Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: yC+IYCYq4i7ouLE5LHABjl8BL14eAi6WujCPWZm2Lvk=
Subject key identifier: 9B:40:D2:56:D1:53:F9:CC:5F:9C:A2:32:23:06:6A:35:0D:97:92:19
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 0199FDD9E9C12763025A460CB6F613B59E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 0B3B
Signing time: Sun 19 Oct 2025 19:02:20 +0000
Manifest this update: Sun 19 Oct 2025 19:02:20 +0000
Manifest next update: Mon 20 Oct 2025 19:02:20 +0000
Files and hashes: 1: 1ILl-_jBl8vTjilNwWyLb_6kN84.roa (hash: ecF4kJW8L9z29VWA5l2Xp4iuCOJ3lYvBbDFUMxXyKfo=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: l8ued69OkYAXLkCOXVXT20ZTcnP+1zynS2bC4L4FrnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e9:c1:27:63:02:5a:46:0c:b6:f6:13:b5:9e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Oct 19 19:02:20 2025 GMT
Not After : Oct 20 19:02:20 2025 GMT
Subject: CN=9b40d256d153f9cc5f9ca23223066a350d979219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:ce:f5:7f:85:1b:a9:a6:d1:d9:f3:1b:d3:
99:5e:f4:05:ef:2a:4b:a1:3a:53:66:ec:9c:55:41:
52:3a:a9:19:8b:aa:bc:7a:96:87:74:16:91:28:97:
3a:d3:e4:5b:31:3d:17:3a:19:cf:d3:82:b3:95:cd:
9e:50:b2:5e:4d:44:9f:4d:b7:f0:1d:fd:09:8b:f6:
92:5f:90:c8:60:9c:05:22:05:54:7a:18:88:d5:af:
07:16:62:a9:05:9b:ee:8e:ce:1f:5c:1d:bd:a6:4c:
d8:3d:77:12:57:9a:3e:2f:c8:c2:8e:6c:0d:b6:16:
d0:56:70:a4:49:4e:63:4f:ef:70:bc:af:6b:4d:6d:
d5:a0:82:ba:75:ca:51:21:f2:fc:f4:dc:ea:2f:d9:
3d:46:c2:7d:a6:fb:a2:f7:12:04:67:0d:1c:36:dc:
56:2a:64:4e:e2:6c:e4:8d:76:e9:2a:78:11:a6:f9:
79:58:d4:fa:88:6e:7b:bc:86:33:73:bb:80:f3:64:
b4:dc:a4:f9:cf:2b:12:c9:21:2d:87:9e:93:f4:f4:
fb:cf:d1:ba:28:19:bb:5d:e7:cf:f4:51:d7:0f:c6:
3a:55:61:e9:76:85:73:f2:98:41:07:35:b6:a8:7b:
c4:10:3d:d5:3a:2a:64:24:9a:e6:18:61:80:37:4d:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:D2:56:D1:53:F9:CC:5F:9C:A2:32:23:06:6A:35:0D:97:92:19
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:de:93:9a:74:91:bd:0b:86:c9:7e:c8:ff:ef:f9:e0:38:84:
4a:14:6f:8b:0e:6f:35:de:ad:1b:ba:ed:6e:f1:e0:d6:2c:ff:
e4:6b:cc:42:2f:aa:44:67:54:93:58:70:47:7b:58:37:76:ec:
b1:a2:5a:d3:92:7a:73:3f:24:ed:7a:6b:d0:7f:4b:72:22:17:
77:bc:33:68:97:31:73:ec:5a:5d:20:94:1f:8e:67:b7:20:c1:
b3:15:6f:b9:ce:fc:4f:ab:c4:92:e5:02:28:8d:ed:59:d3:96:
e3:7e:40:b5:a2:38:30:7e:76:1b:75:64:8f:19:d4:4a:17:5c:
57:44:15:cf:b3:88:3e:8d:96:56:f0:f6:7c:1e:c6:23:1b:f3:
e0:67:3e:5a:5d:01:24:15:e9:84:c8:47:88:78:45:42:96:bf:
e9:55:e4:e0:3d:21:d6:f4:23:38:d6:9b:6c:b4:7d:ed:6b:6b:
ee:3b:e5:72:d1:7c:fb:1f:d1:56:14:16:05:bd:50:bb:1f:c3:
ea:8e:30:0d:d8:1a:18:e3:48:96:fc:c7:1e:0a:51:5d:a7:0c:
cf:fd:df:63:e1:e6:19:14:c3:39:9d:cc:7b:c0:14:a9:fc:4f:
44:11:27:80:62:c5:39:e3:ef:54:fb:01:29:f8:48:57:16:c8:
24:1f:a7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92enBJ2MCWkYMtvYTtZ53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTVjM2FjZTM2NmRiNDFiY2RjMjU2YzVkNWIzYmU0OTBh
NGY3NjEwHhcNMjUxMDE5MTkwMjIwWhcNMjUxMDIwMTkwMjIwWjAzMTEwLwYDVQQD
Eyg5YjQwZDI1NmQxNTNmOWNjNWY5Y2EyMzIyMzA2NmEzNTBkOTc5MjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH3O9X+FG6mm0dnzG9OZXvQF7ypL
oTpTZuycVUFSOqkZi6q8epaHdBaRKJc60+RbMT0XOhnP04Kzlc2eULJeTUSfTbfw
Hf0Ji/aSX5DIYJwFIgVUehiI1a8HFmKpBZvujs4fXB29pkzYPXcSV5o+L8jCjmwN
thbQVnCkSU5jT+9wvK9rTW3VoIK6dcpRIfL89NzqL9k9RsJ9pvui9xIEZw0cNtxW
KmRO4mzkjXbpKngRpvl5WNT6iG57vIYzc7uA82S03KT5zysSySEth56T9PT7z9G6
KBm7XefP9FHXD8Y6VWHpdoVz8phBBzW2qHvEED3VOipkJJrmGGGAN02ErwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtA0lbRU/nMX5yiMiMGajUNl5IZMB8GA1UdIwQY
MBaAFA6Vw6zjZttBvNwlbF1bO+SQpPdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMt
ZjUzZTUxYzA5NzRmLzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMtZjUzZTUxYzA5NzRm
LzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZd6TmnSR
vQuGyX7I/+/54DiEShRviw5vNd6tG7rtbvHg1iz/5GvMQi+qRGdUk1hwR3tYN3bs
saJa05J6cz8k7Xpr0H9LciIXd7wzaJcxc+xaXSCUH45ntyDBsxVvuc78T6vEkuUC
KI3tWdOW435AtaI4MH52G3VkjxnUShdcV0QVz7OIPo2WVvD2fB7GIxvz4Gc+Wl0B
JBXphMhHiHhFQpa/6VXk4D0h1vQjONabbLR97Wtr7jvlctF8+x/RVhQWBb1Qux/D
6o4wDdgaGONIlvzHHgpRXacMz/3fY+HmGRTDOZ3Me8AUqfxPRBEngGLFOePvVPsB
KfhIVxbIJB+nlw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:52 2025 by rpki-client