Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: xNcWCEgdtZqbq/4tdYVmIllfCVAJEzT4byhEW+gj7ss=
Subject key identifier: 94:C8:94:C9:2B:28:D8:83:B1:62:5A:81:A1:03:90:E5:88:D8:29:78
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 0199FBEB57A9CB94C1BFEC9B722FC24BBA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 06B5
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: 82pgAMn+66ZGvpnm0qL+zxk+/3xvdTVqD4wSk7oaKjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:57:a9:cb:94:c1:bf:ec:9b:72:2f:c2:4b:ba:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=94c894c92b28d883b1625a81a10390e588d82978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:1b:ff:db:b5:6c:07:79:00:62:7a:2c:aa:
9a:0e:d6:fa:e6:fb:66:57:03:ea:85:94:b7:d8:a7:
57:32:73:de:65:d9:b5:d1:19:97:6f:65:f6:a2:28:
52:f3:fe:eb:85:75:c6:40:54:7b:92:68:73:51:47:
8d:4c:cb:a2:6e:bd:35:67:ba:f8:62:25:2d:fe:96:
ba:bb:b7:14:6a:8b:9c:0a:bb:61:83:00:55:78:88:
aa:7b:91:dc:59:55:43:6c:2b:8e:56:f2:79:cc:2a:
b3:02:86:1e:8b:e4:71:bb:e3:84:09:a0:ea:1f:f5:
68:4b:ee:34:9d:1d:95:53:5a:a8:3b:9f:e3:44:c8:
5c:d3:e3:f9:13:7b:b7:28:7e:d7:5a:20:75:fa:63:
e4:33:7a:15:8a:2a:9b:52:a7:ea:e7:b9:cb:77:e0:
53:b5:f0:3f:70:69:a0:cb:08:36:74:dd:a5:10:ba:
58:66:19:99:9a:54:e7:37:2e:44:89:84:48:fc:f2:
e7:3e:2c:91:fb:80:c1:e2:15:76:af:76:7c:24:00:
bb:06:d4:42:d4:b5:55:05:08:0f:96:a6:c9:b4:86:
55:4b:b2:14:47:4e:da:56:4f:46:ad:0c:ce:9d:40:
82:df:0b:e2:c8:c3:80:a4:82:f2:39:bd:43:d6:a0:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C8:94:C9:2B:28:D8:83:B1:62:5A:81:A1:03:90:E5:88:D8:29:78
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:84:6c:55:14:bb:60:93:d0:86:89:57:4b:bf:4f:62:a5:c9:
3c:48:33:31:96:e7:f5:cf:e3:57:15:66:e8:5d:6b:a6:2d:b2:
61:7e:55:7f:e6:2d:45:0d:bf:fe:cc:88:79:63:36:cd:9f:bb:
5a:f1:d0:5b:be:44:e9:87:e3:71:f6:61:9b:82:e6:bb:c5:1c:
9e:5f:9a:99:7a:4e:45:38:df:ed:21:0b:95:0c:95:db:06:07:
c4:b7:26:22:f9:7a:88:f8:a6:24:1b:ba:32:ff:e9:0e:fe:1c:
a8:59:5f:1e:ce:3e:ad:cf:2f:fb:16:b3:30:c1:ad:a2:20:f6:
3b:bf:ee:0f:c9:94:49:f3:40:c2:9a:c0:05:ad:bb:8d:32:9b:
8e:b2:88:47:2f:6b:92:bf:2b:f1:84:9e:47:40:ae:59:af:46:
1f:20:9f:1e:9e:f6:da:e0:f0:36:e3:14:0f:8c:76:2a:30:d7:
6f:6b:cf:ce:a3:be:62:ee:20:d5:80:d2:6e:e7:20:49:85:0c:
b7:2c:e5:bf:4c:00:17:85:93:ac:e3:55:cd:a6:9f:3c:1e:90:
f6:d5:e2:bc:6a:00:5e:61:08:3d:5c:ed:a5:8f:be:b3:7b:53:
92:11:f7:14:85:00:1c:d4:1e:0b:fa:9d:15:77:55:8b:8d:2c:
ff:fb:fb:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn761epy5TBv+ybci/CS7qIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz
NWQ5N2UwHhcNMjUxMDE5MTAwMjA4WhcNMjUxMDIwMTAwMjA4WjAzMTEwLwYDVQQD
Eyg5NGM4OTRjOTJiMjhkODgzYjE2MjVhODFhMTAzOTBlNTg4ZDgyOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Tgb/9u1bAd5AGJ6LKqaDtb65vtm
VwPqhZS32KdXMnPeZdm10RmXb2X2oihS8/7rhXXGQFR7kmhzUUeNTMuibr01Z7r4
YiUt/pa6u7cUaoucCrthgwBVeIiqe5HcWVVDbCuOVvJ5zCqzAoYei+Rxu+OECaDq
H/VoS+40nR2VU1qoO5/jRMhc0+P5E3u3KH7XWiB1+mPkM3oViiqbUqfq57nLd+BT
tfA/cGmgywg2dN2lELpYZhmZmlTnNy5EiYRI/PLnPiyR+4DB4hV2r3Z8JAC7BtRC
1LVVBQgPlqbJtIZVS7IUR07aVk9GrQzOnUCC3wviyMOApILyOb1D1qBuxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTIlMkrKNiDsWJagaEDkOWI2Cl4MB8GA1UdIwQY
MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt
NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4
LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4RsVRS7
YJPQholXS79PYqXJPEgzMZbn9c/jVxVm6F1rpi2yYX5Vf+YtRQ2//syIeWM2zZ+7
WvHQW75E6YfjcfZhm4Lmu8Ucnl+amXpORTjf7SELlQyV2wYHxLcmIvl6iPimJBu6
Mv/pDv4cqFlfHs4+rc8v+xazMMGtoiD2O7/uD8mUSfNAwprABa27jTKbjrKIRy9r
kr8r8YSeR0CuWa9GHyCfHp722uDwNuMUD4x2KjDXb2vPzqO+Yu4g1YDSbucgSYUM
tyzlv0wAF4WTrONVzaafPB6Q9tXivGoAXmEIPVztpY++s3tTkhH3FIUAHNQeC/qd
FXdVi40s//v78Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:45 2025 by rpki-client