Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: nK3ywK4mhfmqHuaWIuQhCtWtkT1VGHmbRPUOD+ct238=
Subject key identifier: 0A:ED:31:6D:6D:88:C8:71:12:6C:02:7F:54:7A:A6:A8:2C:1A:A5:1A
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 0199FE7E1BDBE4A849818DAE5A9594BEC85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0720
Signing time: Sun 19 Oct 2025 22:01:41 +0000
Manifest this update: Sun 19 Oct 2025 22:01:41 +0000
Manifest next update: Mon 20 Oct 2025 22:01:41 +0000
Files and hashes: 1: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: cUQnn0X/63PVaj8k4uFJ17g8q6h2LJ5qSuvfuHWoKsA=)
2: EEHOXZie7GfjFP8O_aL3DaZW-cs.roa (hash: X68IlMoKqFdfJQq29aFoZvl4dyUrIU6qUuNNpdY5QY0=)
3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
4: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (hash: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=)
5: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
6: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:1b:db:e4:a8:49:81:8d:ae:5a:95:94:be:c8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Oct 19 22:01:41 2025 GMT
Not After : Oct 20 22:01:41 2025 GMT
Subject: CN=0aed316d6d88c871126c027f547aa6a82c1aa51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:3d:e3:87:0b:16:f3:3e:4e:44:e3:fa:68:
22:e6:1c:f2:06:24:49:7b:54:7f:e0:14:4f:4e:14:
f1:23:84:cb:ca:21:6a:f6:c2:1f:0e:6b:aa:d5:29:
d1:1b:a2:e8:1b:7d:c7:44:02:6d:08:27:50:c6:e6:
e7:86:53:7f:96:2a:7e:96:e9:72:2b:00:d6:72:3a:
d3:04:88:95:bc:ee:4a:68:56:4e:9d:ae:b6:ef:7f:
f9:b8:18:79:24:ff:d9:86:11:c7:ea:10:c3:4e:1b:
59:1d:d5:fd:73:b9:8d:0a:06:a5:c3:ee:bd:cd:43:
9d:eb:5b:d4:56:a4:e4:ed:b8:fd:4c:07:70:f3:e7:
e2:70:7b:ec:78:89:49:81:f7:99:1b:b4:e4:0b:e0:
96:4d:0e:5b:56:da:46:2a:21:96:2b:3d:e5:bb:f7:
a4:14:de:51:3e:98:a4:8f:fd:e8:f0:25:57:b4:38:
91:06:c4:37:14:73:f4:8f:38:01:32:da:cf:04:a9:
f5:d5:9e:09:b6:76:6c:60:ed:0c:ea:77:b8:dc:1c:
85:79:b9:13:e5:ba:bf:59:72:02:26:dd:54:a3:cc:
8b:d9:c1:1e:aa:4c:2c:d2:66:45:f9:1c:a8:83:a9:
18:43:bd:eb:f9:d9:d2:07:2e:63:26:78:e1:7d:18:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:31:6D:6D:88:C8:71:12:6C:02:7F:54:7A:A6:A8:2C:1A:A5:1A
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a6:de:c0:13:71:10:75:13:a2:f8:ab:99:4b:a6:0f:36:85:
ce:80:81:f6:0c:cd:c1:4a:c3:3c:79:94:61:ef:6c:f6:9b:a1:
cb:f8:77:41:14:1d:89:0f:08:6d:b0:de:72:8f:8e:47:79:ba:
6b:ed:83:40:7e:69:8c:ed:a9:d1:e0:ad:be:72:ec:07:d8:b6:
6e:b2:32:1e:87:3f:ca:52:2e:63:3c:c1:73:af:73:61:b3:28:
35:dd:6c:72:2d:99:74:8d:30:9f:d7:a6:bb:ca:73:a9:1e:f6:
9b:9e:0a:1e:dc:d9:27:18:45:e0:43:3b:27:e6:11:79:ea:83:
72:26:43:93:e4:fb:71:43:c4:ba:30:bb:24:d8:ab:50:ac:8c:
2c:31:6c:40:38:35:05:2d:09:35:ec:d8:bf:0d:fd:2c:05:77:
5b:c1:f7:1d:a1:20:4a:34:63:1d:23:90:e1:2d:f7:f3:2c:0a:
ab:7c:fb:d0:dd:99:bd:28:c0:37:1b:3c:04:79:c4:a8:74:68:
c6:52:de:fe:f2:49:14:c0:9e:23:1a:6b:f8:25:82:92:97:11:
a0:79:c6:3a:c5:d6:ae:8d:17:f0:e8:21:82:38:ee:f3:a5:59:
7c:7a:d9:11:e0:77:b8:0a:cf:e6:ba:bd:e4:d5:2e:fc:79:cb:
04:1d:b0:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fhvb5KhJgY2uWpWUvshcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjUxMDE5MjIwMTQxWhcNMjUxMDIwMjIwMTQxWjAzMTEwLwYDVQQD
EygwYWVkMzE2ZDZkODhjODcxMTI2YzAyN2Y1NDdhYTZhODJjMWFhNTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ8944cLFvM+TkTj+mgi5hzyBiRJ
e1R/4BRPThTxI4TLyiFq9sIfDmuq1SnRG6LoG33HRAJtCCdQxubnhlN/lip+luly
KwDWcjrTBIiVvO5KaFZOna6273/5uBh5JP/ZhhHH6hDDThtZHdX9c7mNCgalw+69
zUOd61vUVqTk7bj9TAdw8+ficHvseIlJgfeZG7TkC+CWTQ5bVtpGKiGWKz3lu/ek
FN5RPpikj/3o8CVXtDiRBsQ3FHP0jzgBMtrPBKn11Z4JtnZsYO0M6ne43ByFebkT
5bq/WXICJt1Uo8yL2cEeqkws0mZF+Ryog6kYQ73r+dnSBy5jJnjhfRhVswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArtMW1tiMhxEmwCf1R6pqgsGqUaMB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqbewBNx
EHUTovirmUumDzaFzoCB9gzNwUrDPHmUYe9s9puhy/h3QRQdiQ8IbbDeco+OR3m6
a+2DQH5pjO2p0eCtvnLsB9i2brIyHoc/ylIuYzzBc69zYbMoNd1sci2ZdI0wn9em
u8pzqR72m54KHtzZJxhF4EM7J+YReeqDciZDk+T7cUPEujC7JNirUKyMLDFsQDg1
BS0JNezYvw39LAV3W8H3HaEgSjRjHSOQ4S338ywKq3z70N2ZvSjANxs8BHnEqHRo
xlLe/vJJFMCeIxpr+CWCkpcRoHnGOsXWro0X8Oghgjju86VZfHrZEeB3uArP5rq9
5NUu/HnLBB2wow==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:43 2025 by rpki-client