Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: 5HCD1smgzW/x0ZSJnEkFE1dmdRWLeWpP4/a0suckrlQ=
Subject key identifier: 08:1A:C4:2F:29:BF:60:E1:EC:96:D4:D6:A4:27:4E:3B:C9:F9:09:E1
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019A12A85CFF65611779FD1FAD85B11156F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 1168
Signing time: Thu 23 Oct 2025 20:00:14 +0000
Manifest this update: Thu 23 Oct 2025 20:00:14 +0000
Manifest next update: Fri 24 Oct 2025 20:00:14 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: PHflPeFcZ6K82viYR5hYue51mWH46voehGRQsjWtBBQ=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a8:5c:ff:65:61:17:79:fd:1f:ad:85:b1:11:56:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Oct 23 20:00:14 2025 GMT
Not After : Oct 24 20:00:14 2025 GMT
Subject: CN=081ac42f29bf60e1ec96d4d6a4274e3bc9f909e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:af:01:73:43:69:0e:67:87:bd:0b:1c:32:
13:41:07:a3:4d:84:38:b0:38:d1:ce:2c:fa:0e:72:
34:dd:71:44:e1:98:b9:3c:d8:33:3e:70:d0:53:91:
e6:c7:82:31:85:25:88:c0:50:4f:77:05:f5:36:a4:
b5:8b:98:1a:b5:e0:63:41:4a:77:91:4a:3a:8c:3d:
d3:55:f5:d5:3f:d9:a1:b5:8a:db:15:56:80:0e:8e:
2c:fe:18:7c:d5:db:47:d8:ee:b4:fd:30:1e:54:95:
05:0f:6b:bd:cd:ae:86:d0:87:45:0a:a4:3e:fc:8b:
a6:1b:3c:44:d0:f8:5d:d5:51:69:a1:34:53:f4:59:
b7:1b:1e:5e:7c:df:15:a0:31:2b:94:c4:8d:cd:45:
84:10:1c:5d:9d:4c:59:fa:5e:54:cb:e1:de:70:44:
3a:d3:42:7d:87:e1:f4:2e:8f:40:a5:41:9c:d2:c0:
19:51:ff:4a:98:15:ed:b8:46:28:c0:b7:5f:61:51:
26:b0:88:6e:45:a7:d8:9c:6a:6c:4c:12:db:3a:58:
43:c0:3e:bd:2d:d8:2a:82:6a:04:22:37:44:19:ec:
a8:59:8c:f4:11:ae:f6:02:b7:43:d2:6d:c5:a9:0e:
10:59:22:98:71:18:87:ee:7e:e8:f9:49:60:e8:02:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:C4:2F:29:BF:60:E1:EC:96:D4:D6:A4:27:4E:3B:C9:F9:09:E1
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:47:1e:86:49:61:29:b4:ca:cc:84:de:0e:a5:ba:82:e5:a3:
3d:92:07:e4:ac:1c:c5:f8:c5:7b:08:0a:f6:ce:52:85:a1:24:
ac:0c:5f:7d:eb:86:78:ed:01:e2:21:41:51:7b:e6:d1:5e:0e:
c7:a7:c2:d8:d1:97:71:8f:7d:8d:20:5f:2e:2d:3f:b2:13:cb:
c5:33:b5:d7:85:a3:57:a9:2d:94:34:95:87:e5:07:e9:c8:86:
fc:fa:ef:0a:08:70:f1:c5:6c:93:00:3e:31:39:e8:3a:59:5d:
12:a6:97:1d:3d:5e:fd:09:b7:fb:6a:04:f2:f9:57:b7:2a:ce:
6d:05:8a:56:5f:eb:cd:5a:fe:d3:87:1d:04:12:36:13:c0:70:
99:ba:bf:08:ff:8d:b7:6c:81:13:b9:17:4b:18:f7:50:da:75:
1b:c0:3e:85:cd:8b:aa:d9:05:9f:a6:33:32:b7:12:8a:a2:e8:
93:28:de:9f:61:07:9e:b8:8c:29:79:d3:28:01:ee:50:5f:2d:
4d:84:59:29:86:7e:65:8a:6f:24:ce:ca:fe:72:34:31:90:21:
b4:2b:10:e5:d2:0b:1e:8c:8e:c0:f0:52:8b:5b:e4:3b:e9:9d:
da:08:50:f6:59:1a:da:c5:0e:c7:c4:4c:a5:55:d9:e7:27:6e:
35:2c:51:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoSqFz/ZWEXef0frYWxEVb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw
Y2FmMmEwHhcNMjUxMDIzMjAwMDE0WhcNMjUxMDI0MjAwMDE0WjAzMTEwLwYDVQQD
EygwODFhYzQyZjI5YmY2MGUxZWM5NmQ0ZDZhNDI3NGUzYmM5ZjkwOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7uvAXNDaQ5nh70LHDITQQejTYQ4
sDjRziz6DnI03XFE4Zi5PNgzPnDQU5Hmx4IxhSWIwFBPdwX1NqS1i5gateBjQUp3
kUo6jD3TVfXVP9mhtYrbFVaADo4s/hh81dtH2O60/TAeVJUFD2u9za6G0IdFCqQ+
/IumGzxE0Phd1VFpoTRT9Fm3Gx5efN8VoDErlMSNzUWEEBxdnUxZ+l5Uy+HecEQ6
00J9h+H0Lo9ApUGc0sAZUf9KmBXtuEYowLdfYVEmsIhuRafYnGpsTBLbOlhDwD69
LdgqgmoEIjdEGeyoWYz0Ea72ArdD0m3FqQ4QWSKYcRiH7n7o+Ulg6AL+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgaxC8pv2Dh7JbU1qQnTjvJ+QnhMB8GA1UdIwQY
MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt
NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3
LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUcehklh
KbTKzITeDqW6guWjPZIH5KwcxfjFewgK9s5ShaEkrAxffeuGeO0B4iFBUXvm0V4O
x6fC2NGXcY99jSBfLi0/shPLxTO114WjV6ktlDSVh+UH6ciG/PrvCghw8cVskwA+
MTnoOlldEqaXHT1e/Qm3+2oE8vlXtyrObQWKVl/rzVr+04cdBBI2E8Bwmbq/CP+N
t2yBE7kXSxj3UNp1G8A+hc2LqtkFn6YzMrcSiqLokyjen2EHnriMKXnTKAHuUF8t
TYRZKYZ+ZYpvJM7K/nI0MZAhtCsQ5dILHoyOwPBSi1vkO+md2ghQ9lka2sUOx8RM
pVXZ5yduNSxRfA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 04:21:43 2025 by rpki-client