Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: vm2IRJ38nVpo0QHoZnxnt66fqcaP/JFLg+oJOcPJrZ4=
Subject key identifier: D0:B8:F4:F1:B5:0B:0E:F4:94:C3:BA:4E:DC:46:90:D6:D4:78:2C:71
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 0199FC58FD5E063A15C7394D6169BF46B901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 1398
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: hjd0ILOmn2JoYMmgOVd9hrwIWVZuic/zsZO3z3v2XWs=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fd:5e:06:3a:15:c7:39:4d:61:69:bf:46:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=d0b8f4f1b50b0ef494c3ba4edc4690d6d4782c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:fc:fe:2a:1c:bd:1d:6b:38:56:da:88:ad:
fb:e1:1d:49:c1:d6:40:c7:ce:45:4d:16:cc:b0:64:
85:39:14:6b:84:6e:bf:a9:25:0e:d4:2c:a2:53:32:
75:96:c3:a4:a4:48:53:b9:95:38:64:57:b0:f2:d1:
6a:00:4c:cb:41:66:72:5c:98:70:00:cb:c3:74:ae:
14:9d:c4:9a:bd:d6:fb:f1:83:95:48:2b:99:28:95:
85:5e:89:92:40:22:69:7b:fa:b6:94:d1:10:f2:b8:
56:30:9f:70:42:cd:85:3d:22:6a:72:3e:bc:9b:4d:
9f:e1:60:33:9e:4e:95:55:11:15:0b:70:80:7e:e0:
21:93:9d:05:1c:a8:90:a9:66:4e:0b:5a:43:bd:7e:
50:30:ee:9f:e5:54:cd:97:89:7d:1b:b4:35:49:4c:
5c:b3:0c:b8:82:70:83:02:27:47:4c:68:44:93:bd:
8e:7a:4b:bb:6b:7b:6e:44:6b:14:25:c1:71:a6:d1:
83:77:d1:a8:8e:04:de:66:d8:21:aa:46:98:bb:04:
99:8c:d6:51:38:17:86:ab:92:d6:ca:fa:65:a8:98:
a2:ab:a8:7c:8e:25:bc:55:31:ca:17:7a:e3:6f:9d:
fb:8b:ae:09:56:c7:c9:d5:fd:35:4d:d0:08:00:9d:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:F4:F1:B5:0B:0E:F4:94:C3:BA:4E:DC:46:90:D6:D4:78:2C:71
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e2:87:31:c6:47:bc:8a:64:99:31:49:69:97:88:82:6e:fc:
1e:7a:ac:b9:81:86:ee:6e:50:98:7e:fe:11:fb:cc:2b:87:bd:
fc:67:58:b6:95:4c:e3:31:18:f7:dd:d0:41:7f:c5:1e:2c:8b:
5b:e0:44:da:a2:d0:87:fa:f6:79:1b:3b:5b:de:25:56:6d:47:
47:f4:b0:dc:db:4f:38:9b:4b:de:dd:ab:03:ad:b7:88:b7:44:
ce:37:44:c7:2a:a7:68:f4:b8:1c:57:94:c3:02:bf:71:f8:93:
6d:dc:f4:b3:b9:be:67:b7:25:65:04:8c:bf:9a:49:e6:98:fc:
c5:e7:9c:cf:e2:e6:aa:7d:3c:86:66:98:9b:3e:28:f2:3a:49:
97:fd:03:6d:a7:9c:16:69:87:87:00:b2:e2:6b:c8:b0:53:48:
4a:5f:de:73:67:77:cc:14:4e:25:e3:89:db:99:69:d4:22:97:
d8:c3:53:a9:9a:57:9f:70:47:9d:0a:10:73:f4:d8:e1:39:af:
24:24:21:c6:90:98:62:b8:76:f5:2a:f4:aa:d1:79:16:1d:95:
95:8d:8b:38:a2:57:ba:f5:98:34:7c:78:74:cd:4e:f5:30:44:
9e:76:1c:da:e6:ab:98:03:86:cf:d4:a6:67:06:e6:42:d1:80:
3a:9b:2b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WP1eBjoVxzlNYWm/RrkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3
Mjg4NjUwHhcNMjUxMDE5MTIwMTU0WhcNMjUxMDIwMTIwMTU0WjAzMTEwLwYDVQQD
EyhkMGI4ZjRmMWI1MGIwZWY0OTRjM2JhNGVkYzQ2OTBkNmQ0NzgyYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDT8/iocvR1rOFbaiK374R1JwdZA
x85FTRbMsGSFORRrhG6/qSUO1CyiUzJ1lsOkpEhTuZU4ZFew8tFqAEzLQWZyXJhw
AMvDdK4UncSavdb78YOVSCuZKJWFXomSQCJpe/q2lNEQ8rhWMJ9wQs2FPSJqcj68
m02f4WAznk6VVREVC3CAfuAhk50FHKiQqWZOC1pDvX5QMO6f5VTNl4l9G7Q1SUxc
swy4gnCDAidHTGhEk72Oeku7a3tuRGsUJcFxptGDd9GojgTeZtghqkaYuwSZjNZR
OBeGq5LWyvplqJiiq6h8jiW8VTHKF3rjb537i64JVsfJ1f01TdAIAJ0fyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC49PG1Cw70lMO6TtxGkNbUeCxxMB8GA1UdIwQY
MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt
ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj
LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1OKHMcZH
vIpkmTFJaZeIgm78HnqsuYGG7m5QmH7+EfvMK4e9/GdYtpVM4zEY993QQX/FHiyL
W+BE2qLQh/r2eRs7W94lVm1HR/Sw3NtPOJtL3t2rA623iLdEzjdExyqnaPS4HFeU
wwK/cfiTbdz0s7m+Z7clZQSMv5pJ5pj8xeecz+Lmqn08hmaYmz4o8jpJl/0Dbaec
FmmHhwCy4mvIsFNISl/ec2d3zBROJeOJ25lp1CKX2MNTqZpXn3BHnQoQc/TY4Tmv
JCQhxpCYYrh29Sr0qtF5Fh2VlY2LOKJXuvWYNHx4dM1O9TBEnnYc2uarmAOGz9Sm
ZwbmQtGAOpsr6A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:52 2025 by rpki-client