Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier: X8fVcHYRD5i1PtmrmK1eTrSm9ooOxGmfgbYEZfAS2Pw=
Subject key identifier: 7F:5F:6E:5F:35:84:ED:68:FF:D1:27:64:A7:8C:AE:78:67:7D:99:E1
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial: 019A00357002F8930C1137BE8D9575EA83E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number: 04E5
Signing time: Mon 20 Oct 2025 06:01:33 +0000
Manifest this update: Mon 20 Oct 2025 06:01:33 +0000
Manifest next update: Tue 21 Oct 2025 06:01:33 +0000
Files and hashes: 1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=)
2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: JYMfi2/EFMDPlpS51kxv23LKcObNCUXTDop+KoU8t08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:70:02:f8:93:0c:11:37:be:8d:95:75:ea:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
Validity
Not Before: Oct 20 06:01:33 2025 GMT
Not After : Oct 21 06:01:33 2025 GMT
Subject: CN=7f5f6e5f3584ed68ffd12764a78cae78677d99e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:9c:e4:9e:82:b8:9c:04:dd:c7:80:54:42:
16:c9:ec:4d:49:5b:2b:02:e7:79:ae:be:8b:7c:22:
91:b2:da:00:bf:00:61:d4:9f:a7:4e:b5:74:77:24:
ab:0a:28:62:44:7f:bb:9c:de:73:b6:2c:94:c2:41:
74:5e:af:52:0c:c5:dd:4a:10:f7:56:22:7f:6b:d8:
51:14:da:b8:b2:66:48:ec:39:27:c5:67:5a:93:12:
99:e3:2b:24:a3:c6:a7:a6:e9:88:59:d4:e8:d6:76:
85:29:a8:f4:fb:5b:5c:79:75:24:6f:bf:99:2e:a8:
f3:8c:7e:b0:81:8c:98:70:3a:5f:14:0b:db:20:9f:
2c:b4:18:ec:c9:90:40:f7:26:b7:eb:a6:72:25:7a:
19:1c:e6:6e:3d:95:17:61:85:0e:f0:a0:e4:23:cd:
cf:bf:2c:44:53:92:2c:19:bd:13:b9:d2:47:1e:4a:
50:37:81:39:f1:d9:e8:aa:50:a0:9f:53:50:05:4b:
3c:ce:83:fb:ba:de:3e:40:d6:4f:1f:04:6d:d3:36:
25:c6:b2:ef:58:aa:55:78:a5:9b:2a:22:c3:4e:9b:
46:5d:b5:e6:c4:5d:c4:22:a6:3b:25:30:90:1a:6c:
63:0f:00:4b:34:5b:be:83:6f:0f:23:f6:b6:55:04:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5F:6E:5F:35:84:ED:68:FF:D1:27:64:A7:8C:AE:78:67:7D:99:E1
X509v3 Authority Key Identifier:
keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:56:84:ec:29:c1:5f:ad:cf:9b:23:d3:2d:64:38:f1:ad:
48:f6:99:26:38:4d:7e:12:08:f6:7a:b6:97:15:34:ca:b4:27:
d2:a4:d8:90:05:c4:0e:71:02:bc:aa:a8:ef:dd:89:16:7a:ba:
87:7e:46:86:da:db:1d:ec:ef:93:8d:74:f8:36:bb:55:0c:76:
6c:5b:a0:ef:eb:c4:3f:24:cc:4b:a7:03:af:e9:2a:e3:2a:73:
f1:c6:b3:4b:65:85:2b:68:c7:22:32:b6:2d:42:55:4d:3e:28:
36:a6:a7:50:65:a4:5d:9a:11:27:91:49:5a:ed:d4:51:f8:d0:
3d:65:dc:fb:a4:77:e1:5e:e9:a4:8a:81:d8:04:1a:14:c2:69:
90:c6:dd:d6:30:95:f1:ef:97:df:87:b0:49:6e:4d:11:41:84:
44:a0:22:25:a8:f6:cf:69:3f:b9:e3:91:21:aa:cb:bd:45:0a:
8e:bd:9f:c0:b3:26:fc:1a:64:ee:70:6c:db:25:87:ae:65:d4:
97:4e:3b:f0:b6:ab:7b:0f:b1:ee:71:58:e5:64:1c:73:fb:e4:
d3:ba:20:52:95:e7:a1:d4:fa:f2:30:9e:6b:dd:34:6b:92:39:
39:1c:92:07:31:e9:f5:92:70:8b:e2:ec:f3:aa:af:f4:f4:23:
70:7b:55:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANXAC+JMMETe+jZV16oPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTNmMzU4MmY2MzkwMTMwNTUzMGI0YjE5MzZjZDZlNjYx
MWEzMGEwHhcNMjUxMDIwMDYwMTMzWhcNMjUxMDIxMDYwMTMzWjAzMTEwLwYDVQQD
Eyg3ZjVmNmU1ZjM1ODRlZDY4ZmZkMTI3NjRhNzhjYWU3ODY3N2Q5OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJyc5J6CuJwE3ceAVEIWyexNSVsr
Aud5rr6LfCKRstoAvwBh1J+nTrV0dySrCihiRH+7nN5ztiyUwkF0Xq9SDMXdShD3
ViJ/a9hRFNq4smZI7DknxWdakxKZ4ysko8anpumIWdTo1naFKaj0+1tceXUkb7+Z
LqjzjH6wgYyYcDpfFAvbIJ8stBjsyZBA9ya366ZyJXoZHOZuPZUXYYUO8KDkI83P
vyxEU5IsGb0TudJHHkpQN4E58dnoqlCgn1NQBUs8zoP7ut4+QNZPHwRt0zYlxrLv
WKpVeKWbKiLDTptGXbXmxF3EIqY7JTCQGmxjDwBLNFu+g28PI/a2VQQhtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9fbl81hO1o/9EnZKeMrnhnfZnhMB8GA1UdIwQY
MBaAFHcT81gvY5ATBVMLSxk2zW5mEaMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQt
MTg5ZDUzYWU0ZTNlLzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQtMTg5ZDUzYWU0ZTNl
LzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWJWhOwp
wV+tz5sj0y1kOPGtSPaZJjhNfhII9nq2lxU0yrQn0qTYkAXEDnECvKqo792JFnq6
h35GhtrbHezvk410+Da7VQx2bFug7+vEPyTMS6cDr+kq4ypz8cazS2WFK2jHIjK2
LUJVTT4oNqanUGWkXZoRJ5FJWu3UUfjQPWXc+6R34V7ppIqB2AQaFMJpkMbd1jCV
8e+X34ewSW5NEUGERKAiJaj2z2k/ueORIarLvUUKjr2fwLMm/Bpk7nBs2yWHrmXU
l0478Larew+x7nFY5WQcc/vk07ogUpXnodT68jCea900a5I5ORySBzHp9ZJwi+Ls
86qv9PQjcHtVuw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:10 2025 by rpki-client