Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: D/4VBzX3C8uk2fEZynXUNe2dZvb7TmJxM5QKKA7Hrts=
Subject key identifier: ED:12:7B:AA:64:B9:95:46:71:C5:32:0F:A7:C3:E5:6D:47:FC:31:BF
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 0199FBEABAA0754D72FC576261549E9B61B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1507
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: FbNceqFGgnuEOgB06V2zdgePvzNC7zBOzgPn/+xdFsU=)
2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ba:a0:75:4d:72:fc:57:62:61:54:9e:9b:61:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=ed127baa64b9954671c5320fa7c3e56d47fc31bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:46:38:2b:d7:62:d8:6f:f3:3e:1d:67:bb:
c7:3f:72:62:4a:ca:e1:7e:37:64:79:2a:e9:8c:1c:
68:b5:21:9b:ac:0a:78:2d:9d:01:84:8c:5b:eb:ae:
6b:af:f4:16:07:37:1f:63:f1:66:46:ea:85:f6:23:
d2:ff:b9:19:e2:4c:54:26:6e:eb:13:a7:c3:15:2b:
0e:63:85:a5:dd:6f:7c:b2:89:2b:61:cc:4f:d4:d4:
ef:63:8b:c3:07:fa:34:32:0b:58:94:8f:a2:5e:8a:
be:5b:1e:3f:d7:11:d0:13:29:d8:f4:58:c0:3c:2a:
ee:be:00:7a:d9:ea:f9:5a:e7:84:df:2f:0d:95:63:
74:88:92:44:24:43:aa:57:c4:42:d8:79:85:03:47:
66:64:a5:1b:4e:b7:3e:5f:a2:ba:38:5f:fc:8a:61:
8c:08:30:9a:49:21:a9:55:45:d2:c9:11:47:e2:c5:
c1:02:e1:99:cf:15:0c:16:75:9a:05:43:74:32:89:
7a:6f:0e:64:b0:85:f5:40:63:af:fe:a0:19:62:26:
14:61:21:0e:80:d8:61:c1:9e:0f:f5:b7:a0:ab:62:
38:6b:10:cb:3a:25:db:73:eb:2d:32:79:dd:7b:45:
58:cf:e2:26:12:06:77:f8:c6:7b:a8:37:c1:7b:18:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:12:7B:AA:64:B9:95:46:71:C5:32:0F:A7:C3:E5:6D:47:FC:31:BF
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fb:aa:9d:57:ef:b1:1e:0c:75:0a:69:89:8c:46:50:1c:b4:
59:32:de:05:98:87:ba:7f:a4:3f:9c:71:d2:f5:32:d1:1f:95:
e3:0a:1d:a1:28:6e:a2:71:5d:7a:86:cc:e0:c7:f0:d5:ce:3a:
34:4a:bf:a0:67:f7:f6:d3:07:25:73:1c:7d:6c:91:db:0a:5f:
a6:63:37:a8:60:71:f8:27:54:25:fb:20:6e:08:4d:76:6e:17:
15:48:95:62:ef:66:6a:92:ff:2e:6e:ab:e7:71:51:c9:d8:57:
0c:ee:2e:a2:eb:a1:0c:44:6e:92:10:3c:db:e2:1b:90:fe:5b:
e4:87:dd:25:a3:85:dc:cf:72:75:9f:37:db:37:d0:2f:f5:2d:
f8:ae:e3:50:7d:03:74:c7:99:1b:d0:c0:d0:16:ee:db:3c:9e:
87:25:ad:21:5b:1f:ca:80:a1:8c:1a:98:02:c0:eb:4e:1b:af:
10:ac:61:f3:77:b8:f5:a8:40:18:61:5c:9c:5a:2e:2d:d7:a7:
1d:e5:d4:36:c4:bd:53:db:42:fc:00:da:0c:7d:71:ac:99:76:
d8:15:cb:cb:39:f8:82:be:f5:37:88:37:cd:ff:2a:cc:28:0c:
3e:4a:47:b7:a5:ae:32:2f:fe:d7:c6:35:1a:2a:8a:30:b9:7f:
9a:34:5a:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rqgdU1y/FdiYVSem2GyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZjFhNzYzNzQ1YzI1ZGFkMjhmNGE4MTE2Njg4ZTgyY2Ux
MjAyOGIwHhcNMjUxMDE5MTAwMTI4WhcNMjUxMDIwMTAwMTI4WjAzMTEwLwYDVQQD
EyhlZDEyN2JhYTY0Yjk5NTQ2NzFjNTMyMGZhN2MzZTU2ZDQ3ZmMzMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNVGOCvXYthv8z4dZ7vHP3JiSsrh
fjdkeSrpjBxotSGbrAp4LZ0BhIxb665rr/QWBzcfY/FmRuqF9iPS/7kZ4kxUJm7r
E6fDFSsOY4Wl3W98sokrYcxP1NTvY4vDB/o0MgtYlI+iXoq+Wx4/1xHQEynY9FjA
PCruvgB62er5WueE3y8NlWN0iJJEJEOqV8RC2HmFA0dmZKUbTrc+X6K6OF/8imGM
CDCaSSGpVUXSyRFH4sXBAuGZzxUMFnWaBUN0Mol6bw5ksIX1QGOv/qAZYiYUYSEO
gNhhwZ4P9begq2I4axDLOiXbc+stMnnde0VYz+ImEgZ3+MZ7qDfBexhpnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0Se6pkuZVGccUyD6fD5W1H/DG/MB8GA1UdIwQY
MBaAFHXxp2N0XCXa0o9KgRZojoLOEgKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQt
Yzg0OWJjMGYzNTliLzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQtYzg0OWJjMGYzNTli
LzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPuqnVfv
sR4MdQppiYxGUBy0WTLeBZiHun+kP5xx0vUy0R+V4wodoShuonFdeobM4Mfw1c46
NEq/oGf39tMHJXMcfWyR2wpfpmM3qGBx+CdUJfsgbghNdm4XFUiVYu9mapL/Lm6r
53FRydhXDO4uouuhDERukhA82+IbkP5b5IfdJaOF3M9ydZ832zfQL/Ut+K7jUH0D
dMeZG9DA0Bbu2zyehyWtIVsfyoChjBqYAsDrThuvEKxh83e49ahAGGFcnFouLden
HeXUNsS9U9tC/ADaDH1xrJl22BXLyzn4gr71N4g3zf8qzCgMPkpHt6WuMi/+18Y1
GiqKMLl/mjRa1w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:09 2025 by rpki-client