Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: 3fG83Ybe4zO723QCCYpAEwBpwtjNDiREoXmmY6i27so=
Subject key identifier: AA:6D:C5:0B:29:39:EA:CC:5A:52:3A:C2:4C:FC:F8:1D:4A:4F:6A:2E
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 0199FCC69901E10E958ECABBC976204B344C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 027A
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: NoNLikRGb5gMu5+bvNiiwOpLlpZGHktMgxApbdsJ5sY=)
2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=)
3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:99:01:e1:0e:95:8e:ca:bb:c9:76:20:4b:34:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=aa6dc50b2939eacc5a523ac24cfcf81d4a4f6a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:fd:8c:b8:38:94:58:64:60:3f:7f:ad:d4:
db:2b:69:11:f0:86:12:cc:5e:d3:ec:19:c9:dc:d1:
13:b9:9c:61:af:53:5c:a8:99:1f:cc:c6:09:1f:0a:
65:82:0e:b1:2b:cc:17:37:8f:81:4d:8a:b1:22:63:
1e:f4:93:32:d8:af:48:7c:cf:e5:4a:ec:35:25:01:
78:5d:ac:17:0d:c1:d8:04:2d:cb:7d:9f:3e:5d:d1:
b7:45:8d:c0:7c:38:f5:89:d9:30:ea:58:9e:1c:47:
70:a9:c4:76:e7:08:e4:be:04:14:ec:2a:f0:7e:dd:
12:d4:13:90:05:23:4f:cc:fc:ed:bd:9f:d9:cc:8d:
dc:79:f7:19:6c:e6:98:bb:f2:ae:1f:08:33:7a:65:
06:35:13:65:0c:a3:47:11:b0:b1:da:27:e7:ec:bd:
35:b8:9e:38:61:a0:52:ff:f8:d3:68:93:6f:fa:3c:
05:2e:fa:fb:5c:3f:f4:dd:d4:77:eb:5c:0d:1f:63:
78:0c:6f:e9:d3:a7:97:55:56:19:cc:26:d4:9e:fd:
45:61:ab:e4:d3:4a:a7:4c:55:32:15:8b:05:a4:8d:
1b:d5:cf:bf:32:4e:1a:02:46:b9:f9:77:6e:21:b3:
d2:85:b9:f8:61:21:1a:22:e9:b0:22:e7:1a:19:b3:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6D:C5:0B:29:39:EA:CC:5A:52:3A:C2:4C:FC:F8:1D:4A:4F:6A:2E
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:fd:3d:98:1d:8b:cd:7c:ea:8e:25:d6:e3:d3:a2:25:b5:
b0:68:24:9d:be:d6:9d:ee:5c:a7:5a:04:ed:78:98:73:78:fd:
18:b8:8e:2e:8b:67:0b:4c:4f:71:c8:3a:1d:8f:c7:eb:5b:5d:
6d:40:ad:ea:07:b6:95:30:be:b5:2d:9a:6a:ea:d8:3e:ca:f9:
0a:e8:be:ef:7a:56:91:67:5b:c3:8f:e8:66:e4:46:da:8c:88:
aa:2e:67:1c:5b:b7:87:f6:b7:90:b3:b9:32:06:fe:a9:ff:03:
2a:47:67:09:b1:89:5d:5b:7e:0a:58:5d:ce:90:3d:67:53:d6:
a0:c0:45:65:12:c5:10:2c:8a:5e:e8:43:57:09:27:18:0d:83:
2a:e7:79:e2:8a:07:68:ac:ee:00:45:da:ec:d1:7e:fe:91:d8:
2b:b1:cd:66:d1:68:37:5f:c9:3e:8d:3f:ae:5c:ee:a9:91:e8:
57:6c:63:8a:bb:ca:6e:d3:51:f2:54:cc:76:39:9e:45:04:a7:
e1:a2:8d:8f:75:83:1a:51:34:9b:98:e5:2d:c1:73:7c:96:1e:
cf:fb:a9:52:d8:8c:6c:89:5e:99:f2:20:21:c1:55:59:aa:77:
40:7f:91:d2:86:52:cc:65:cc:d4:1b:b3:ab:07:d5:0f:71:1f:
70:1d:6b:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpkB4Q6Vjsq7yXYgSzRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk
YjljNTQwHhcNMjUxMDE5MTQwMTM3WhcNMjUxMDIwMTQwMTM3WjAzMTEwLwYDVQQD
EyhhYTZkYzUwYjI5MzllYWNjNWE1MjNhYzI0Y2ZjZjgxZDRhNGY2YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir79jLg4lFhkYD9/rdTbK2kR8IYS
zF7T7BnJ3NETuZxhr1NcqJkfzMYJHwplgg6xK8wXN4+BTYqxImMe9JMy2K9IfM/l
Suw1JQF4XawXDcHYBC3LfZ8+XdG3RY3AfDj1idkw6lieHEdwqcR25wjkvgQU7Crw
ft0S1BOQBSNPzPztvZ/ZzI3cefcZbOaYu/KuHwgzemUGNRNlDKNHEbCx2ifn7L01
uJ44YaBS//jTaJNv+jwFLvr7XD/03dR361wNH2N4DG/p06eXVVYZzCbUnv1FYavk
00qnTFUyFYsFpI0b1c+/Mk4aAka5+XduIbPShbn4YSEaIumwIucaGbO4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKptxQspOerMWlI6wkz8+B1KT2ouMB8GA1UdIwQY
MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt
OGU4Njc1Y2IwOTJmLzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm
LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjr9PZgd
i8186o4l1uPToiW1sGgknb7Wne5cp1oE7XiYc3j9GLiOLotnC0xPccg6HY/H61td
bUCt6ge2lTC+tS2aaurYPsr5Cui+73pWkWdbw4/oZuRG2oyIqi5nHFu3h/a3kLO5
Mgb+qf8DKkdnCbGJXVt+ClhdzpA9Z1PWoMBFZRLFECyKXuhDVwknGA2DKud54ooH
aKzuAEXa7NF+/pHYK7HNZtFoN1/JPo0/rlzuqZHoV2xjirvKbtNR8lTMdjmeRQSn
4aKNj3WDGlE0m5jlLcFzfJYez/upUtiMbIlemfIgIcFVWap3QH+R0oZSzGXM1Buz
qwfVD3EfcB1rNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:23 2025 by rpki-client