Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: Wx1+X6cJdqWt3aceYUJHHOvyeMX/c5nZ1ZXiI4eM/P8=
Subject key identifier: 36:CB:BA:87:98:7B:09:DB:0E:E8:5D:26:08:41:83:66:CD:CA:55:40
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0199FD342C8B37DD346CBE5AA1EB07C17B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 10D2
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=)
2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: 2xQ0B5MJ3Qw9+hec/gufZP9De2Epy8SRBTpKddeByPE=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2c:8b:37:dd:34:6c:be:5a:a1:eb:07:c1:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=36cbba87987b09db0ee85d2608418366cdca5540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:4e:68:99:55:a9:6b:d3:11:8e:6d:d0:14:
28:e7:05:9c:c4:14:89:45:7e:3b:34:eb:95:cc:f3:
8f:99:51:ae:f4:ac:76:fc:13:ee:06:cb:d5:90:e7:
f4:53:12:e4:ba:15:3e:53:fe:25:7a:8d:ad:e9:08:
9d:0d:8e:54:08:4a:95:b5:53:87:81:c1:37:89:71:
16:aa:3f:7a:a8:7a:26:ee:6e:b6:20:eb:2c:33:e4:
ef:91:07:93:d2:46:bd:85:ae:dc:86:0c:06:5f:73:
d3:09:b4:e0:da:0b:72:15:49:2f:01:14:3f:16:3f:
8f:b3:2e:f4:92:45:6a:85:94:6b:12:d8:15:57:7a:
5c:ef:9d:91:b2:05:d0:b2:5c:66:b5:3c:bc:b3:ac:
e8:ba:a4:c9:2f:84:ed:99:cb:c5:63:6f:9d:2d:ad:
2f:6f:a1:22:b0:8a:4b:a4:87:d4:3f:98:69:df:c3:
cb:cc:c7:04:1d:f2:21:1e:ca:3e:63:ed:b0:66:92:
1f:e3:41:58:06:47:cc:ba:c7:4d:c7:bb:1a:cd:bb:
2f:91:ce:d4:19:38:10:7d:e3:93:3d:22:a2:8b:1c:
aa:31:3c:fe:f3:60:5b:c8:52:5f:8f:80:1f:e4:75:
e5:d7:af:4a:da:7e:02:41:54:0a:b2:6c:cc:20:48:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:BA:87:98:7B:09:DB:0E:E8:5D:26:08:41:83:66:CD:CA:55:40
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1b:43:40:4d:a1:00:8f:8b:53:ec:26:2d:94:60:90:a2:5a:
c6:0d:ba:91:a6:1c:e9:c4:a0:8e:b6:d6:e4:f1:3a:27:f2:b0:
65:81:fc:8a:dc:df:4a:16:30:d0:b8:92:4a:35:64:2d:83:41:
17:43:9e:73:80:be:d6:29:e8:9b:ed:26:70:36:f1:47:7e:10:
c6:4c:65:dc:59:5a:b4:26:8c:db:4f:bf:a5:4a:a5:ce:21:a1:
55:c8:5e:a1:fd:10:f6:eb:b4:79:f4:b7:ca:d5:c1:9a:d0:27:
01:97:a7:bd:fa:07:dd:c0:d7:07:5a:20:09:b2:b6:98:6c:7f:
56:03:a6:88:77:a0:46:42:8a:de:1c:65:61:55:a6:a2:9e:00:
2c:ae:fa:7c:43:3c:7c:a5:a1:1a:25:93:97:1c:1d:74:46:4f:
65:a1:90:e6:5b:66:6c:8c:f8:e2:ae:68:92:d2:4a:05:55:cf:
e8:ea:0a:ab:40:13:b0:32:3d:d1:79:14:36:07:f3:a6:63:d1:
b7:a8:84:5d:17:5d:c7:31:dc:9d:ed:ea:27:e3:48:a2:18:26:
fd:15:ba:a9:ee:02:ef:a7:0f:be:4d:79:a5:d9:b3:1e:4e:d5:
f0:f5:13:17:55:39:38:81:70:14:92:c1:de:ac:04:38:ce:2d:
53:52:ab:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NCyLN900bL5aoesHwXs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjUxMDE5MTYwMTE4WhcNMjUxMDIwMTYwMTE4WjAzMTEwLwYDVQQD
EygzNmNiYmE4Nzk4N2IwOWRiMGVlODVkMjYwODQxODM2NmNkY2E1NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/5OaJlVqWvTEY5t0BQo5wWcxBSJ
RX47NOuVzPOPmVGu9Kx2/BPuBsvVkOf0UxLkuhU+U/4leo2t6QidDY5UCEqVtVOH
gcE3iXEWqj96qHom7m62IOssM+TvkQeT0ka9ha7chgwGX3PTCbTg2gtyFUkvARQ/
Fj+Psy70kkVqhZRrEtgVV3pc752RsgXQslxmtTy8s6zouqTJL4TtmcvFY2+dLa0v
b6EisIpLpIfUP5hp38PLzMcEHfIhHso+Y+2wZpIf40FYBkfMusdNx7sazbsvkc7U
GTgQfeOTPSKiixyqMTz+82BbyFJfj4Af5HXl169K2n4CQVQKsmzMIEjHmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbLuoeYewnbDuhdJghBg2bNylVAMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxtDQE2h
AI+LU+wmLZRgkKJaxg26kaYc6cSgjrbW5PE6J/KwZYH8itzfShYw0LiSSjVkLYNB
F0Oec4C+1inom+0mcDbxR34Qxkxl3FlatCaM20+/pUqlziGhVcheof0Q9uu0efS3
ytXBmtAnAZenvfoH3cDXB1ogCbK2mGx/VgOmiHegRkKK3hxlYVWmop4ALK76fEM8
fKWhGiWTlxwddEZPZaGQ5ltmbIz44q5oktJKBVXP6OoKq0ATsDI90XkUNgfzpmPR
t6iEXRddxzHcne3qJ+NIohgm/RW6qe4C76cPvk15pdmzHk7V8PUTF1U5OIFwFJLB
3qwEOM4tU1KrKw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:33 2025 by rpki-client