Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: RFcgvkybAm2xJviwHR34mne8ViuS7kTsnGkV8ZJrRBU=
Subject key identifier: 2A:3D:D1:D0:DD:E0:74:A7:D9:4E:D8:C5:BC:10:28:9B:BD:A2:62:FB
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 0199FC2163D73BC1478C1C131B6EB341A038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 0FD6
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: 2EllyuY+pgivq2wsDvOYa5oqexjOtdgp8xir/8SQTRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:63:d7:3b:c1:47:8c:1c:13:1b:6e:b3:41:a0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=2a3dd1d0dde074a7d94ed8c5bc10289bbda262fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:84:f7:5c:23:c0:46:88:5e:2e:a0:ab:22:
92:51:8f:8c:a3:12:3e:c9:12:69:ab:67:cc:77:78:
0b:bc:39:9d:7d:cd:82:dd:20:88:7c:c2:e8:cd:29:
e6:93:96:91:7f:fd:21:da:e7:cd:7f:ba:79:13:1a:
85:ff:34:91:01:f4:86:56:cf:9b:e4:fa:3d:b0:81:
c5:2c:aa:cc:30:bd:18:c6:13:57:82:0f:ad:92:af:
65:be:e6:5a:f8:16:a1:99:58:b0:d7:bb:23:f7:0e:
ae:d8:ff:68:4b:2a:9f:5d:f8:58:27:67:86:0e:b4:
0c:35:12:61:25:2b:c1:4e:3c:a5:c3:37:41:c2:5a:
86:75:3d:66:df:6d:23:59:5e:6c:41:c4:34:f8:7e:
f2:34:21:a8:21:f3:b6:72:b6:9a:dd:8e:93:a3:d9:
cf:8e:c1:a1:d6:3d:c8:20:e5:43:82:4f:ec:d8:27:
c4:43:9d:1b:d8:5b:73:2a:0c:77:15:24:0c:c5:10:
4a:e0:15:bd:a2:f4:32:85:a0:15:c2:90:79:c3:09:
8b:50:aa:bb:ce:cf:64:41:68:bf:40:12:10:c9:90:
0d:9b:6d:d2:49:31:67:ee:23:aa:2c:53:f8:30:3c:
0d:ae:ea:bb:d2:96:1d:cd:3f:e3:ea:ae:87:8d:24:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:D1:D0:DD:E0:74:A7:D9:4E:D8:C5:BC:10:28:9B:BD:A2:62:FB
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:2e:b6:08:4e:46:f0:22:22:e4:5c:b9:fe:33:37:8a:06:1a:
ec:b2:7b:36:d3:b6:e9:22:18:d1:35:51:ac:5c:26:a4:67:1c:
df:2f:63:7b:fd:15:75:76:ce:3c:a7:76:6f:ec:84:45:c4:4f:
76:06:7f:0f:4b:f6:12:f9:12:0e:de:1d:65:de:64:25:5b:1f:
30:0d:d2:e4:af:c8:1c:f0:d3:04:2e:da:15:00:1f:18:fe:1f:
c9:61:c3:c0:e8:70:dd:e9:f3:55:a1:74:89:cd:11:28:d1:82:
a1:31:7c:1d:20:a7:38:72:e1:42:7c:fc:9b:7e:07:8e:08:d9:
f0:de:63:e1:7f:6b:24:69:01:22:f6:bf:61:4b:68:85:da:46:
ac:12:a3:97:dc:3d:77:8d:de:02:b1:2a:f5:64:c9:d8:92:e9:
3a:ec:f8:99:36:7a:96:93:c2:44:24:12:0d:59:b8:59:a9:e5:
33:08:c8:dc:f3:40:1b:0e:48:f9:2b:7e:f8:65:e5:ad:dd:0c:
95:1d:62:63:0f:18:2b:6d:fd:ed:41:b4:e2:60:a1:a2:64:f0:
14:3a:7b:ce:e9:a5:35:22:f9:cd:11:67:fe:44:0c:33:cf:7b:
df:41:74:60:12:5f:1f:c1:37:72:f2:45:c8:c5:b8:79:29:33:
fb:b9:9e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWPXO8FHjBwTG26zQaA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzJlYjhmODAxNWViMWJjMjllYTMxNjJmODNlNmFjZWRi
YjQyN2UwHhcNMjUxMDE5MTEwMTEwWhcNMjUxMDIwMTEwMTEwWjAzMTEwLwYDVQQD
EygyYTNkZDFkMGRkZTA3NGE3ZDk0ZWQ4YzViYzEwMjg5YmJkYTI2MmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzeE91wjwEaIXi6gqyKSUY+MoxI+
yRJpq2fMd3gLvDmdfc2C3SCIfMLozSnmk5aRf/0h2ufNf7p5ExqF/zSRAfSGVs+b
5Po9sIHFLKrMML0YxhNXgg+tkq9lvuZa+BahmViw17sj9w6u2P9oSyqfXfhYJ2eG
DrQMNRJhJSvBTjylwzdBwlqGdT1m320jWV5sQcQ0+H7yNCGoIfO2craa3Y6To9nP
jsGh1j3IIOVDgk/s2CfEQ50b2FtzKgx3FSQMxRBK4BW9ovQyhaAVwpB5wwmLUKq7
zs9kQWi/QBIQyZANm23SSTFn7iOqLFP4MDwNruq70pYdzT/j6q6HjSSS2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCo90dDd4HSn2U7YxbwQKJu9omL7MB8GA1UdIwQY
MBaAFHRy64+AFesbwp6jFi+D5qztu0J+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82NTVlMjgtMzM5MS00MGE3LTg4Y2Et
MWJmZmRhMzgyZWJlLzEvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82NTVlMjgtMzM5MS00MGE3LTg4Y2EtMWJmZmRhMzgyZWJl
LzEvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0S62CE5G
8CIi5Fy5/jM3igYa7LJ7NtO26SIY0TVRrFwmpGcc3y9je/0VdXbOPKd2b+yERcRP
dgZ/D0v2EvkSDt4dZd5kJVsfMA3S5K/IHPDTBC7aFQAfGP4fyWHDwOhw3enzVaF0
ic0RKNGCoTF8HSCnOHLhQnz8m34HjgjZ8N5j4X9rJGkBIva/YUtohdpGrBKjl9w9
d43eArEq9WTJ2JLpOuz4mTZ6lpPCRCQSDVm4WanlMwjI3PNAGw5I+St++GXlrd0M
lR1iYw8YK2397UG04mChomTwFDp7zumlNSL5zRFn/kQMM89730F0YBJfH8E3cvJF
yMW4eSkz+7meAw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:36 2025 by rpki-client