Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: JSJprf61r1ffiEx5DfPUtiKd4gZnE5EaKI+hn1gafP4=
Subject key identifier: E2:49:CE:36:01:72:06:70:CD:97:0B:6F:38:A2:EB:9D:C3:AB:95:DF
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 019A1D2C5691362429C1A95A2CF41ED4DE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 1048
Signing time: Sat 25 Oct 2025 21:00:36 +0000
Manifest this update: Sat 25 Oct 2025 21:00:36 +0000
Manifest next update: Sun 26 Oct 2025 21:00:36 +0000
Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: 96bb1xvEWmt8QXWZRgrrT9C+nR+oimXti3ONWn6N5As=)
4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:56:91:36:24:29:c1:a9:5a:2c:f4:1e:d4:de:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Oct 25 21:00:36 2025 GMT
Not After : Oct 26 21:00:36 2025 GMT
Subject: CN=e249ce3601720670cd970b6f38a2eb9dc3ab95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:1d:21:2f:a2:f6:54:44:29:3f:49:16:ea:
41:3f:eb:5f:f7:d4:07:28:3c:16:22:73:cb:b2:25:
87:c5:34:78:e7:39:cc:a4:04:99:cf:3e:50:9a:96:
55:1b:bb:45:a4:c5:ea:a5:1a:97:a9:31:db:05:aa:
f7:4a:a5:d4:b1:fb:88:f7:b9:08:69:99:8f:dd:60:
1c:d6:4a:90:51:4d:b0:99:da:b6:75:89:dd:06:89:
7a:9e:1d:14:06:59:43:97:45:08:80:4c:d2:e1:0a:
73:6b:79:c7:19:64:ac:6b:b1:a2:2e:16:c0:a8:bf:
fe:a4:05:fa:25:4f:6d:26:d8:7b:49:59:61:a2:f3:
8d:fd:00:5f:2a:01:11:df:9c:38:fa:68:25:a8:98:
fa:3e:a6:49:81:b5:94:bc:44:2a:99:96:95:42:79:
ba:d8:c2:ee:c2:84:48:ba:3c:c8:bf:7e:81:bd:1d:
3e:76:d6:bb:8d:38:79:4a:df:04:d6:08:26:13:be:
20:c3:b3:ea:c8:1a:2b:8a:2b:ea:a5:19:81:52:c4:
fd:70:70:d4:3b:09:ba:e8:d7:f6:46:e3:6f:04:47:
f8:7a:d4:bf:a9:2f:05:67:5c:00:5e:bb:7c:70:2e:
e3:59:b1:db:3c:81:f5:2d:0f:99:c4:85:01:93:aa:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:CE:36:01:72:06:70:CD:97:0B:6F:38:A2:EB:9D:C3:AB:95:DF
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f2:17:55:53:8a:25:e4:01:d7:58:56:88:6c:ac:60:35:05:
49:12:17:12:a1:ad:e5:76:0e:14:0e:9a:2e:48:70:ae:99:fc:
c3:3c:3b:a4:49:04:51:7e:00:c6:47:04:04:28:75:99:46:6a:
32:77:64:73:7b:69:b0:19:1f:16:5a:8d:be:85:42:bc:07:79:
4c:5a:95:a8:f3:82:fc:e5:2d:2b:5a:1d:16:12:0e:63:39:2b:
44:63:f8:35:77:7a:2b:a4:7e:d5:67:dd:b7:fe:69:5a:21:a2:
5b:5e:d1:c1:6d:2a:13:44:01:28:cd:b9:ef:07:24:c0:3d:78:
82:82:a2:8b:d5:cc:71:c8:0c:43:0f:51:87:28:f9:45:38:4a:
ca:23:4b:97:03:88:74:0c:d9:20:9b:96:5a:99:a9:03:56:08:
4a:62:d9:df:93:af:f9:36:5e:ab:4a:da:dc:34:a9:2e:40:a9:
d2:55:73:b2:7f:23:ea:d1:63:be:63:fc:24:56:7d:12:78:66:
60:73:c1:9a:a3:59:50:f8:30:1e:be:5e:9c:a4:7c:38:f8:cc:
0f:7a:2b:81:a2:41:7d:76:98:5c:86:87:6a:b3:95:43:ec:17:
87:e2:d0:61:48:31:af:0e:0e:73:5c:6e:a6:db:e6:8b:74:1f:
cd:18:20:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodLFaRNiQpwalaLPQe1N4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjUxMDI1MjEwMDM2WhcNMjUxMDI2MjEwMDM2WjAzMTEwLwYDVQQD
EyhlMjQ5Y2UzNjAxNzIwNjcwY2Q5NzBiNmYzOGEyZWI5ZGMzYWI5NWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd0dIS+i9lREKT9JFupBP+tf99QH
KDwWInPLsiWHxTR45znMpASZzz5QmpZVG7tFpMXqpRqXqTHbBar3SqXUsfuI97kI
aZmP3WAc1kqQUU2wmdq2dYndBol6nh0UBllDl0UIgEzS4Qpza3nHGWSsa7GiLhbA
qL/+pAX6JU9tJth7SVlhovON/QBfKgER35w4+mglqJj6PqZJgbWUvEQqmZaVQnm6
2MLuwoRIujzIv36BvR0+dta7jTh5St8E1ggmE74gw7PqyBoriivqpRmBUsT9cHDU
Owm66Nf2RuNvBEf4etS/qS8FZ1wAXrt8cC7jWbHbPIH1LQ+ZxIUBk6rRPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJJzjYBcgZwzZcLbzii653Dq5XfMB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifIXVVOK
JeQB11hWiGysYDUFSRIXEqGt5XYOFA6aLkhwrpn8wzw7pEkEUX4AxkcEBCh1mUZq
Mndkc3tpsBkfFlqNvoVCvAd5TFqVqPOC/OUtK1odFhIOYzkrRGP4NXd6K6R+1Wfd
t/5pWiGiW17RwW0qE0QBKM257wckwD14goKii9XMccgMQw9Rhyj5RThKyiNLlwOI
dAzZIJuWWpmpA1YISmLZ35Ov+TZeq0ra3DSpLkCp0lVzsn8j6tFjvmP8JFZ9Enhm
YHPBmqNZUPgwHr5enKR8OPjMD3orgaJBfXaYXIaHarOVQ+wXh+LQYUgxrw4Oc1xu
ptvmi3QfzRgglg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 04:33:25 2025 by rpki-client