Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: WYT1AWJJ83ikMSMSCob4rLi7m0fkRVVfbkioRPVZKGo=
Subject key identifier: 0F:1D:B7:84:88:0D:7C:62:FE:C1:B3:11:66:99:0C:F3:EC:47:C5:1D
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 019A714A18C7CFE28EF5A535E346244C4C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (hash: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: P1YDDr+mxeeEzM3aAHzQ7lO9xESoq587tJR9P6O43fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:18:c7:cf:e2:8e:f5:a5:35:e3:46:24:4c:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=0f1db784880d7c62fec1b31166990cf3ec47c51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:02:7d:4b:41:c9:44:67:06:16:6c:0c:5a:
ff:05:9d:b1:89:e2:fb:fd:e7:41:ad:92:f4:22:e1:
aa:71:b8:ef:02:4d:a2:45:1a:79:5b:05:ce:a0:6a:
6f:51:41:3c:b6:93:10:54:38:28:19:a1:df:44:49:
74:49:bf:2b:62:5e:7c:b0:90:b2:77:7a:9c:6f:9a:
e8:6e:2c:a4:a2:da:c7:6a:a1:24:18:49:fb:f8:dd:
c6:ed:ab:2f:fb:82:5b:10:02:3b:9e:d4:44:bf:12:
4d:c9:1b:8f:a7:96:87:5b:36:07:d7:c0:91:62:b5:
ad:da:16:6a:40:ff:20:1f:e2:02:44:3f:18:55:0f:
50:aa:89:0c:2c:06:a1:3e:fe:4a:27:05:1c:1b:47:
87:1f:64:d7:46:26:24:6d:c3:c1:10:7a:aa:e2:19:
04:45:d8:50:2d:d1:6d:89:4b:9b:23:6a:7c:79:89:
96:71:1e:23:d5:36:ee:7f:fb:5f:8b:5a:e0:6f:ba:
f6:fb:14:f1:97:34:ca:4a:b3:fa:46:f3:45:9c:2d:
95:f0:15:b4:6f:29:4e:72:7f:0d:85:13:4c:bb:c0:
db:20:aa:8e:bc:e9:9d:a9:d8:aa:53:b5:a2:bb:1b:
e2:4e:6b:d6:f3:7a:1f:4a:ea:63:a0:eb:e8:58:9d:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:B7:84:88:0D:7C:62:FE:C1:B3:11:66:99:0C:F3:EC:47:C5:1D
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:04:ae:95:01:10:53:f1:66:c1:77:13:10:99:36:c7:e3:a0:
db:f8:e9:62:dc:fc:17:bb:1e:c6:5d:6b:c0:00:89:64:c0:5c:
09:09:54:27:91:23:2a:92:31:a5:76:1b:aa:09:9a:bb:47:64:
5f:37:63:1a:03:81:8d:07:13:49:26:9c:96:89:d0:e8:73:79:
37:f1:15:75:e6:68:7e:64:21:84:b9:f7:f1:ea:f3:ef:2f:2a:
32:95:d4:73:d6:46:bc:d5:ee:52:bd:2f:ea:9f:62:fe:71:d6:
67:b2:1f:56:41:36:37:d9:f5:27:a8:b4:58:9e:7e:65:13:2c:
6b:43:b4:50:04:d7:34:72:3f:8b:8f:96:1c:42:a0:83:5d:f2:
16:86:c6:90:31:17:9e:ad:ad:4a:ee:23:0d:fd:88:88:a4:a0:
fb:aa:ec:80:f4:b0:33:3c:da:01:75:5b:b2:02:a5:1c:8b:13:
c3:a7:13:0c:80:9f:85:af:eb:d5:06:53:72:4f:5c:21:bf:55:
c2:f6:ec:a4:2f:12:05:eb:72:c2:8d:c3:16:4d:a8:2f:2c:25:
82:a9:4c:f2:1d:02:9d:f5:a1:3a:08:8d:a2:62:38:93:bc:00:
65:95:6b:20:46:73:6d:21:ac:20:ea:8c:69:23:c3:1e:60:bc:
f7:6c:3c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxShjHz+KO9aU140YkTExpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yjk4MmVhYmE0NDA4Y2Q5NDE4OTlmNWNlZWMxZGE2YTY3
YzVjNDkwHhcNMjUxMTExMDUwMTEyWhcNMjUxMTEyMDUwMTEyWjAzMTEwLwYDVQQD
EygwZjFkYjc4NDg4MGQ3YzYyZmVjMWIzMTE2Njk5MGNmM2VjNDdjNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjygCfUtByURnBhZsDFr/BZ2xieL7
/edBrZL0IuGqcbjvAk2iRRp5WwXOoGpvUUE8tpMQVDgoGaHfREl0Sb8rYl58sJCy
d3qcb5robiykotrHaqEkGEn7+N3G7asv+4JbEAI7ntREvxJNyRuPp5aHWzYH18CR
YrWt2hZqQP8gH+ICRD8YVQ9QqokMLAahPv5KJwUcG0eHH2TXRiYkbcPBEHqq4hkE
RdhQLdFtiUubI2p8eYmWcR4j1Tbuf/tfi1rgb7r2+xTxlzTKSrP6RvNFnC2V8BW0
bylOcn8NhRNMu8DbIKqOvOmdqdiqU7WiuxviTmvW83ofSupjoOvoWJ2AewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8dt4SIDXxi/sGzEWaZDPPsR8UdMB8GA1UdIwQY
MBaAFHW5guq6RAjNlBiZ9c7sHaamfFxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2Et
ZDcxY2ExOWY5ODllLzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2EtZDcxY2ExOWY5ODll
LzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowSulQEQ
U/FmwXcTEJk2x+Og2/jpYtz8F7sexl1rwACJZMBcCQlUJ5EjKpIxpXYbqgmau0dk
XzdjGgOBjQcTSSaclonQ6HN5N/EVdeZofmQhhLn38erz7y8qMpXUc9ZGvNXuUr0v
6p9i/nHWZ7IfVkE2N9n1J6i0WJ5+ZRMsa0O0UATXNHI/i4+WHEKgg13yFobGkDEX
nq2tSu4jDf2IiKSg+6rsgPSwMzzaAXVbsgKlHIsTw6cTDICfha/r1QZTck9cIb9V
wvbspC8SBetywo3DFk2oLywlgqlM8h0CnfWhOgiNomI4k7wAZZVrIEZzbSGsIOqM
aSPDHmC892w8xg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:54 2025 by rpki-client