Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: 9DsLRKFyyqL55zxIQE8b3QhGWps5dOJ6UOuGFIalR20=
Subject key identifier: 43:58:A8:BD:E5:01:81:49:D1:94:29:32:90:6D:5C:8E:7F:41:40:3F
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 0199FDD93BE583A5E91EE161D7C910B17570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 03BD
Signing time: Sun 19 Oct 2025 19:01:36 +0000
Manifest this update: Sun 19 Oct 2025 19:01:36 +0000
Manifest next update: Mon 20 Oct 2025 19:01:36 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: 4y9Jz+dhtg3AJm1yPdff6fwEwb40r1e1mrc5PUWRZfo=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:3b:e5:83:a5:e9:1e:e1:61:d7:c9:10:b1:75:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Oct 19 19:01:36 2025 GMT
Not After : Oct 20 19:01:36 2025 GMT
Subject: CN=4358a8bde5018149d1942932906d5c8e7f41403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:48:c3:95:a9:0d:62:e2:a7:4b:5a:af:b6:
69:f1:10:e5:a7:73:00:8a:dd:19:ff:84:09:9d:b1:
b2:54:7a:9d:3b:8a:51:07:ef:b7:2d:db:61:d0:fa:
2e:b3:4d:dd:60:88:4a:35:0b:78:c8:ae:a8:8b:eb:
99:55:2f:ec:50:54:08:4c:45:49:81:5d:9d:ef:57:
e6:c7:c3:6c:27:6c:9a:96:83:8a:29:1d:ba:80:cd:
86:7b:dc:ca:57:3f:55:63:bd:fe:f2:13:f9:a0:14:
80:eb:2c:f0:85:fd:03:f1:61:83:bd:49:98:a5:f0:
aa:79:d3:1f:64:d1:5d:e7:50:b7:46:e3:f9:29:6c:
63:76:c8:a4:c9:62:b9:67:9c:6e:98:a0:36:27:2b:
21:74:dc:1d:09:19:aa:eb:8f:08:09:b2:b0:0a:c3:
be:f3:3c:1a:20:86:00:83:d5:e8:76:f7:d3:ab:66:
c1:27:cd:02:76:8a:34:44:68:1f:82:45:ac:cc:da:
c3:a7:d5:5e:38:30:dc:6a:b8:79:ff:2b:71:06:7b:
7b:98:11:69:fb:82:af:04:5c:c5:ab:77:a3:96:bb:
cd:06:32:7d:59:98:fc:1d:8e:a3:54:c5:91:bd:71:
0f:b1:70:8d:2b:73:1f:55:77:ce:b5:44:5d:be:4d:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:A8:BD:E5:01:81:49:D1:94:29:32:90:6D:5C:8E:7F:41:40:3F
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:f0:f5:2b:c4:8d:80:81:48:1f:19:13:ba:ca:0d:03:bc:
56:23:9d:a3:d3:84:73:b7:ff:a2:e7:19:57:46:df:50:46:c1:
71:49:51:20:eb:ce:25:4f:4b:1f:04:07:ee:d3:f5:91:78:f3:
48:34:a7:ec:39:1f:7d:03:4f:74:84:96:12:4d:62:68:3d:47:
ff:46:46:b1:86:63:9b:6c:3e:3e:fb:7f:ab:22:be:6e:b2:94:
a5:89:fb:9f:aa:49:57:a1:f4:05:0a:8c:51:f9:0e:cf:52:c8:
a1:86:65:8b:7f:75:73:23:30:38:27:68:d6:36:9d:08:f1:f9:
e2:aa:bc:84:95:41:6b:84:f1:b4:65:ea:5f:b1:95:d6:72:93:
18:18:ae:8a:5b:77:a5:43:57:61:cc:70:ce:1f:4a:9b:04:96:
f0:b5:b0:d3:eb:cb:4f:de:e8:de:1a:88:1b:70:01:f9:4b:d5:
33:85:26:2e:e2:2a:f5:8f:bb:51:22:e5:5f:4a:46:eb:7c:42:
a0:3a:b2:fe:d4:70:e0:44:6b:3b:38:e1:a9:42:38:80:e2:86:
9b:f0:02:b8:4d:28:44:d6:37:f2:c1:82:08:4c:20:b0:47:1a:
99:62:8d:bb:cf:96:3d:e0:a2:16:e6:e5:03:a4:db:5d:00:63:
ff:32:81:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Tvlg6XpHuFh18kQsXVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDAxOWVkMmNiNjIxOTdiMGNhOTZlMWU3MTYxYzk4NjQ5
MDg2YWYwHhcNMjUxMDE5MTkwMTM2WhcNMjUxMDIwMTkwMTM2WjAzMTEwLwYDVQQD
Eyg0MzU4YThiZGU1MDE4MTQ5ZDE5NDI5MzI5MDZkNWM4ZTdmNDE0MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9VIw5WpDWLip0tar7Zp8RDlp3MA
it0Z/4QJnbGyVHqdO4pRB++3Ldth0Pous03dYIhKNQt4yK6oi+uZVS/sUFQITEVJ
gV2d71fmx8NsJ2yaloOKKR26gM2Ge9zKVz9VY73+8hP5oBSA6yzwhf0D8WGDvUmY
pfCqedMfZNFd51C3RuP5KWxjdsikyWK5Z5xumKA2JyshdNwdCRmq648ICbKwCsO+
8zwaIIYAg9XodvfTq2bBJ80Cdoo0RGgfgkWszNrDp9VeODDcarh5/ytxBnt7mBFp
+4KvBFzFq3ejlrvNBjJ9WZj8HY6jVMWRvXEPsXCNK3MfVXfOtURdvk3+IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENYqL3lAYFJ0ZQpMpBtXI5/QUA/MB8GA1UdIwQY
MBaAFA4AGe0stiGXsMqW4ecWHJhkkIavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEt
MDU5YjAwNmYzOWQ5LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEtMDU5YjAwNmYzOWQ5
LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDvw9SvE
jYCBSB8ZE7rKDQO8ViOdo9OEc7f/oucZV0bfUEbBcUlRIOvOJU9LHwQH7tP1kXjz
SDSn7DkffQNPdISWEk1iaD1H/0ZGsYZjm2w+Pvt/qyK+brKUpYn7n6pJV6H0BQqM
UfkOz1LIoYZli391cyMwOCdo1jadCPH54qq8hJVBa4TxtGXqX7GV1nKTGBiuilt3
pUNXYcxwzh9KmwSW8LWw0+vLT97o3hqIG3AB+UvVM4UmLuIq9Y+7USLlX0pG63xC
oDqy/tRw4ERrOzjhqUI4gOKGm/ACuE0oRNY38sGCCEwgsEcamWKNu8+WPeCiFubl
A6TbXQBj/zKB8g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:06 2025 by rpki-client