Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
File: dHnfUKMVAp6AqhlHr-EtselIYos.mft (raw, json)
Hash identifier: GAYX+jFsjmEZgFQnW0H7w9nU4VKIc7wW6HXIqfWz2v8=
Subject key identifier: 0F:15:13:38:25:CA:EC:6F:3E:27:97:09:AC:FA:E1:0F:EA:E2:39:03
Authority key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
Certificate issuer: /CN=7479df50a315029e80aa1947afe12db1e948628b
Certificate serial: 0199FF22C2FDD7D160A9780BC9F96290E847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
Manifest number: 0FE7
Signing time: Mon 20 Oct 2025 01:01:32 +0000
Manifest this update: Mon 20 Oct 2025 01:01:32 +0000
Manifest next update: Tue 21 Oct 2025 01:01:32 +0000
Files and hashes: 1: KvOchdw6AYfLt261W6RR4KIthYY.roa (hash: WXdEqSkBC/gQsasA/7q/ZdUFdpwAbrzjieJX5Z97f4U=)
2: dHnfUKMVAp6AqhlHr-EtselIYos.crl (hash: TvVKR9QF7xAGxGE1ovK+OqwIQMRjzN1ypxbG6JS3YnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c2:fd:d7:d1:60:a9:78:0b:c9:f9:62:90:e8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7479df50a315029e80aa1947afe12db1e948628b
Validity
Not Before: Oct 20 01:01:32 2025 GMT
Not After : Oct 21 01:01:32 2025 GMT
Subject: CN=0f15133825caec6f3e279709acfae10feae23903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:3b:1d:c9:04:b5:13:ae:e0:36:b0:20:fe:
54:28:f2:05:a1:ea:ac:2e:13:fd:8a:0e:95:fd:76:
91:fb:5c:9d:d5:67:08:d7:f7:de:3d:6b:7d:52:da:
63:d2:ba:ba:8f:28:6b:48:04:73:9f:ea:da:00:29:
1b:de:12:52:f0:aa:1f:99:ce:20:8c:bc:60:81:9c:
21:61:49:0e:3f:d6:45:eb:82:e9:37:14:a7:ec:94:
16:5f:51:45:f9:cd:dc:b9:33:a9:98:de:0c:9c:e8:
a4:01:e4:65:05:b4:f6:8a:b9:21:97:28:f8:38:87:
3e:87:c2:78:e5:ba:bf:dd:ea:59:c3:14:7a:8a:b7:
1c:0f:fc:e2:de:67:52:b6:50:46:eb:a0:44:41:a8:
46:b3:51:6b:45:27:f0:62:a8:c4:53:ca:a3:63:7e:
5d:02:a1:16:51:27:5e:4d:0e:9f:05:1f:30:ed:f1:
96:7a:79:dd:53:5f:cd:04:5b:df:7f:1c:72:bb:71:
ca:16:22:bc:2a:93:81:19:1f:ae:da:70:ea:46:2c:
be:47:3e:96:fd:e6:cd:0e:cb:4a:cc:11:1a:58:a8:
88:f7:62:c4:f7:34:f6:0f:8c:00:a2:f1:72:b7:6f:
cc:45:57:21:3d:ec:46:5d:8a:2c:9d:52:f7:4a:a8:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:13:38:25:CA:EC:6F:3E:27:97:09:AC:FA:E1:0F:EA:E2:39:03
X509v3 Authority Key Identifier:
keyid:74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:a9:50:eb:48:a3:a4:8b:4e:f0:21:11:e1:38:84:73:3e:
bf:e2:61:56:ec:41:14:98:60:47:84:8f:61:c4:60:80:8b:45:
17:35:72:49:82:b0:46:46:1f:00:e8:43:62:68:29:10:a0:1c:
30:be:69:17:29:7d:1d:ef:08:2c:c6:df:1b:f2:e0:82:15:44:
21:10:31:29:60:11:69:4c:6d:f3:80:b9:21:d6:84:46:87:29:
d0:1e:17:4a:c8:a5:07:6c:c2:2b:21:f9:2d:21:5d:56:36:b9:
6b:f7:b9:6a:34:9e:a3:dc:6e:f9:ae:fb:c4:d1:5d:64:00:94:
2c:6a:ca:a4:57:44:38:e4:f8:68:40:f8:39:1d:80:3e:b9:96:
f5:91:54:5e:14:08:cb:ea:47:3f:7c:29:be:f5:b1:81:d5:cd:
11:41:30:d8:6b:cf:a0:84:07:28:d4:b9:77:cf:a3:20:61:3e:
d6:a9:0a:e3:d4:4e:19:de:1e:c0:c2:77:44:c3:2c:fe:69:6a:
33:b5:7a:cc:99:f9:2f:32:74:ef:9b:39:ac:3c:a0:4d:67:a7:
23:14:7d:65:ac:7e:22:99:dd:81:fc:0f:72:08:f7:59:7e:8b:
12:38:44:60:ab:55:b7:4a:c5:a7:41:b8:16:e2:5d:f7:55:cf:
0c:cf:21:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IsL919FgqXgLyflikOhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzlkZjUwYTMxNTAyOWU4MGFhMTk0N2FmZTEyZGIxZTk0
ODYyOGIwHhcNMjUxMDIwMDEwMTMyWhcNMjUxMDIxMDEwMTMyWjAzMTEwLwYDVQQD
EygwZjE1MTMzODI1Y2FlYzZmM2UyNzk3MDlhY2ZhZTEwZmVhZTIzOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr07HckEtROu4DawIP5UKPIFoeqs
LhP9ig6V/XaR+1yd1WcI1/fePWt9Utpj0rq6jyhrSARzn+raACkb3hJS8Kofmc4g
jLxggZwhYUkOP9ZF64LpNxSn7JQWX1FF+c3cuTOpmN4MnOikAeRlBbT2irkhlyj4
OIc+h8J45bq/3epZwxR6irccD/zi3mdStlBG66BEQahGs1FrRSfwYqjEU8qjY35d
AqEWUSdeTQ6fBR8w7fGWenndU1/NBFvffxxyu3HKFiK8KpOBGR+u2nDqRiy+Rz6W
/ebNDstKzBEaWKiI92LE9zT2D4wAovFyt2/MRVchPexGXYosnVL3SqhpUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8VEzglyuxvPieXCaz64Q/q4jkDMB8GA1UdIwQY
MBaAFHR531CjFQKegKoZR6/hLbHpSGKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNjczNWQtNjY1OC00YjZmLWEyNjEt
OTdiYTM3MzQ1YWE4LzEvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNjczNWQtNjY1OC00YjZmLWEyNjEtOTdiYTM3MzQ1YWE4
LzEvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGP+pUOtI
o6SLTvAhEeE4hHM+v+JhVuxBFJhgR4SPYcRggItFFzVySYKwRkYfAOhDYmgpEKAc
ML5pFyl9He8ILMbfG/LgghVEIRAxKWARaUxt84C5IdaERocp0B4XSsilB2zCKyH5
LSFdVja5a/e5ajSeo9xu+a77xNFdZACULGrKpFdEOOT4aED4OR2APrmW9ZFUXhQI
y+pHP3wpvvWxgdXNEUEw2GvPoIQHKNS5d8+jIGE+1qkK49ROGd4ewMJ3RMMs/mlq
M7V6zJn5LzJ075s5rDygTWenIxR9Zax+IpndgfwPcgj3WX6LEjhEYKtVt0rFp0G4
FuJd91XPDM8hvQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:22 2025 by rpki-client