Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
File: dLOekBkiWjsP_gWoNW6-8zwnvpc.mft (raw, json)
Hash identifier: v+drQyEOUWYtCJwb7FYp49BM8r5n4j72/4yP9rzG8h4=
Subject key identifier: 2B:87:CC:A5:E1:50:EE:4C:B6:60:57:74:88:C3:AE:75:BF:CC:5C:A8
Authority key identifier: 74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
Certificate issuer: /CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Certificate serial: 0199FFC89891BD87A1CB5A7818F4E125CDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
Manifest number: 06D7
Signing time: Mon 20 Oct 2025 04:02:40 +0000
Manifest this update: Mon 20 Oct 2025 04:02:40 +0000
Manifest next update: Tue 21 Oct 2025 04:02:40 +0000
Files and hashes: 1: ZRVv1QEy1kLLZIQQzKY3v_cBQvM.roa (hash: dP4rVEZl+sj+rbeXk/M+iHEaNgIv2c4UoqRTeljUbU8=)
2: dLOekBkiWjsP_gWoNW6-8zwnvpc.crl (hash: CpnTizsuijmJaJrkBuaq0XkiZqB29qzKO7yLluTPkpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:98:91:bd:87:a1:cb:5a:78:18:f4:e1:25:cd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Validity
Not Before: Oct 20 04:02:40 2025 GMT
Not After : Oct 21 04:02:40 2025 GMT
Subject: CN=2b87cca5e150ee4cb660577488c3ae75bfcc5ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:15:b6:97:66:ec:ac:0b:9f:c4:7e:93:9e:
b3:4b:0f:c5:40:a7:a4:1a:97:3f:43:2e:25:64:08:
9d:b3:f5:b3:13:ed:35:37:70:9a:6a:1e:4d:1a:1a:
19:2e:42:48:ed:71:48:1a:8d:a3:0a:e8:3d:a5:9d:
1a:79:7b:03:fd:c4:1c:83:dd:e9:7e:54:b0:30:89:
ad:36:3f:d4:85:8c:51:ef:45:96:d4:ec:54:a4:57:
61:15:66:6e:c2:ab:a3:ef:b7:4e:51:58:9f:a0:0e:
de:52:b2:6a:ad:8e:43:04:11:cf:9b:a9:22:f4:90:
b1:c4:31:63:64:1d:c9:31:3b:0a:20:9e:d1:85:4e:
05:f0:2d:4c:71:50:2f:7f:a0:8b:89:2b:c1:ec:ad:
19:de:93:6f:29:23:3a:7a:a6:d9:77:af:a7:05:37:
d3:0e:93:9f:2c:3f:84:d1:df:14:bb:81:9a:bf:d0:
60:f4:63:a8:fb:2c:d2:b0:f9:e6:22:38:96:bd:f9:
0a:43:25:28:7c:46:02:fb:80:3f:6b:56:f0:61:5b:
89:fe:8d:2c:d2:c7:91:cf:af:49:5d:92:be:75:09:
14:8e:98:e4:e5:ff:fc:07:fa:75:07:1d:88:2a:d3:
3a:4c:d2:06:4c:17:85:03:b3:ba:15:16:c3:97:ad:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:87:CC:A5:E1:50:EE:4C:B6:60:57:74:88:C3:AE:75:BF:CC:5C:A8
X509v3 Authority Key Identifier:
keyid:74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b9:57:ab:db:5d:95:5d:e4:2e:2e:80:40:2b:02:d6:0f:36:
75:05:ea:0d:b5:48:d7:57:84:31:e4:a4:82:07:a6:e3:9d:76:
