Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: 7nO95G/tTAKnQvxqn092LhsoIHXts8rK6LbzZUaaaus=
Subject key identifier: FF:1D:39:D5:AD:4B:9F:A5:75:23:59:89:3B:55:E0:C9:86:B7:E5:8D
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 0199FDD9F6BA299228AD85D90AAE69C8791F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 05FB
Signing time: Sun 19 Oct 2025 19:02:23 +0000
Manifest this update: Sun 19 Oct 2025 19:02:23 +0000
Manifest next update: Mon 20 Oct 2025 19:02:23 +0000
Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: wcEYVID+1pglfED1ap6kAe6Jf/zU1TqUS4Uxtg30tf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f6:ba:29:92:28:ad:85:d9:0a:ae:69:c8:79:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Oct 19 19:02:23 2025 GMT
Not After : Oct 20 19:02:23 2025 GMT
Subject: CN=ff1d39d5ad4b9fa5752359893b55e0c986b7e58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:ae:06:aa:d4:4c:20:ce:0a:7d:2c:0c:9d:
63:0a:c8:d0:85:29:22:a3:f3:8c:66:07:59:30:92:
ba:d4:d2:93:e9:f5:75:a6:47:f6:31:40:6e:d7:7c:
1b:74:a4:2b:89:44:d7:cd:72:1d:e3:b2:ae:f6:97:
44:19:db:fd:5d:08:44:b2:91:35:fe:e7:ba:ff:b2:
12:b3:aa:8f:98:ac:6f:5f:dd:f3:0a:29:ff:77:8d:
5d:b8:d2:d2:6a:cf:9a:20:5f:74:1c:1e:93:04:13:
29:0c:a3:85:8e:25:a3:b3:5e:d9:6b:2d:e2:ce:61:
7a:a5:42:71:b2:37:ff:4a:19:77:a6:da:61:d1:91:
74:e3:eb:d4:3d:82:98:79:4f:87:90:39:54:0d:85:
3f:7f:6a:96:54:90:98:f4:60:dc:73:c0:cb:3b:47:
87:05:42:53:51:35:5e:9d:03:dc:5f:a4:df:af:8e:
45:10:31:60:41:e2:07:2e:47:53:4d:0f:fe:39:d9:
57:48:ac:3c:ca:1d:0c:23:5a:66:bc:95:69:90:f6:
15:a8:4c:15:00:81:d5:ef:30:da:31:6d:e2:51:fe:
19:e0:52:a1:bc:41:77:d2:54:e2:72:14:0b:cd:c4:
b7:af:b0:93:f3:dc:98:f7:b5:7b:c7:81:86:ea:aa:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1D:39:D5:AD:4B:9F:A5:75:23:59:89:3B:55:E0:C9:86:B7:E5:8D
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:66:10:17:5e:b4:31:8d:d4:d6:97:3a:61:5f:8c:51:2e:af:
36:1e:c0:a0:e4:07:86:8e:8a:e4:d5:72:64:56:17:f8:0d:6e:
74:a0:24:a9:90:3f:e0:b8:f0:1d:88:61:61:04:f3:60:76:64:
a2:7f:b1:ff:fc:ae:92:f0:f0:ed:07:c4:4f:37:e1:13:b8:64:
be:19:a5:05:a0:bc:73:0d:9b:4e:8e:4d:c6:67:94:3e:80:f9:
5c:ec:94:2e:9a:2d:6c:3e:64:29:49:95:70:82:3c:b5:95:35:
06:7a:cc:35:36:d0:d3:29:a3:f8:4d:45:f0:89:71:ca:15:85:
d8:53:31:2f:79:63:49:dc:87:ac:85:b2:bb:6d:37:05:bb:c9:
bd:cb:73:de:2b:68:dc:f5:7d:80:8e:de:41:74:94:fe:81:74:
a0:75:b6:27:d4:18:0b:f0:04:bc:d7:21:5c:c1:d0:e7:06:f9:
58:e2:ab:d9:ae:e1:9b:fb:4d:f0:bf:80:b5:e7:a7:5e:4f:0f:
0b:29:c7:ef:68:12:80:5b:99:e9:d2:7f:b8:5b:e8:bd:6c:a6:
cb:0a:1c:5e:54:b8:a5:be:af:89:5e:cc:c2:cd:24:74:d0:f3:
86:67:9e:10:86:36:26:df:19:c4:d2:6d:4e:28:0c:7b:91:47:
b5:cc:ff:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92fa6KZIorYXZCq5pyHkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjUxMDE5MTkwMjIzWhcNMjUxMDIwMTkwMjIzWjAzMTEwLwYDVQQD
EyhmZjFkMzlkNWFkNGI5ZmE1NzUyMzU5ODkzYjU1ZTBjOTg2YjdlNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5iuBqrUTCDOCn0sDJ1jCsjQhSki
o/OMZgdZMJK61NKT6fV1pkf2MUBu13wbdKQriUTXzXId47Ku9pdEGdv9XQhEspE1
/ue6/7ISs6qPmKxvX93zCin/d41duNLSas+aIF90HB6TBBMpDKOFjiWjs17Zay3i
zmF6pUJxsjf/Shl3ptph0ZF04+vUPYKYeU+HkDlUDYU/f2qWVJCY9GDcc8DLO0eH
BUJTUTVenQPcX6Tfr45FEDFgQeIHLkdTTQ/+OdlXSKw8yh0MI1pmvJVpkPYVqEwV
AIHV7zDaMW3iUf4Z4FKhvEF30lTichQLzcS3r7CT89yY97V7x4GG6qrk2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8dOdWtS5+ldSNZiTtV4MmGt+WNMB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWYQF160
MY3U1pc6YV+MUS6vNh7AoOQHho6K5NVyZFYX+A1udKAkqZA/4LjwHYhhYQTzYHZk
on+x//yukvDw7QfETzfhE7hkvhmlBaC8cw2bTo5NxmeUPoD5XOyULpotbD5kKUmV
cII8tZU1BnrMNTbQ0ymj+E1F8IlxyhWF2FMxL3ljSdyHrIWyu203BbvJvctz3ito
3PV9gI7eQXSU/oF0oHW2J9QYC/AEvNchXMHQ5wb5WOKr2a7hm/tN8L+AteenXk8P
CynH72gSgFuZ6dJ/uFvovWymywocXlS4pb6viV7Mws0kdNDzhmeeEIY2Jt8ZxNJt
TigMe5FHtcz/Ww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:56 2025 by rpki-client