Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier: 9Kr3UNGAenhFZ3xmbeULxhp5Stg8aJAc438CejWpvpI=
Subject key identifier: A3:0E:DD:A5:BA:74:E6:49:84:2B:94:AD:AF:A1:A9:30:84:24:06:5C
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial: 0199FBEC4264FE9F14901213FBD5090C4E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number: 0422
Signing time: Sun 19 Oct 2025 10:03:08 +0000
Manifest this update: Sun 19 Oct 2025 10:03:08 +0000
Manifest next update: Mon 20 Oct 2025 10:03:08 +0000
Files and hashes: 1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: 8zFGSBgP8SVYjCMgn2kdMUZsyAqWuJH/AcE2u+OMwi8=)
2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:42:64:fe:9f:14:90:12:13:fb:d5:09:0c:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Validity
Not Before: Oct 19 10:03:08 2025 GMT
Not After : Oct 20 10:03:08 2025 GMT
Subject: CN=a30edda5ba74e649842b94adafa1a9308424065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:8e:04:d6:69:2b:b7:bb:bf:85:f4:83:74:
a5:cd:3f:c8:e2:6e:98:92:69:8a:2c:9b:71:0b:02:
63:c8:c4:b1:be:5e:88:53:bd:67:97:23:b5:d6:3f:
69:2c:a9:04:13:99:9e:5b:ed:07:ad:32:1e:29:82:
65:49:f6:e7:73:91:3a:f9:ba:41:59:fb:fd:29:4c:
c5:d3:a5:65:85:1e:35:d2:c6:11:d9:8f:c8:c4:33:
54:b6:25:4b:93:30:49:e0:dc:36:62:92:b3:81:39:
e9:f5:77:03:16:54:3c:66:6f:7f:de:60:37:2f:97:
47:a4:84:1e:fc:0c:27:7b:ef:f8:8b:2e:8d:87:95:
71:8d:7b:e5:6d:2d:a4:f5:37:27:d0:29:0b:76:e4:
3b:9f:80:70:cd:af:46:f4:83:a6:ab:e9:98:86:ef:
3f:2d:57:ee:b8:f9:70:38:8d:b5:1d:2d:50:82:c0:
ac:e6:5b:2b:0f:11:1d:aa:ee:e5:6b:93:44:11:f0:
1e:ec:83:4a:93:77:0e:a4:ef:19:00:24:74:38:b3:
c9:f6:13:3a:3b:b6:3b:1c:c1:7d:9b:6c:97:19:97:
77:ca:0b:4b:00:5f:43:35:5f:81:a0:22:b6:1d:0a:
a4:1d:a1:ba:15:ed:c6:f3:ee:92:10:f8:01:03:14:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:DD:A5:BA:74:E6:49:84:2B:94:AD:AF:A1:A9:30:84:24:06:5C
X509v3 Authority Key Identifier:
keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ee:d3:3e:f2:c0:7a:25:02:8b:aa:c4:5b:8d:9d:73:d2:95:
3a:7c:cd:15:43:ba:b4:8e:50:a3:48:a2:26:56:f1:79:a0:68:
e6:a8:22:79:2d:10:b8:74:10:af:77:aa:c2:6c:a0:02:75:6d:
7d:ff:96:6c:b8:27:db:81:3b:fb:62:0c:4f:c5:ed:c9:d6:f0:
53:07:2b:17:6a:96:84:04:78:6e:2c:b2:19:a9:a5:55:72:c2:
3d:b6:8d:00:56:1c:10:ac:f3:3c:e1:31:e3:e5:e0:92:0b:d8:
4f:b4:97:c7:93:57:dc:d6:54:23:0a:56:43:24:ba:cb:4a:d1:
cf:44:12:20:79:5c:0d:d3:8e:95:63:ef:84:e3:73:03:60:76:
0c:06:a8:46:ff:b4:ec:6e:9d:02:e6:7d:1c:95:53:ff:a0:5d:
a9:ac:c1:37:9f:2b:f8:61:0e:0f:77:a2:75:2b:a4:e3:eb:2d:
f0:d2:0d:19:15:dc:26:56:cf:0b:df:94:ab:17:3f:5e:b9:5e:
76:6d:8f:86:81:b9:ad:97:3c:7c:82:4b:9b:7c:24:ee:67:9c:
95:35:8d:58:80:8a:23:52:fd:5f:c9:d6:45:59:c2:a8:f4:19:
1d:08:51:24:2c:a4:2d:bc:db:23:f0:9a:88:3c:70:d3:cd:cb:
ca:fa:76:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77EJk/p8UkBIT+9UJDE6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0
YjM3NzYwHhcNMjUxMDE5MTAwMzA4WhcNMjUxMDIwMTAwMzA4WjAzMTEwLwYDVQQD
EyhhMzBlZGRhNWJhNzRlNjQ5ODQyYjk0YWRhZmExYTkzMDg0MjQwNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG+OBNZpK7e7v4X0g3SlzT/I4m6Y
kmmKLJtxCwJjyMSxvl6IU71nlyO11j9pLKkEE5meW+0HrTIeKYJlSfbnc5E6+bpB
Wfv9KUzF06VlhR410sYR2Y/IxDNUtiVLkzBJ4Nw2YpKzgTnp9XcDFlQ8Zm9/3mA3
L5dHpIQe/Awne+/4iy6Nh5VxjXvlbS2k9Tcn0CkLduQ7n4Bwza9G9IOmq+mYhu8/
LVfuuPlwOI21HS1QgsCs5lsrDxEdqu7la5NEEfAe7INKk3cOpO8ZACR0OLPJ9hM6
O7Y7HMF9m2yXGZd3ygtLAF9DNV+BoCK2HQqkHaG6Fe3G8+6SEPgBAxQqRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMO3aW6dOZJhCuUra+hqTCEJAZcMB8GA1UdIwQY
MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It
ZDg0NzVmMTg0NjRlLzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl
LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju7TPvLA
eiUCi6rEW42dc9KVOnzNFUO6tI5Qo0iiJlbxeaBo5qgieS0QuHQQr3eqwmygAnVt
ff+WbLgn24E7+2IMT8XtydbwUwcrF2qWhAR4biyyGamlVXLCPbaNAFYcEKzzPOEx
4+XgkgvYT7SXx5NX3NZUIwpWQyS6y0rRz0QSIHlcDdOOlWPvhONzA2B2DAaoRv+0
7G6dAuZ9HJVT/6BdqazBN58r+GEOD3eidSuk4+st8NINGRXcJlbPC9+Uqxc/Xrle
dm2PhoG5rZc8fIJLm3wk7meclTWNWICKI1L9X8nWRVnCqPQZHQhRJCykLbzbI/Ca
iDxw083Lyvp2WA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:43 2025 by rpki-client