7f:08:73:e6:89:12:35:d9:a2:09:14:47:73:8f:5a:bb:0d:52:
67:ed:ce:ca:2e:7f:24:b4:a8:2d:a0:7f:ed:8c:21:e3:50:e3:
6e:c0:aa:e5:dc:e3:f0:49:05:3e:99:0f:5f:37:ab:24:8d:e6:
fb:cd:09:33:25:6f:26:51:62:a5:da:9e:0b:39:b0:8c:50:4a:
30:64:e8:2a:f2:4f:9f:fb:f3:89:b2:cd:51:f0:3f:39:8c:85:
f5:b6:00:91:ec:89:07:14:1b:00:b5:87:38:6a:40:d4:3c:6f:
99:0d:ef:a5:f1:ee:c9:e7:f3:cf:c2:b3:b7:bd:67:98:90:4d:
80:24:4c:35:8d:7d:15:52:f4:4b:02:3a:96:82:4f:35:cb:bc:
a0:f0:13:1e:b2:b4:0c:af:90:08:23:71:1e:83:cb:c4:7f:4f:
34:23:22:64:9c:c3:19:d7:a8:6a:92:fc:85:0a:19:e4:86:3d:
ca:60:55:a8:79:e6:7a:70:bc:0e:51:8e:8f:a3:c6:0e:bc:ed:
88:8d:97:3f:8f:8f:b6:c1:d6:dd:d8:76:81:4c:82:56:8c:20:
7a:63:0a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yJiRvYehy1p4GPThJc2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjM5ZTkwMTkyMjVhM2IwZmZlMDVhODM1NmViZWYzM2My
N2JlOTcwHhcNMjUxMDIwMDQwMjQwWhcNMjUxMDIxMDQwMjQwWjAzMTEwLwYDVQQD
EygyYjg3Y2NhNWUxNTBlZTRjYjY2MDU3NzQ4OGMzYWU3NWJmY2M1Y2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tUVtpdm7KwLn8R+k56zSw/FQKek
Gpc/Qy4lZAids/WzE+01N3Caah5NGhoZLkJI7XFIGo2jCug9pZ0aeXsD/cQcg93p
flSwMImtNj/UhYxR70WW1OxUpFdhFWZuwquj77dOUVifoA7eUrJqrY5DBBHPm6ki
9JCxxDFjZB3JMTsKIJ7RhU4F8C1McVAvf6CLiSvB7K0Z3pNvKSM6eqbZd6+nBTfT
DpOfLD+E0d8Uu4Gav9Bg9GOo+yzSsPnmIjiWvfkKQyUofEYC+4A/a1bwYVuJ/o0s
0seRz69JXZK+dQkUjpjk5f/8B/p1Bx2IKtM6TNIGTBeFA7O6FRbDl60QRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuHzKXhUO5MtmBXdIjDrnW/zFyoMB8GA1UdIwQY
MBaAFHSznpAZIlo7D/4FqDVuvvM8J76XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExPZWtCa2lXanNQX2dXb05XNi04endudnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWQ4ODMtZDk5Yy00MTRiLTlhYjEt
ODVhNDkyNmE3MzlkLzEvZExPZWtCa2lXanNQX2dXb05XNi04endudnBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWQ4ODMtZDk5Yy00MTRiLTlhYjEtODVhNDkyNmE3Mzlk
LzEvZExPZWtCa2lXanNQX2dXb05XNi04endudnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLlXq9td
lV3kLi6AQCsC1g82dQXqDbVI11eEMeSkggem4512fwhz5okSNdmiCRRHc49auw1S
Z+3Oyi5/JLSoLaB/7Ywh41DjbsCq5dzj8EkFPpkPXzerJI3m+80JMyVvJlFipdqe
CzmwjFBKMGToKvJPn/vzibLNUfA/OYyF9bYAkeyJBxQbALWHOGpA1DxvmQ3vpfHu
yefzz8Kzt71nmJBNgCRMNY19FVL0SwI6loJPNcu8oPATHrK0DK+QCCNxHoPLxH9P
NCMiZJzDGdeoapL8hQoZ5IY9ymBVqHnmenC8DlGOj6PGDrztiI2XP4+PtsHW3dh2
gUyCVowgemMKBg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:25:02 2025 by rpki-client