Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier: eomOzSjNyNWhXpCV7l41BPuFOpvl785g+uMOfs8Ua/w=
Subject key identifier: 33:13:10:B2:88:72:DD:CD:5D:83:7C:58:17:E8:1E:19:3B:26:B1:4F
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 019A02FEA4254930E11DFBD7416B2BAC6D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number: 0816
Signing time: Mon 20 Oct 2025 19:00:33 +0000
Manifest this update: Mon 20 Oct 2025 19:00:33 +0000
Manifest next update: Tue 21 Oct 2025 19:00:33 +0000
Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: Vwqq5XSyHyD5TjJVZI4SuRF6XbmLA1zmA9+ijXcPW08=)
2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:a4:25:49:30:e1:1d:fb:d7:41:6b:2b:ac:6d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Oct 20 19:00:33 2025 GMT
Not After : Oct 21 19:00:33 2025 GMT
Subject: CN=331310b28872ddcd5d837c5817e81e193b26b14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:8d:61:c5:b1:b9:40:5a:48:8d:22:15:fe:
7d:f9:89:86:08:8a:4d:89:82:98:fe:25:dc:7e:a5:
2b:15:0a:22:86:50:c5:a0:af:d4:12:f3:e6:42:46:
0e:fa:e4:2d:9c:21:e3:cd:00:bb:f1:ac:5b:35:23:
b4:bc:c2:cb:db:30:38:f8:a2:f0:17:b2:9b:c8:fa:
02:33:6d:aa:97:13:fb:a0:81:dc:e6:a7:3b:9b:78:
39:4c:08:ac:62:8a:49:ea:78:0b:77:0d:44:59:61:
40:07:ab:37:2b:b6:e7:48:6b:4b:8e:ac:1b:6c:76:
93:cd:21:76:34:e8:3a:51:e0:f9:91:8a:fe:09:8e:
f2:2d:eb:ad:e7:2d:63:95:eb:ef:95:4a:b7:d1:b5:
15:2c:0a:ba:41:88:03:37:4d:bd:82:46:36:61:f7:
9d:09:62:0c:d2:8a:3a:47:ba:be:76:37:ea:7d:b3:
cd:53:30:94:39:e9:5a:cf:66:04:64:f3:a3:dc:2b:
d5:75:c0:c5:a4:79:2a:45:32:e4:fb:87:65:8d:30:
39:c1:b2:14:56:40:d7:ad:b7:92:76:70:87:be:61:
6f:3d:88:ca:dc:4e:95:e1:6e:5c:fb:56:e7:36:e4:
25:33:d7:16:26:47:7d:73:56:60:51:34:0d:84:f0:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:10:B2:88:72:DD:CD:5D:83:7C:58:17:E8:1E:19:3B:26:B1:4F
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9c:91:ec:cd:fc:1e:b4:2d:0b:50:dd:07:db:fe:fe:25:01:
d4:47:30:79:d0:e7:e2:41:b4:a1:a6:6c:45:d5:dd:9e:f0:b0:
30:9e:ff:e4:e6:48:ae:c5:85:00:7a:35:40:1a:17:18:7c:21:
2c:19:2f:75:a7:be:a1:b4:2a:80:67:15:07:8d:4d:dd:a1:8b:
47:2b:7c:de:3d:68:2b:d0:d2:df:cb:9e:3b:96:f1:ed:43:57:
9a:b5:a1:a1:17:30:ee:d0:de:e1:cb:22:43:8b:f3:52:37:a0:
af:ad:81:81:ec:ae:71:e7:a0:b0:66:c0:1a:fd:4e:56:ab:51:
e1:21:bc:29:e2:49:f6:0a:16:1c:02:69:7d:64:5e:16:de:b2:
ef:46:1f:a2:39:0e:07:78:77:75:42:27:1d:2d:d1:b5:02:e4:
4d:83:d7:8f:e0:89:40:4b:2a:13:33:32:a9:65:84:a7:75:8b:
48:00:99:c0:b1:df:9b:13:f7:27:9c:2a:9a:80:56:6f:8b:0b:
5e:c2:f5:e2:1e:7c:ac:ed:a7:61:be:a2:4e:a5:21:61:dc:b0:
02:9d:45:ec:6f:44:1f:24:16:b1:2d:dc:de:ef:dd:ff:6e:fb:
6e:77:e5:fd:17:bf:bf:3a:71:30:6c:81:e4:6f:63:61:11:90:
26:57:0d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoC/qQlSTDhHfvXQWsrrG1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3
ZTE5ZWQwHhcNMjUxMDIwMTkwMDMzWhcNMjUxMDIxMTkwMDMzWjAzMTEwLwYDVQQD
EygzMzEzMTBiMjg4NzJkZGNkNWQ4MzdjNTgxN2U4MWUxOTNiMjZiMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4mNYcWxuUBaSI0iFf59+YmGCIpN
iYKY/iXcfqUrFQoihlDFoK/UEvPmQkYO+uQtnCHjzQC78axbNSO0vMLL2zA4+KLw
F7KbyPoCM22qlxP7oIHc5qc7m3g5TAisYopJ6ngLdw1EWWFAB6s3K7bnSGtLjqwb
bHaTzSF2NOg6UeD5kYr+CY7yLeut5y1jlevvlUq30bUVLAq6QYgDN029gkY2Yfed
CWIM0oo6R7q+djfqfbPNUzCUOelaz2YEZPOj3CvVdcDFpHkqRTLk+4dljTA5wbIU
VkDXrbeSdnCHvmFvPYjK3E6V4W5c+1bnNuQlM9cWJkd9c1ZgUTQNhPAJhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMTELKIct3NXYN8WBfoHhk7JrFPMB8GA1UdIwQY
MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt
OTJkNDE4ZThkOWE1LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1
LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZyR7M38
HrQtC1DdB9v+/iUB1EcwedDn4kG0oaZsRdXdnvCwMJ7/5OZIrsWFAHo1QBoXGHwh
LBkvdae+obQqgGcVB41N3aGLRyt83j1oK9DS38ueO5bx7UNXmrWhoRcw7tDe4csi
Q4vzUjegr62BgeyuceegsGbAGv1OVqtR4SG8KeJJ9goWHAJpfWReFt6y70YfojkO
B3h3dUInHS3RtQLkTYPXj+CJQEsqEzMyqWWEp3WLSACZwLHfmxP3J5wqmoBWb4sL
XsL14h58rO2nYb6iTqUhYdywAp1F7G9EHyQWsS3c3u/d/277bnfl/Re/vzpxMGyB
5G9jYRGQJlcNGg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:31 2025 by rpki-client