Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: DcEbqdWCSKSGKqFMbu1ll1XNZqJTox2iqRAjvKIYAXA=
Subject key identifier: 25:61:D0:39:2C:03:36:93:56:27:F6:C3:48:30:D7:71:50:EB:2F:8B
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 0199FC8F12F515BD1E2E3B7F771C50F39DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1179
Signing time: Sun 19 Oct 2025 13:00:58 +0000
Manifest this update: Sun 19 Oct 2025 13:00:58 +0000
Manifest next update: Mon 20 Oct 2025 13:00:58 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: ZLDVPI8aGeBbNn+vZ8Monn8psFdUsjW8QeSsIW8kmnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:12:f5:15:bd:1e:2e:3b:7f:77:1c:50:f3:9d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Oct 19 13:00:58 2025 GMT
Not After : Oct 20 13:00:58 2025 GMT
Subject: CN=2561d0392c0336935627f6c34830d77150eb2f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:50:81:e5:8e:fc:ee:f9:62:27:25:6f:51:
13:2d:89:c2:23:1b:82:98:9b:d6:05:ce:08:b2:a5:
c6:34:8a:c0:d0:87:30:1e:83:3c:ab:8f:d2:f2:b6:
fa:48:f8:99:54:c4:bc:04:7a:b4:49:ac:71:23:b8:
eb:d5:15:9e:99:30:9b:35:71:98:b1:b0:2b:db:37:
bd:a9:80:61:10:ff:e5:61:09:18:92:3f:2a:0b:84:
67:83:75:8c:b8:a2:68:71:e9:b1:aa:c6:85:3b:85:
98:ce:0a:7c:2b:15:05:1c:77:80:6b:ba:8f:c3:c4:
ab:30:6e:03:09:69:69:f4:cf:d3:9e:5a:d7:6d:f4:
dd:41:1f:80:e4:e7:e7:b3:4f:24:d7:db:23:19:97:
de:31:73:85:8e:5c:18:a3:12:81:64:8f:b4:e2:a5:
4b:6a:a4:ea:7e:96:07:3b:8d:e9:66:4f:db:55:57:
a6:49:02:ce:18:b3:63:00:83:8f:7e:24:97:19:d8:
17:f9:e3:1f:0c:37:a1:0d:e1:63:f2:84:10:1b:0d:
5a:5e:9d:b8:86:eb:2f:f2:4c:92:9e:88:c3:be:b7:
bc:af:06:1e:79:84:91:ec:32:98:a0:64:2c:90:8f:
7e:b3:b8:0c:87:43:15:1e:df:5b:1d:96:22:48:5c:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:D0:39:2C:03:36:93:56:27:F6:C3:48:30:D7:71:50:EB:2F:8B
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ef:fa:d4:32:85:df:e3:ce:c4:bf:bd:1e:8b:6f:09:ec:48:
51:20:9a:d4:6b:b2:09:2c:6d:04:2d:ca:84:8d:c9:c5:63:05:
6f:4a:71:ca:ca:3f:b4:05:d0:9b:2e:36:58:ba:8b:a4:a9:14:
7c:36:ff:57:41:c2:95:85:2d:75:43:86:ec:b8:74:02:66:ad:
3e:9b:cb:a3:49:7c:a4:69:e7:32:ea:98:19:e9:2a:aa:ce:63:
e8:6a:43:6d:69:f8:3e:69:29:6f:04:d6:69:4b:8f:50:94:02:
59:78:73:3a:97:24:b8:6d:70:60:73:f3:2b:7d:36:53:7f:46:
f6:2e:2c:ae:9c:66:9b:11:6e:39:6c:31:82:f1:66:66:19:88:
6b:f2:77:ce:c6:1e:a2:bc:ce:90:a4:2b:78:f8:82:df:b3:cb:
c3:5a:c0:75:e3:c3:32:11:6e:34:3d:0b:1a:6c:e5:bc:01:b2:
2d:89:61:03:fc:69:e5:8d:74:1d:3e:b9:39:ad:1a:a7:83:54:
52:70:51:e1:58:6b:ea:56:19:70:27:62:ba:16:48:b4:fa:25:
be:1e:ad:9f:31:4a:07:3a:41:2b:9c:bf:a1:77:a6:92:87:94:
aa:22:17:45:ee:ac:91:0a:bd:96:5b:68:f2:04:6b:0b:23:69:
94:c4:d6:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jxL1Fb0eLjt/dxxQ852qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx
ODE3ZmEwHhcNMjUxMDE5MTMwMDU4WhcNMjUxMDIwMTMwMDU4WjAzMTEwLwYDVQQD
EygyNTYxZDAzOTJjMDMzNjkzNTYyN2Y2YzM0ODMwZDc3MTUwZWIyZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVRQgeWO/O75Yiclb1ETLYnCIxuC
mJvWBc4IsqXGNIrA0IcwHoM8q4/S8rb6SPiZVMS8BHq0SaxxI7jr1RWemTCbNXGY
sbAr2ze9qYBhEP/lYQkYkj8qC4Rng3WMuKJocemxqsaFO4WYzgp8KxUFHHeAa7qP
w8SrMG4DCWlp9M/TnlrXbfTdQR+A5Ofns08k19sjGZfeMXOFjlwYoxKBZI+04qVL
aqTqfpYHO43pZk/bVVemSQLOGLNjAIOPfiSXGdgX+eMfDDehDeFj8oQQGw1aXp24
husv8kySnojDvre8rwYeeYSR7DKYoGQskI9+s7gMh0MVHt9bHZYiSFzSGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVh0DksAzaTVif2w0gw13FQ6y+LMB8GA1UdIwQY
MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt
YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5
LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO/61DKF
3+POxL+9HotvCexIUSCa1GuyCSxtBC3KhI3JxWMFb0pxyso/tAXQmy42WLqLpKkU
fDb/V0HClYUtdUOG7Lh0AmatPpvLo0l8pGnnMuqYGekqqs5j6GpDbWn4PmkpbwTW
aUuPUJQCWXhzOpckuG1wYHPzK302U39G9i4srpxmmxFuOWwxgvFmZhmIa/J3zsYe
orzOkKQrePiC37PLw1rAdePDMhFuND0LGmzlvAGyLYlhA/xp5Y10HT65Oa0ap4NU
UnBR4Vhr6lYZcCdiuhZItPolvh6tnzFKBzpBK5y/oXemkoeUqiIXRe6skQq9llto
8gRrCyNplMTWJg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:08 2025 by rpki-client