Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: Z16Bkg9WV6NRtsC0yxjC3W17zqEPHKUKMvwboMOuFuE=
Subject key identifier: CC:12:E9:14:6D:A6:BE:56:65:F8:D9:B5:A3:C9:73:1D:4D:47:09:39
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019A134D9D92CF59080B0B236E1878A8A299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 16EF
Signing time: Thu 23 Oct 2025 23:00:44 +0000
Manifest this update: Thu 23 Oct 2025 23:00:44 +0000
Manifest next update: Fri 24 Oct 2025 23:00:44 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: wQeAI9raxWn3SWpdfgwWrzNZ9IehrtJOwQ1ycJAg98Q=)
2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:4d:9d:92:cf:59:08:0b:0b:23:6e:18:78:a8:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Oct 23 23:00:44 2025 GMT
Not After : Oct 24 23:00:44 2025 GMT
Subject: CN=cc12e9146da6be5665f8d9b5a3c9731d4d470939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:f1:30:5f:46:11:86:23:16:59:1a:8b:60:
23:aa:13:d3:15:1f:51:5c:f1:88:b9:b7:89:13:45:
47:c7:06:a1:41:1f:91:ed:e2:4e:7d:ce:c2:46:3b:
7c:98:de:d4:3a:d5:fb:94:47:6c:44:51:db:86:00:
c7:e7:f9:61:51:6b:50:01:08:b0:a2:08:1c:4b:21:
e0:bd:8f:03:df:ad:ff:79:56:a0:c8:20:48:2c:5e:
32:97:d8:c3:c7:00:e7:ee:f8:df:1d:38:29:48:53:
6b:3b:96:60:a3:ea:fc:56:39:60:59:15:89:97:26:
06:85:7a:19:17:41:a3:36:f3:c7:fe:63:b6:94:b0:
d3:c9:db:5b:9e:44:de:a4:71:f4:00:6c:08:7f:a5:
03:d9:10:10:1a:8a:8b:ed:d4:85:4b:3f:73:51:f9:
91:1d:b9:44:ac:7b:1d:92:1c:96:c3:bf:03:b9:46:
4d:ca:b8:c4:dd:94:0e:11:3b:a8:33:1f:06:17:b4:
06:d3:a3:da:03:46:2f:a7:09:ed:c4:b9:56:af:41:
bd:c8:0d:6a:35:94:53:91:df:91:84:ed:ee:49:a9:
1b:9b:89:bb:5a:07:f8:8c:6f:80:30:06:31:93:a1:
eb:cd:3a:d7:a6:7d:87:ff:04:d7:68:ec:88:45:25:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:E9:14:6D:A6:BE:56:65:F8:D9:B5:A3:C9:73:1D:4D:47:09:39
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9e:55:fa:f5:72:50:ae:5a:62:23:db:6f:8c:e6:fd:11:06:
56:6b:75:30:4e:d8:27:e8:bd:66:73:5f:fe:f8:5c:36:38:64:
61:c1:44:da:f9:fd:62:c0:a3:a6:7e:1a:22:a9:cb:02:b9:44:
d5:5e:92:ea:7d:68:34:4c:8e:10:fa:a8:b7:62:e8:78:b6:fe:
c2:b8:6a:1c:b3:07:23:8a:d0:7a:b9:0e:f9:48:65:60:8f:eb:
95:5c:6e:48:3d:5a:80:a9:bb:5f:a6:be:f8:82:da:09:fc:85:
08:74:e9:17:2d:94:89:f2:9e:db:98:b5:c4:8d:da:51:de:b1:
51:f8:0a:dd:3c:42:c1:36:21:ec:e5:c1:b0:31:f8:2f:42:ee:
9c:54:15:94:da:6e:18:b5:7b:c0:c9:76:8e:4d:db:e1:88:f2:
87:2b:ef:67:62:d9:9b:9f:58:9b:6f:7b:47:aa:3b:e6:71:fc:
60:c0:b5:61:4c:b8:ee:28:cf:a4:b3:56:69:e0:32:67:69:a6:
21:0f:13:f9:95:f7:da:22:7f:55:ff:cb:70:c5:dc:eb:11:77:
6b:cd:58:e5:13:44:60:28:54:41:80:2a:bb:34:db:25:ee:7d:
d0:79:5a:ba:a3:1d:af:d2:4b:22:68:57:93:65:f2:dd:f2:08:
56:53:6f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoTTZ2Sz1kICwsjbhh4qKKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjUxMDIzMjMwMDQ0WhcNMjUxMDI0MjMwMDQ0WjAzMTEwLwYDVQQD
EyhjYzEyZTkxNDZkYTZiZTU2NjVmOGQ5YjVhM2M5NzMxZDRkNDcwOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBvxMF9GEYYjFlkai2AjqhPTFR9R
XPGIubeJE0VHxwahQR+R7eJOfc7CRjt8mN7UOtX7lEdsRFHbhgDH5/lhUWtQAQiw
oggcSyHgvY8D363/eVagyCBILF4yl9jDxwDn7vjfHTgpSFNrO5Zgo+r8VjlgWRWJ
lyYGhXoZF0GjNvPH/mO2lLDTydtbnkTepHH0AGwIf6UD2RAQGoqL7dSFSz9zUfmR
HblErHsdkhyWw78DuUZNyrjE3ZQOETuoMx8GF7QG06PaA0YvpwntxLlWr0G9yA1q
NZRTkd+RhO3uSakbm4m7Wgf4jG+AMAYxk6HrzTrXpn2H/wTXaOyIRSWL1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwS6RRtpr5WZfjZtaPJcx1NRwk5MB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdp5V+vVy
UK5aYiPbb4zm/REGVmt1ME7YJ+i9ZnNf/vhcNjhkYcFE2vn9YsCjpn4aIqnLArlE
1V6S6n1oNEyOEPqot2LoeLb+wrhqHLMHI4rQerkO+UhlYI/rlVxuSD1agKm7X6a+
+ILaCfyFCHTpFy2UifKe25i1xI3aUd6xUfgK3TxCwTYh7OXBsDH4L0LunFQVlNpu
GLV7wMl2jk3b4YjyhyvvZ2LZm59Ym297R6o75nH8YMC1YUy47ijPpLNWaeAyZ2mm
IQ8T+ZX32iJ/Vf/LcMXc6xF3a81Y5RNEYChUQYAquzTbJe590HlauqMdr9JLImhX
k2Xy3fIIVlNvzg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 06:01:16 2025 by rpki-client