Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: O2NIenCcX5TOVvVkanQACgYR7/IvCcROJ0Lfb69hR8Y=
Subject key identifier: E7:09:6B:94:24:C1:D1:B1:E3:0C:00:7F:9C:B6:91:16:1C:0C:0F:4B
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019A73017E09F3FBFE9340E0F8B1A634627E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: DA
Signing time: Tue 11 Nov 2025 13:01:08 +0000
Manifest this update: Tue 11 Nov 2025 13:01:08 +0000
Manifest next update: Wed 12 Nov 2025 13:01:08 +0000
Files and hashes: 1: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: HZJDnFh3+ZOCtdmWoKlVxZZirjgHRns21McpE/KcphQ=)
2: zQtGsgzqOK-0hoW-F87Yx5VVUg0.roa (hash: PEtW7YagTcXDXA2f9YO+bwyb8k/56XuZ1pNjFIGkhUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:7e:09:f3:fb:fe:93:40:e0:f8:b1:a6:34:62:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Nov 11 13:01:08 2025 GMT
Not After : Nov 12 13:01:08 2025 GMT
Subject: CN=e7096b9424c1d1b1e30c007f9cb691161c0c0f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:a4:13:43:68:42:03:1f:bc:b7:06:25:34:
a2:ad:4c:96:a5:24:e6:b3:2f:28:1c:8c:73:96:37:
12:73:de:27:a0:98:ee:b4:83:a8:ad:a5:a4:50:c7:
22:19:68:1b:ba:00:0d:c7:ef:8a:71:9f:e3:f9:c1:
6e:df:59:4e:92:89:6d:76:16:35:c9:18:ad:0e:62:
28:1b:4b:30:c7:67:c1:39:ae:3e:c1:b7:bc:f3:52:
2c:dd:ab:8f:ff:cf:35:99:7f:cb:a5:cf:fc:a2:a7:
a7:21:14:ab:e8:c9:05:33:0d:28:ad:93:db:f0:c6:
f9:d6:2d:37:ac:c7:4d:3f:11:b4:8f:14:5f:b3:28:
ee:e0:6a:63:e6:8d:28:5a:d6:ae:94:e0:4c:92:4b:
5e:9d:f0:4f:69:fe:a0:20:5b:09:c0:83:2a:c2:43:
29:c3:e3:0d:8a:50:5d:b8:01:ea:84:27:92:ec:49:
f8:93:3d:e8:e8:f1:5a:a0:e7:40:7f:2d:b7:af:8d:
f0:be:d3:ed:88:44:ea:95:f9:e0:9d:4c:17:15:95:
c0:44:d4:ae:d6:06:45:33:35:8b:cc:a5:a2:ac:69:
31:4b:1c:1a:25:26:ab:e1:10:1a:d4:51:ff:56:53:
28:ca:78:00:85:58:2d:2f:80:f0:5d:8f:fc:09:61:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:09:6B:94:24:C1:D1:B1:E3:0C:00:7F:9C:B6:91:16:1C:0C:0F:4B
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:77:59:fc:2b:9f:76:26:53:1c:19:2e:64:9b:07:30:74:1e:
c1:b1:ae:ca:9e:7f:7a:bf:e3:ec:e8:d2:0f:71:ac:90:eb:f8:
59:2e:cf:b4:39:a5:5a:8a:02:ee:9c:cb:d4:f7:e4:7a:57:ed:
8e:86:e4:6a:78:ce:61:94:0b:3d:fe:6c:bf:6e:29:71:f2:7b:
cd:f6:80:97:7d:97:6a:f5:c2:11:96:50:3c:2b:69:68:58:59:
a4:2e:30:3d:02:1a:ba:04:c6:91:72:ff:86:2f:66:7f:aa:70:
e2:e1:66:ae:89:cb:b7:1d:cf:ee:5e:19:1a:57:d3:b0:19:68:
9e:e3:11:a9:9c:4d:d8:85:8e:df:b2:57:8a:20:6e:35:cb:b3:
a2:f1:1f:e1:22:24:01:9b:47:89:15:a9:ca:3e:97:99:d2:c6:
62:6b:64:a8:13:c8:19:90:b0:28:70:e1:1d:55:ac:9c:8b:ed:
29:2c:6a:6a:17:05:bf:36:88:93:28:44:1d:4d:72:87:2f:a3:
05:1a:82:de:2b:f7:3a:f0:a6:e2:f1:e1:ab:a5:72:9b:8f:a4:
77:aa:ff:18:5a:62:39:6d:f9:96:08:8e:51:6c:20:03:e6:56:
9b:ca:c2:0e:8e:e6:7b:0c:1e:cd:b4:99:c6:8e:fc:69:fb:1d:
49:b5:e6:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAX4J8/v+k0Dg+LGmNGJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm
OWY3NjcwHhcNMjUxMTExMTMwMTA4WhcNMjUxMTEyMTMwMTA4WjAzMTEwLwYDVQQD
EyhlNzA5NmI5NDI0YzFkMWIxZTMwYzAwN2Y5Y2I2OTExNjFjMGMwZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXqkE0NoQgMfvLcGJTSirUyWpSTm
sy8oHIxzljcSc94noJjutIOoraWkUMciGWgbugANx++KcZ/j+cFu31lOkoltdhY1
yRitDmIoG0swx2fBOa4+wbe881Is3auP/881mX/Lpc/8oqenIRSr6MkFMw0orZPb
8Mb51i03rMdNPxG0jxRfsyju4Gpj5o0oWtaulOBMkktenfBPaf6gIFsJwIMqwkMp
w+MNilBduAHqhCeS7En4kz3o6PFaoOdAfy23r43wvtPtiETqlfngnUwXFZXARNSu
1gZFMzWLzKWirGkxSxwaJSar4RAa1FH/VlMoyngAhVgtL4DwXY/8CWEIvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcJa5QkwdGx4wwAf5y2kRYcDA9LMB8GA1UdIwQY
MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt
ZDIxMDgzOGE0NmU2LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjktZDIxMDgzOGE0NmU2
LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHdZ/Cuf
diZTHBkuZJsHMHQewbGuyp5/er/j7OjSD3GskOv4WS7PtDmlWooC7pzL1Pfkelft
jobkanjOYZQLPf5sv24pcfJ7zfaAl32XavXCEZZQPCtpaFhZpC4wPQIaugTGkXL/
hi9mf6pw4uFmronLtx3P7l4ZGlfTsBlonuMRqZxN2IWO37JXiiBuNcuzovEf4SIk
AZtHiRWpyj6XmdLGYmtkqBPIGZCwKHDhHVWsnIvtKSxqahcFvzaIkyhEHU1yhy+j
BRqC3iv3OvCm4vHhq6Vym4+kd6r/GFpiOW35lgiOUWwgA+ZWm8rCDo7mewwezbSZ
xo78afsdSbXmGA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:29 2025 by rpki-client