:f3:eb:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:23:62:5F:72:6F:68:06:F6:81:E5:19:14:71:40:C7:20:F1:F3
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d0:8b:2f:5c:62:40:bd:07:00:db:b9:9b:6a:ed:33:8a:2f:
68:82:e9:23:9d:34:5e:68:a8:6f:53:fe:04:58:d4:2c:39:e6:
df:1c:f9:7e:af:16:f6:f6:92:6b:eb:b3:41:09:03:71:c6:69:
f0:29:c8:ee:b4:7d:2d:ee:c6:27:57:27:65:16:3b:ff:af:06:
1e:4e:86:48:c1:29:75:d3:43:97:bc:60:ce:a4:9a:a6:c3:17:
1e:55:0f:a2:ae:c7:0a:b4:7b:b4:50:d4:e5:89:8c:4e:55:bb:
6d:b5:f2:66:dd:81:7a:35:08:79:a0:f5:c0:58:df:5a:5b:0d:
4c:15:43:b4:b0:bb:d4:a4:cb:13:21:58:10:47:10:68:3b:62:
66:ab:1a:12:f0:aa:1b:05:8a:d0:d9:42:3b:80:fa:4a:8a:13:
de:23:9d:d6:09:90:6f:ca:61:41:b2:95:0f:e9:d8:19:e9:9e:
ed:68:d8:ca:1c:2b:21:d5:04:3d:fe:0e:06:13:d5:29:62:6d:
c0:9d:fe:c1:6a:d9:e2:60:f3:2d:a7:83:82:f3:23:2b:67:07:
50:90:75:8c:dd:f0:a6:35:9f:08:50:8b:74:5c:fa:97:e7:6b:
0d:54:69:de:5e:c1:45:4f:e4:59:fe:61:a8:87:42:f6:fd:95:
e1:95:be:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxExQcq4Bcz8XHGeIdCWBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWU3OTFmM2FlODNhZThiMjYzZTNjZGI2ODJhMzQ3NWI1
NzA3ZGYwHhcNMjUxMTExMDQwMTA2WhcNMjUxMTEyMDQwMTA2WjAzMTEwLwYDVQQD
EyhjM2U3MjM2MjVmNzI2ZjY4MDZmNjgxZTUxOTE0NzE0MGM3MjBmMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2TbEVRGeCRIpVLxAfd5VjG4FuH/
agv1jLmEkFbeZp7iAmIfatXfg7BJwrDeD42UWlTdnMJJX2hbjIvJj2hfWZD0dtd4
/HGIt1Byy7YzPn2Ngd3cfVxMP6T0ZJGDUi2rdtEuNaN4Sjo9WMNEKldY0SONj172
8zLCDtt5ioxvSfD3n1m6es2680sLYeBCNaEhx8avjrR3PeT/U80oiGRVKiwHVz/L
9WohtbBtj3qE6sHf+ZrTus2w9Ey57e3RYLaSrU/mZxP01qH7fVq0mE6DzOIyBuC2
DPEooYWPALHxoTcm07A7jmzHw79mf4fjNJtgbEdce61dd00rKTMD8+vIiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPnI2Jfcm9oBvaB5RkUcUDHIPHzMB8GA1UdIwQY
MBaAFHYeeR866DrosmPjzbaCo0dbVwffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEt
OTJlNDUxODc3ZDJjLzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEtOTJlNDUxODc3ZDJj
LzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdCLL1xi
QL0HANu5m2rtM4ovaILpI500Xmiob1P+BFjULDnm3xz5fq8W9vaSa+uzQQkDccZp
8CnI7rR9Le7GJ1cnZRY7/68GHk6GSMEpddNDl7xgzqSapsMXHlUPoq7HCrR7tFDU
5YmMTlW7bbXyZt2BejUIeaD1wFjfWlsNTBVDtLC71KTLEyFYEEcQaDtiZqsaEvCq
GwWK0NlCO4D6SooT3iOd1gmQb8phQbKVD+nYGeme7WjYyhwrIdUEPf4OBhPVKWJt
wJ3+wWrZ4mDzLaeDgvMjK2cHUJB1jN3wpjWfCFCLdFz6l+drDVRp3l7BRU/kWf5h
qIdC9v2V4ZW+kA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:38 2025 by rpki-client