Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File: dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier: r8BE9/h+40X0M2l/IUh7BQ7AIYIjWEAXZFZr0NLn7gU=
Subject key identifier: 4A:47:55:5D:BF:F1:CB:27:7D:6C:2E:64:E8:E8:80:FF:84:AC:4B:5D
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer: /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial: 0199FC2141C416A895D3E1746FAD6067BED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: Rw3BYoyXYSEo6V5vN0qo3508qkM.roa (hash: sKlzeUwowKBMHyUl3VaDBvqX0srdSepcxCjN2qsXkZI=)
2: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: ErlheLGcOA/qM/Uo5Liyo+wUlbLQtNgTe0px5hZ7otQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:41:c4:16:a8:95:d3:e1:74:6f:ad:60:67:be:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=4a47555dbff1cb277d6c2e64e8e880ff84ac4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:ae:aa:55:2b:69:47:9a:f1:61:18:26:bb:
51:78:72:a1:88:64:2d:39:36:0d:7d:4c:bd:8a:48:
3c:f7:b7:db:c0:93:46:b0:ce:5e:1b:f9:4a:0c:6b:
aa:57:7f:61:e2:f2:ad:aa:92:b0:f0:46:e4:c3:53:
c0:96:1c:59:f0:5b:1e:39:56:c8:f3:8f:b6:15:68:
53:36:f1:4b:0d:4d:9e:48:4c:1e:25:3a:f3:61:db:
0c:1a:a3:85:3f:e8:33:03:61:0e:90:2a:ed:fd:25:
84:26:e2:5d:ce:2a:be:66:ab:8a:6c:78:fc:41:9b:
c0:1e:60:f6:2c:dd:36:b8:b6:4e:c1:03:a6:5e:94:
b8:0d:5a:56:f8:d0:a8:1b:ad:42:93:d1:7f:04:37:
66:46:07:d2:b9:e8:9e:97:d5:24:46:92:1f:d0:39:
42:74:c2:4f:c6:cd:ac:7e:64:bf:01:1e:19:ff:2e:
0e:b2:4f:0d:6c:6a:ba:39:61:41:b1:0e:36:e9:c4:
e1:67:ea:44:7c:9e:a3:1f:48:34:4e:23:00:42:4a:
cd:3b:9a:b0:68:bc:db:d4:20:2d:25:a8:1b:d5:15:
0f:68:e7:0a:84:19:88:a8:8b:81:65:6f:20:d5:2b:
1a:11:ac:2a:81:e0:87:66:1e:2f:05:22:c6:67:47:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:47:55:5D:BF:F1:CB:27:7D:6C:2E:64:E8:E8:80:FF:84:AC:4B:5D
X509v3 Authority Key Identifier:
keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:d5:fd:79:ec:1e:9b:d7:c2:dc:b3:90:73:99:bf:00:fe:
f5:db:8b:e3:4b:81:bb:11:ea:ed:01:b2:57:13:8f:c3:48:7a:
09:e3:ec:14:54:6e:fb:a2:34:72:72:10:d2:07:8d:46:af:c9:
f8:54:3f:3b:02:c6:2f:b1:bc:72:9f:cd:ef:99:5f:50:97:2f:
f3:ed:b0:61:1e:ff:60:c3:d1:03:62:d2:87:8c:5f:ea:83:41:
5b:79:41:b5:ec:d9:28:13:c9:ae:4b:c1:80:cb:c7:e5:47:1a:
2f:c1:f6:2a:1a:d8:aa:0b:63:b3:ed:14:d1:0d:d4:7e:88:57:
67:be:07:97:a0:07:d1:8f:ec:43:47:84:44:4f:54:87:61:cb:
85:62:c8:05:c3:c4:65:8f:f9:32:09:6c:ff:f8:fd:ae:46:f3:
4b:35:c5:76:cf:38:91:98:f5:3c:cb:b9:6b:56:2b:5d:07:28:
38:d5:1a:ca:69:2f:4f:59:aa:f2:52:ad:72:f8:b8:b3:f1:08:
24:77:7a:ca:32:da:c6:e9:ef:1f:89:29:0a:61:c0:f5:1c:e1:
d7:51:9d:e0:62:81:ac:c6:bf:33:22:1f:4e:58:2a:a6:56:5d:
77:52:35:bc:81:fa:90:2e:82:ee:da:98:de:23:7a:e6:a3:66:
3a:4e:4a:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUHEFqiV0+F0b61gZ77UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OTc2ZTczNzAzOWE2OTg2NzJmZTk1MjRhZGQzMzdkMWZm
NTJjZmQwHhcNMjUxMDE5MTEwMTAxWhcNMjUxMDIwMTEwMTAxWjAzMTEwLwYDVQQD
Eyg0YTQ3NTU1ZGJmZjFjYjI3N2Q2YzJlNjRlOGU4ODBmZjg0YWM0YjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKyuqlUraUea8WEYJrtReHKhiGQt
OTYNfUy9ikg897fbwJNGsM5eG/lKDGuqV39h4vKtqpKw8Ebkw1PAlhxZ8FseOVbI
84+2FWhTNvFLDU2eSEweJTrzYdsMGqOFP+gzA2EOkCrt/SWEJuJdziq+ZquKbHj8
QZvAHmD2LN02uLZOwQOmXpS4DVpW+NCoG61Ck9F/BDdmRgfSueiel9UkRpIf0DlC
dMJPxs2sfmS/AR4Z/y4Osk8NbGq6OWFBsQ426cThZ+pEfJ6jH0g0TiMAQkrNO5qw
aLzb1CAtJagb1RUPaOcKhBmIqIuBZW8g1SsaEawqgeCHZh4vBSLGZ0eXywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpHVV2/8csnfWwuZOjogP+ErEtdMB8GA1UdIwQY
MBaAFHaXbnNwOaaYZy/pUkrdM30f9Sz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBkdWMzQTVwcGhuTC1sU1N0MHpmUl8xTFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NzcxYzUtMjZmNi00YzdkLTk4NTEt
ZjUxODllYjEzYTE3LzEvZHBkdWMzQTVwcGhuTC1sU1N0MHpmUl8xTFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80NzcxYzUtMjZmNi00YzdkLTk4NTEtZjUxODllYjEzYTE3
LzEvZHBkdWMzQTVwcGhuTC1sU1N0MHpmUl8xTFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkubV/Xns
HpvXwtyzkHOZvwD+9duL40uBuxHq7QGyVxOPw0h6CePsFFRu+6I0cnIQ0geNRq/J
+FQ/OwLGL7G8cp/N75lfUJcv8+2wYR7/YMPRA2LSh4xf6oNBW3lBtezZKBPJrkvB
gMvH5UcaL8H2KhrYqgtjs+0U0Q3UfohXZ74Hl6AH0Y/sQ0eERE9Uh2HLhWLIBcPE
ZY/5Mgls//j9rkbzSzXFds84kZj1PMu5a1YrXQcoONUaymkvT1mq8lKtcvi4s/EI
JHd6yjLaxunvH4kpCmHA9Rzh11Gd4GKBrMa/MyIfTlgqplZdd1I1vIH6kC6C7tqY
3iN65qNmOk5K3Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:04 2025 by rpki-client