Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
File: dDWQyYyt2-4a14ldOC1Q9f28SK0.mft (raw, json)
Hash identifier: KUlj1CzqaxiiPiRdFEtznhxSHMYoB0iI1QVQFerJhcg=
Subject key identifier: 89:D3:7E:BA:28:26:A2:55:C7:46:AE:67:D7:28:5E:5B:7F:70:4C:16
Authority key identifier: 74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
Certificate issuer: /CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Certificate serial: 0199FC21869EA9B60D0BA7630AC2F4762AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
Manifest number: 89
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: dDWQyYyt2-4a14ldOC1Q9f28SK0.crl (hash: zHp8gbcM7gSbw7uHi4y6H5ycle/+kb9kdX6PXh/5u0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:86:9e:a9:b6:0d:0b:a7:63:0a:c2:f4:76:2a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=89d37eba2826a255c746ae67d7285e5b7f704c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:c4:cf:b0:db:d4:11:da:83:6a:6f:23:3c:
0a:fc:5c:47:8f:ea:87:45:fa:86:7a:6e:98:97:4a:
09:e7:a2:54:0e:37:ea:c0:a5:55:6a:2c:ce:1b:53:
14:a8:79:c4:0f:dc:05:84:c8:fb:be:5c:80:5f:b3:
a0:1a:9f:5a:24:6d:26:ef:1f:1f:96:7d:e4:df:b5:
e7:4d:b7:63:f8:66:3c:9a:01:e6:34:6e:aa:b0:9c:
30:b7:a9:48:92:3f:72:5e:53:38:29:f7:7c:77:80:
b9:d9:fa:a4:8a:17:9b:74:b9:b7:e1:9f:89:48:d2:
ce:c8:30:37:b5:e1:87:75:2c:26:02:39:86:e6:03:
f7:2f:e2:df:2f:cc:f8:ef:a6:a2:11:27:c9:f1:cb:
a4:96:08:94:b1:d8:e1:6b:6d:5d:6d:49:91:17:75:
6c:e2:37:f8:8f:88:05:29:be:04:ed:ee:28:ae:02:
8c:3a:b7:26:32:f5:f7:91:54:0c:09:a0:90:6e:15:
57:e7:80:5b:14:09:b4:c5:bc:c0:37:e1:18:7c:64:
95:c6:cd:10:08:9d:f6:86:cc:67:9b:41:31:9a:54:
38:af:55:9d:fd:12:99:85:7a:f3:ac:8d:12:53:47:
34:2d:44:cf:6b:ba:92:39:13:83:14:16:d0:85:a8:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D3:7E:BA:28:26:A2:55:C7:46:AE:67:D7:28:5E:5B:7F:70:4C:16
X509v3 Authority Key Identifier:
keyid:74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b6:7e:78:d9:80:3d:1f:1b:64:1d:50:a6:2c:01:26:f9:12:
83:bc:3a:6a:61:e4:09:b3:8b:de:ea:f9:15:15:3c:70:55:be:
2f:fe:90:30:06:90:11:6a:c5:3f:92:23:bb:d8:e8:0a:1a:fc:
80:89:8a:56:3c:9b:b1:52:46:e4:f3:ac:c2:d3:74:df:fb:77:
1a:15:6f:8b:fc:3b:c0:e7:16:0a:e6:12:9f:53:6a:4d:b0:8d:
96:1f:ad:7f:ce:6a:50:68:40:df:fe:2d:70:5c:6e:24:85:69:
3c:b2:fa:1d:8c:13:25:68:6d:27:fa:9a:bd:6d:69:46:91:50:
3b:79:90:ce:d0:dc:70:e4:d1:5f:82:b4:d9:95:0f:40:78:98:
48:d5:56:e5:f6:98:ec:d0:18:09:f8:9a:a2:db:db:13:e7:5f:
3d:36:37:66:f0:39:8a:53:d7:d3:aa:aa:d8:5f:bc:bd:9c:da:
99:a1:84:ba:47:fa:8f:93:1c:9b:f0:41:63:25:86:9c:45:db:
db:59:e7:24:89:88:4e:65:9a:76:e5:11:11:c4:cc:17:94:a3:
b1:47:9b:ef:e4:ca:e0:79:cf:69:55:ef:81:9f:b0:e8:d1:2a:
19:f9:00:90:44:7d:4c:19:59:ca:43:eb:6c:8a:e9:93:c4:da:
05:51:e5:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYaeqbYNC6djCsL0diquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MzU5MGM5OGNhZGRiZWUxYWQ3ODk1ZDM4MmQ1MGY1ZmRi
YzQ4YWQwHhcNMjUxMDE5MTEwMTE5WhcNMjUxMDIwMTEwMTE5WjAzMTEwLwYDVQQD
Eyg4OWQzN2ViYTI4MjZhMjU1Yzc0NmFlNjdkNzI4NWU1YjdmNzA0YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8jEz7Db1BHag2pvIzwK/FxHj+qH
RfqGem6Yl0oJ56JUDjfqwKVVaizOG1MUqHnED9wFhMj7vlyAX7OgGp9aJG0m7x8f
ln3k37XnTbdj+GY8mgHmNG6qsJwwt6lIkj9yXlM4Kfd8d4C52fqkihebdLm34Z+J
SNLOyDA3teGHdSwmAjmG5gP3L+LfL8z476aiESfJ8cuklgiUsdjha21dbUmRF3Vs
4jf4j4gFKb4E7e4orgKMOrcmMvX3kVQMCaCQbhVX54BbFAm0xbzAN+EYfGSVxs0Q
CJ32hsxnm0ExmlQ4r1Wd/RKZhXrzrI0SU0c0LUTPa7qSORODFBbQhagnbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInTfrooJqJVx0auZ9coXlt/cEwWMB8GA1UdIwQY
MBaAFHQ1kMmMrdvuGteJXTgtUPX9vEitMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZERXUXlZeXQyLTRhMTRsZE9DMVE5ZjI4U0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85YTk5YzUtMDcxMy00Yjc2LWI4ZjIt
MDFhZGMxMDE1NjQ4LzEvZERXUXlZeXQyLTRhMTRsZE9DMVE5ZjI4U0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85YTk5YzUtMDcxMy00Yjc2LWI4ZjItMDFhZGMxMDE1NjQ4
LzEvZERXUXlZeXQyLTRhMTRsZE9DMVE5ZjI4U0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrZ+eNmA
PR8bZB1QpiwBJvkSg7w6amHkCbOL3ur5FRU8cFW+L/6QMAaQEWrFP5Iju9joChr8
gImKVjybsVJG5POswtN03/t3GhVvi/w7wOcWCuYSn1NqTbCNlh+tf85qUGhA3/4t
cFxuJIVpPLL6HYwTJWhtJ/qavW1pRpFQO3mQztDccOTRX4K02ZUPQHiYSNVW5faY
7NAYCfiaotvbE+dfPTY3ZvA5ilPX06qq2F+8vZzamaGEukf6j5Mcm/BBYyWGnEXb
21nnJImITmWaduUREcTMF5SjsUeb7+TK4HnPaVXvgZ+w6NEqGfkAkER9TBlZykPr
bIrpk8TaBVHlYQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:10 2025 by rpki-client