Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: pjRPcl7hinU/LGOrR+lZ4wK0DGKRmUcoMjUWwKJ2GEk=
Subject key identifier: 7F:D9:3E:65:2A:38:5C:B0:E2:A7:0D:18:EF:00:7B:3B:67:A3:7E:83
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 0199FF2260EDA41BF1FAC69923A2A25F1708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 01:01:06 +0000
Manifest this update: Mon 20 Oct 2025 01:01:06 +0000
Manifest next update: Tue 21 Oct 2025 01:01:06 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: /fNKy9wTt2GB/hemboYLiMtsXRUwYy2OE4Zvp1LBE6g=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:60:ed:a4:1b:f1:fa:c6:99:23:a2:a2:5f:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Oct 20 01:01:06 2025 GMT
Not After : Oct 21 01:01:06 2025 GMT
Subject: CN=7fd93e652a385cb0e2a70d18ef007b3b67a37e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:45:8a:6b:cb:38:ba:a8:c0:06:da:41:01:
1b:3d:b4:22:28:6e:d8:70:28:c8:32:ec:33:9d:54:
cd:b8:d4:c7:73:45:b3:f2:0f:44:06:63:62:52:6f:
8a:fe:57:71:ae:35:b9:01:b8:e5:80:38:b8:d9:1c:
d3:18:f8:ea:8f:83:f6:1d:f7:f4:89:e2:b6:3e:e0:
9e:e1:5a:6d:88:87:6e:ae:a0:33:c3:f5:75:16:5b:
94:c6:95:50:7c:28:ac:f7:9e:70:40:8f:47:f1:b7:
ac:06:a2:16:bc:7d:65:59:76:50:c1:29:45:c3:41:
71:fc:ab:4a:9e:ba:0f:fd:2e:aa:f6:bb:47:72:21:
c2:86:ed:7f:70:55:8e:5f:e0:da:98:86:a8:c3:7d:
88:5e:4d:46:24:39:82:2f:7c:fd:31:63:99:40:1a:
48:5d:14:da:3f:75:81:41:a7:4c:a9:b4:55:73:d4:
94:4e:b1:ae:79:f4:21:9a:9b:96:aa:e7:50:63:a2:
89:33:96:e1:5d:bb:6f:32:9b:94:21:1c:1f:f8:93:
63:5f:ed:ec:7c:b4:41:24:ee:10:62:98:a6:60:ed:
d4:c2:73:d7:ea:9d:8f:d2:77:99:94:cf:6c:c8:b7:
ca:3e:b3:f9:23:9f:78:fc:0a:2d:64:4c:bc:82:3c:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:3E:65:2A:38:5C:B0:E2:A7:0D:18:EF:00:7B:3B:67:A3:7E:83
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f3:8e:03:5f:21:db:41:f5:fc:3c:cd:8c:92:b0:19:7f:bc:
c6:74:8b:41:e0:d0:f7:a4:3f:da:89:1f:7d:35:d4:3d:44:d0:
8e:8d:9e:1f:91:85:9a:9b:bf:28:57:b8:b5:31:c5:55:86:a0:
36:86:fb:23:09:6f:c5:4f:99:a5:c1:5a:90:61:aa:91:03:e0:
ca:af:fd:01:ca:9a:e1:a7:a6:1d:d5:ef:95:d1:7e:4d:69:f1:
34:91:5c:8e:8c:a5:fd:7f:2e:1a:44:a3:33:1d:f8:66:78:de:
14:55:64:c8:a5:7c:34:e1:8b:5a:a1:0b:2c:15:eb:4a:e9:77:
ac:d7:00:20:55:ce:c9:de:da:64:29:bc:a5:c7:51:13:70:98:
3a:2b:7b:08:df:54:95:b9:58:27:d5:6d:b6:36:a4:cd:46:3f:
08:b6:d4:28:dc:b0:2b:84:6d:f0:60:2b:89:63:76:8e:18:82:
32:4e:88:76:3a:aa:18:eb:46:a2:3c:71:03:a0:e8:40:e4:46:
2b:95:fb:f1:d4:b9:74:0d:ac:8d:14:dd:d8:5b:33:85:3c:41:
14:11:78:b4:56:2e:66:42:5c:59:41:61:5e:9e:22:52:a3:c6:
0c:f1:b3:57:8f:8b:e4:b7:c9:31:26:33:13:4c:31:e2:af:a5:
d9:6f:90:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/ImDtpBvx+saZI6KiXxcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZGRhMmM2MDc0YzU2MjQxZjVjN2UwNjBjYWNjYjY1N2Y2
NGU5MWMwHhcNMjUxMDIwMDEwMTA2WhcNMjUxMDIxMDEwMTA2WjAzMTEwLwYDVQQD
Eyg3ZmQ5M2U2NTJhMzg1Y2IwZTJhNzBkMThlZjAwN2IzYjY3YTM3ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth9FimvLOLqowAbaQQEbPbQiKG7Y
cCjIMuwznVTNuNTHc0Wz8g9EBmNiUm+K/ldxrjW5AbjlgDi42RzTGPjqj4P2Hff0
ieK2PuCe4VptiIdurqAzw/V1FluUxpVQfCis955wQI9H8besBqIWvH1lWXZQwSlF
w0Fx/KtKnroP/S6q9rtHciHChu1/cFWOX+DamIaow32IXk1GJDmCL3z9MWOZQBpI
XRTaP3WBQadMqbRVc9SUTrGuefQhmpuWqudQY6KJM5bhXbtvMpuUIRwf+JNjX+3s
fLRBJO4QYpimYO3UwnPX6p2P0neZlM9syLfKPrP5I594/AotZEy8gjxg+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/ZPmUqOFyw4qcNGO8Aeztno36DMB8GA1UdIwQY
MBaAFA7dosYHTFYkH1x+Bgysy2V/ZOkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iYTQ1OWYtODQ2Zi00N2E5LWE2MjUt
NjcxMTU4YTYzYzIzLzEvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iYTQ1OWYtODQ2Zi00N2E5LWE2MjUtNjcxMTU4YTYzYzIz
LzEvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfOOA18h
20H1/DzNjJKwGX+8xnSLQeDQ96Q/2okffTXUPUTQjo2eH5GFmpu/KFe4tTHFVYag
Nob7IwlvxU+ZpcFakGGqkQPgyq/9Acqa4aemHdXvldF+TWnxNJFcjoyl/X8uGkSj
Mx34ZnjeFFVkyKV8NOGLWqELLBXrSul3rNcAIFXOyd7aZCm8pcdRE3CYOit7CN9U
lblYJ9VttjakzUY/CLbUKNywK4Rt8GAriWN2jhiCMk6IdjqqGOtGojxxA6DoQORG
K5X78dS5dA2sjRTd2FszhTxBFBF4tFYuZkJcWUFhXp4iUqPGDPGzV4+L5LfJMSYz
E0wx4q+l2W+Qaw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:38 2025 by rpki-client