Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File: D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier: ceYLw5lAXVxWwwNu6miP1+w1Z69QWJgNxOO0+nRcsow=
Subject key identifier: B5:E0:D2:D9:4F:C6:B5:3A:81:F7:FF:61:72:B6:E3:C8:87:87:67:01
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 0199FC5864CC3F1CB9DFFBBCDE0FB7097449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: w5JzXql6pkfWMWdX43p60euubVPz7cYPSRqnkO9qzMA=)
2: Fe73gwKx3TfChZQCePRdIEAemH0.roa (hash: qBzf7ILpA60OZzhZbHEoimpJXoZWWGpm51oGlU43AdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:64:cc:3f:1c:b9:df:fb:bc:de:0f:b7:09:74:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=b5e0d2d94fc6b53a81f7ff6172b6e3c887876701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:c5:19:6b:71:9d:fb:72:47:fd:70:ce:20:
c2:02:bb:7d:12:07:ec:d2:54:c5:16:22:20:11:11:
b6:01:2a:6b:56:b8:7d:1c:a9:1b:2c:58:92:5e:e5:
e2:c7:e4:61:bd:14:8f:8a:26:a3:04:bb:82:40:cb:
25:aa:eb:9a:03:f1:c1:c2:11:21:9d:cc:07:1e:bc:
31:01:79:f2:09:aa:db:f9:b2:4d:c6:d3:f7:5d:19:
53:90:7e:e4:ed:bd:4b:85:f4:8d:34:64:c0:e0:7e:
92:56:f8:b1:2e:19:45:10:85:e9:10:4b:c5:f7:ca:
fb:92:c0:39:7b:4e:5c:b5:bc:8e:7c:b5:46:c4:09:
03:97:b8:ad:98:f9:0c:ef:a9:8f:40:ca:c5:87:47:
30:c9:2e:5e:d5:95:38:e6:13:96:7d:a0:fb:50:ea:
09:e9:28:a7:2b:12:f9:76:94:41:a9:10:38:87:d7:
78:f6:42:1f:00:ed:99:5e:3f:1f:b6:f4:dc:9b:67:
ad:05:91:d7:e5:4c:85:e6:71:e6:0d:39:b1:84:dc:
f1:50:13:28:e7:00:92:2a:25:cd:c4:6f:c9:b3:72:
60:03:f0:f4:f4:47:ab:18:de:db:7d:de:08:97:0e:
68:f2:b0:c9:ee:a1:d0:6e:fd:0e:8c:94:27:87:e8:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:D2:D9:4F:C6:B5:3A:81:F7:FF:61:72:B6:E3:C8:87:87:67:01
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:92:ea:a7:a9:d7:85:5c:72:1e:84:e1:d0:bc:b0:1a:fb:98:
31:1c:b3:09:fa:a9:ae:cc:a9:9e:11:04:75:3f:b0:62:0c:a1:
82:5e:f4:3a:52:dd:52:f6:61:08:6f:ca:90:2a:4a:cb:b5:04:
07:05:b2:04:e0:c8:5e:ff:4a:34:44:30:53:59:11:5d:a2:75:
ad:3d:89:19:8e:43:29:6f:19:e9:48:e6:1d:b5:52:a6:1f:ab:
a4:9c:24:be:2c:f0:68:04:3b:e8:25:2c:dd:39:dd:67:27:43:
b5:f1:45:ed:4a:86:dc:1e:32:6d:47:e1:5d:c0:bf:ba:52:4a:
f7:a1:23:c0:1e:69:6d:0c:5f:74:75:b4:fa:b9:2b:70:db:cf:
32:22:74:7e:c7:87:22:d3:63:4a:67:cb:82:a4:bb:6b:1f:d0:
fa:a8:40:45:cb:9e:01:a0:b2:36:4c:d1:58:e6:53:3f:d1:55:
f8:c5:0d:ce:04:50:94:a4:8e:97:ce:32:be:3e:3e:00:82:00:
ce:19:c0:4b:24:f8:15:a1:8f:26:8b:85:f5:4f:80:f7:d8:6c:
d0:45:e4:73:88:da:b2:5e:46:2a:e9:db:83:71:e3:c4:ae:03:
dd:f1:80:70:0c:f4:5a:90:98:90:6b:21:fd:27:13:7e:4d:5b:
c7:26:90:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGTMPxy53/u83g+3CXRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGVlNzk0NGFjNGRhMzExMTI5NWQ4MWUyOWRlYmEwMGMx
NjNhOTYwHhcNMjUxMDE5MTIwMTE1WhcNMjUxMDIwMTIwMTE1WjAzMTEwLwYDVQQD
EyhiNWUwZDJkOTRmYzZiNTNhODFmN2ZmNjE3MmI2ZTNjODg3ODc2NzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ/FGWtxnftyR/1wziDCArt9Egfs
0lTFFiIgERG2ASprVrh9HKkbLFiSXuXix+RhvRSPiiajBLuCQMslquuaA/HBwhEh
ncwHHrwxAXnyCarb+bJNxtP3XRlTkH7k7b1LhfSNNGTA4H6SVvixLhlFEIXpEEvF
98r7ksA5e05ctbyOfLVGxAkDl7itmPkM76mPQMrFh0cwyS5e1ZU45hOWfaD7UOoJ
6SinKxL5dpRBqRA4h9d49kIfAO2ZXj8ftvTcm2etBZHX5UyF5nHmDTmxhNzxUBMo
5wCSKiXNxG/Js3JgA/D09EerGN7bfd4Ilw5o8rDJ7qHQbv0OjJQnh+j+cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXg0tlPxrU6gff/YXK248iHh2cBMB8GA1UdIwQY
MBaAFA/e55RKxNoxESldgeKd66AMFjqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS81NDRiZWEtZjFlYy00NjY2LTgxYzAt
NzhhNGQ2NTY5M2ZlLzEvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS81NDRiZWEtZjFlYy00NjY2LTgxYzAtNzhhNGQ2NTY5M2Zl
LzEvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJLqp6nX
hVxyHoTh0LywGvuYMRyzCfqprsypnhEEdT+wYgyhgl70OlLdUvZhCG/KkCpKy7UE
BwWyBODIXv9KNEQwU1kRXaJ1rT2JGY5DKW8Z6UjmHbVSph+rpJwkvizwaAQ76CUs
3TndZydDtfFF7UqG3B4ybUfhXcC/ulJK96EjwB5pbQxfdHW0+rkrcNvPMiJ0fseH
ItNjSmfLgqS7ax/Q+qhARcueAaCyNkzRWOZTP9FV+MUNzgRQlKSOl84yvj4+AIIA
zhnASyT4FaGPJouF9U+A99hs0EXkc4jasl5GKunbg3HjxK4D3fGAcAz0WpCYkGsh
/ScTfk1bxyaQTA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:07 2025 by rpki-client