Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: 1phKO/OkCrw8A3hgz1m5C8uNhnc6OSO3dYa+pAgbrBs=
Subject key identifier: BE:01:B5:28:44:A5:EC:87:73:9C:29:19:1D:94:FA:E0:B9:2B:76:D0
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 0199FB7CD172954F19881B244FE5B670E920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 0430
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: eBzOyQc2XE/PayOJpUZ87RJoFuODYY3faB+AjgRO8ks=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d1:72:95:4f:19:88:1b:24:4f:e5:b6:70:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=be01b52844a5ec87739c29191d94fae0b92b76d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:e0:a3:3e:fc:6c:bc:14:68:be:17:b3:cd:
dd:3f:6f:4b:3c:ff:ec:de:4d:8c:bd:36:aa:45:c5:
49:db:af:e8:04:39:6a:7f:a1:13:85:17:9c:ba:6e:
a5:55:ab:64:98:0d:ea:47:b0:42:d7:79:7e:69:50:
2b:b9:69:0d:77:ce:c2:11:25:62:1d:70:20:5e:24:
f6:b5:33:a4:27:34:47:36:c8:dc:23:e3:80:55:ce:
03:72:e7:ba:4b:dc:68:ae:da:6a:e1:4c:d2:c5:1f:
fb:60:48:41:49:c7:40:20:01:a1:01:97:df:5f:43:
54:81:a8:fc:41:bf:83:64:6a:b8:13:a4:3b:d5:82:
07:78:02:f2:5d:4c:43:dc:7f:4c:df:1f:0e:60:86:
8a:7d:3a:83:85:03:71:23:7d:ff:a7:c7:81:12:f8:
43:8d:b1:69:72:07:97:c6:5f:b2:a9:04:12:65:9c:
68:15:82:21:2d:d9:78:69:be:98:6a:d3:6a:21:a9:
08:09:52:95:3b:fb:57:ac:88:ee:68:fa:78:31:e5:
c1:56:d4:df:f6:d0:74:7d:ee:a0:72:b8:32:f8:87:
20:6e:a7:8d:67:5a:c4:17:44:c4:d5:33:df:14:fb:
c8:ba:f2:eb:17:f5:c8:04:8a:f4:9d:26:26:5c:23:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:B5:28:44:A5:EC:87:73:9C:29:19:1D:94:FA:E0:B9:2B:76:D0
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:90:69:c5:f2:09:af:da:1b:f2:93:38:c1:4e:60:df:3d:63:
7e:2c:1d:82:12:46:1a:cf:8c:dd:31:f5:01:43:af:33:4a:bf:
de:ca:d0:69:5b:93:5e:8a:d1:a1:78:e6:34:d1:6b:45:0e:3a:
27:b0:bf:54:b1:e6:c6:a0:e7:29:e2:1a:7e:7a:08:ba:c6:7a:
8b:94:bd:29:78:68:5d:b0:80:d9:5a:79:d4:c3:4c:91:28:47:
73:3c:cd:67:a3:4b:e5:ad:de:b5:a9:02:ed:89:c4:6d:25:b2:
ef:74:01:e9:ee:6d:fb:56:8c:f1:25:90:9a:c6:21:66:cf:44:
f1:79:7c:72:18:e0:7d:2a:ce:94:1c:b7:5a:e1:a3:6a:8d:3d:
f0:f9:68:3f:aa:a6:cd:cc:fe:09:47:0c:e9:f1:aa:a6:2b:3c:
e0:1b:5a:07:f0:e9:4b:8e:0e:31:53:97:a1:30:3e:2f:2f:16:
07:a4:28:4f:7b:62:ea:28:e7:97:bb:ab:31:ce:22:eb:3b:e9:
8e:f5:5d:7b:ac:81:7d:30:be:bc:10:8f:85:17:46:64:63:1f:
26:eb:3b:aa:3a:bb:ce:43:15:e4:d3:b1:0d:90:8d:79:77:21:
30:91:4c:e1:1a:49:41:f6:ff:22:c4:9e:7f:05:42:69:a2:47:
56:1a:e8:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNFylU8ZiBskT+W2cOkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNGQ1MGYzOTBjZjk0NWM2ZmE1YjkwMDkwNWI0ZDUxN2Vi
YjA5MWEwHhcNMjUxMDE5MDgwMTI1WhcNMjUxMDIwMDgwMTI1WjAzMTEwLwYDVQQD
EyhiZTAxYjUyODQ0YTVlYzg3NzM5YzI5MTkxZDk0ZmFlMGI5MmI3NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWfgoz78bLwUaL4Xs83dP29LPP/s
3k2MvTaqRcVJ26/oBDlqf6EThRecum6lVatkmA3qR7BC13l+aVAruWkNd87CESVi
HXAgXiT2tTOkJzRHNsjcI+OAVc4Dcue6S9xortpq4UzSxR/7YEhBScdAIAGhAZff
X0NUgaj8Qb+DZGq4E6Q71YIHeALyXUxD3H9M3x8OYIaKfTqDhQNxI33/p8eBEvhD
jbFpcgeXxl+yqQQSZZxoFYIhLdl4ab6YatNqIakICVKVO/tXrIjuaPp4MeXBVtTf
9tB0fe6gcrgy+IcgbqeNZ1rEF0TE1TPfFPvIuvLrF/XIBIr0nSYmXCNO3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4BtShEpeyHc5wpGR2U+uC5K3bQMB8GA1UdIwQY
MBaAFA9NUPOQz5Rcb6W5AJBbTVF+uwkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgt
ZjJiZGMyMjc1YjZlLzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgtZjJiZGMyMjc1YjZl
LzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5BpxfIJ
r9ob8pM4wU5g3z1jfiwdghJGGs+M3TH1AUOvM0q/3srQaVuTXorRoXjmNNFrRQ46
J7C/VLHmxqDnKeIafnoIusZ6i5S9KXhoXbCA2Vp51MNMkShHczzNZ6NL5a3etakC
7YnEbSWy73QB6e5t+1aM8SWQmsYhZs9E8Xl8chjgfSrOlBy3WuGjao098PloP6qm
zcz+CUcM6fGqpis84BtaB/DpS44OMVOXoTA+Ly8WB6QoT3ti6ijnl7urMc4i6zvp
jvVde6yBfTC+vBCPhRdGZGMfJus7qjq7zkMV5NOxDZCNeXchMJFM4RpJQfb/IsSe
fwVCaaJHVhro2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:03 2025 by rpki-client