Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: ZKumfJ6J08WQ+o+fpgu4EhFTwAIwSqpHDYKflL0QsHQ=
Subject key identifier: 3A:7C:85:61:75:D9:87:F7:DA:FF:F4:48:23:8E:DC:EB:E7:EC:1A:A4
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 019A01B61B61F3EA39A11FA161220CF4A11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0B24
Signing time: Mon 20 Oct 2025 13:01:42 +0000
Manifest this update: Mon 20 Oct 2025 13:01:42 +0000
Manifest next update: Tue 21 Oct 2025 13:01:42 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: hdhEuQHpZeNFp5x875S/q1v9Z6qBg/tBrfFCksaGrHY=)
2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:1b:61:f3:ea:39:a1:1f:a1:61:22:0c:f4:a1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Oct 20 13:01:42 2025 GMT
Not After : Oct 21 13:01:42 2025 GMT
Subject: CN=3a7c856175d987f7dafff448238edcebe7ec1aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:2e:1d:04:40:fd:e6:e2:d1:28:15:5b:64:
2d:6f:46:cd:fd:f0:34:39:24:74:98:a8:03:52:2d:
34:ef:21:59:58:1b:80:0f:d0:54:5f:b8:dc:1e:61:
9b:0f:b3:31:14:7e:2d:0b:ac:97:34:ac:c5:11:be:
a9:d8:4b:b7:ef:d3:17:3b:a5:68:d1:af:fd:99:c4:
7e:cf:42:f9:27:4e:2e:30:15:15:28:9a:c3:ae:ff:
4f:a1:52:4b:a7:3b:1b:66:5d:24:1b:a9:59:d4:ac:
64:27:9e:1a:2c:4a:25:8f:24:f2:57:79:52:55:ea:
f1:9f:28:4f:1c:56:2f:6d:66:c2:8e:86:12:e9:8c:
00:3d:82:b3:37:a9:34:09:21:8e:f9:37:af:35:91:
39:87:40:69:18:b9:c5:bd:41:e0:24:25:64:6c:92:
ae:87:ae:c1:93:12:f6:51:f7:6a:a3:1b:25:3b:e5:
89:c3:93:a0:4d:d3:b1:89:56:19:8c:ce:e6:d6:d8:
d9:89:e9:85:02:25:aa:51:06:38:bb:89:04:73:6f:
3a:53:d0:f8:b2:07:38:05:bf:4a:a8:51:45:ee:75:
a8:f8:5f:5a:00:39:30:18:c1:f8:76:0d:44:3a:35:
14:f7:ef:99:55:b9:f9:bc:5e:3d:f9:7c:cc:6e:a4:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7C:85:61:75:D9:87:F7:DA:FF:F4:48:23:8E:DC:EB:E7:EC:1A:A4
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3f:dc:98:77:42:e7:ec:78:6b:2d:2d:b5:9f:b6:fe:aa:ca:
cd:48:8e:58:e4:4b:28:4a:16:ec:b5:2c:3e:17:22:10:0b:38:
1d:a4:32:8a:3e:0b:83:5e:6f:fa:a1:8d:e8:74:69:2e:53:f5:
2d:56:3a:b5:b5:d8:60:d6:34:a0:a4:d8:09:12:4d:7f:2a:7f:
da:a7:ad:28:0f:0d:95:f5:4f:c2:8a:2d:55:67:7c:6e:6f:4e:
b5:52:58:4b:70:70:c6:13:b9:f0:77:b3:87:d9:c5:85:71:ae:
80:e3:18:87:5b:d1:ac:dd:79:1a:a8:42:c9:79:ae:60:06:3e:
5b:5f:4a:e6:35:c8:b5:1e:b7:43:4c:07:c9:12:34:74:8a:4d:
9f:64:eb:49:25:b2:01:6c:98:8d:01:6e:76:57:8e:00:df:06:
df:0d:60:c4:c9:5d:e0:a1:ec:03:4d:8d:b2:5f:bb:76:55:9a:
ab:65:8d:e9:90:33:e2:e7:31:2c:a2:ac:3c:34:7a:84:bc:67:
05:48:8b:0c:81:1e:59:58:b9:b4:47:72:0d:4c:ca:10:77:4a:
ad:16:48:84:96:7c:b0:85:56:e6:69:3a:54:2a:f4:8d:dc:5f:
7b:5a:c9:03:aa:9d:59:a1:f5:95:fe:e2:1e:6e:46:88:59:a8:
0d:36:eb:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBthth8+o5oR+hYSIM9KEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYmQ1ZjU0OTA1ZWU4ZTRkMjgzMGM2Y2Y1MGY2MGQyNjQy
MDFhOTMwHhcNMjUxMDIwMTMwMTQyWhcNMjUxMDIxMTMwMTQyWjAzMTEwLwYDVQQD
EygzYTdjODU2MTc1ZDk4N2Y3ZGFmZmY0NDgyMzhlZGNlYmU3ZWMxYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8cuHQRA/ebi0SgVW2Qtb0bN/fA0
OSR0mKgDUi007yFZWBuAD9BUX7jcHmGbD7MxFH4tC6yXNKzFEb6p2Eu379MXO6Vo
0a/9mcR+z0L5J04uMBUVKJrDrv9PoVJLpzsbZl0kG6lZ1KxkJ54aLEoljyTyV3lS
VerxnyhPHFYvbWbCjoYS6YwAPYKzN6k0CSGO+TevNZE5h0BpGLnFvUHgJCVkbJKu
h67BkxL2UfdqoxslO+WJw5OgTdOxiVYZjM7m1tjZiemFAiWqUQY4u4kEc286U9D4
sgc4Bb9KqFFF7nWo+F9aADkwGMH4dg1EOjUU9++ZVbn5vF49+XzMbqR1LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp8hWF12Yf32v/0SCOO3Ovn7BqkMB8GA1UdIwQY
MBaAFA69X1SQXujk0oMMbPUPYNJkIBqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNTkzOWItZGFhNy00ZjQ3LTk4NzMt
NjRhMjdlOTc3ZmQ5LzEvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNTkzOWItZGFhNy00ZjQ3LTk4NzMtNjRhMjdlOTc3ZmQ5
LzEvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj/cmHdC
5+x4ay0ttZ+2/qrKzUiOWORLKEoW7LUsPhciEAs4HaQyij4Lg15v+qGN6HRpLlP1
LVY6tbXYYNY0oKTYCRJNfyp/2qetKA8NlfVPwootVWd8bm9OtVJYS3BwxhO58Hez
h9nFhXGugOMYh1vRrN15GqhCyXmuYAY+W19K5jXItR63Q0wHyRI0dIpNn2TrSSWy
AWyYjQFudleOAN8G3w1gxMld4KHsA02Nsl+7dlWaq2WN6ZAz4ucxLKKsPDR6hLxn
BUiLDIEeWVi5tEdyDUzKEHdKrRZIhJZ8sIVW5mk6VCr0jdxfe1rJA6qdWaH1lf7i
Hm5GiFmoDTbrag==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:34 2025 by rpki-client