Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File: DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier: uwE5bqwH6yP8sT7+hOjl3xDYBxGHyU6+5v7aTiXaghU=
Subject key identifier: 21:44:BF:6A:91:F5:28:D4:F2:7B:F1:58:54:AD:58:13:16:20:B7:EA
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial: 019A00A2E387451BA346E27EE3CB77EB4819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number: 0418
Signing time: Mon 20 Oct 2025 08:01:06 +0000
Manifest this update: Mon 20 Oct 2025 08:01:06 +0000
Manifest next update: Tue 21 Oct 2025 08:01:06 +0000
Files and hashes: 1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: /Wc0jHBM01nbYB7x/dk7f8zmVIiZXl5Dgkr/zhaE7a4=)
2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:e3:87:45:1b:a3:46:e2:7e:e3:cb:77:eb:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Validity
Not Before: Oct 20 08:01:06 2025 GMT
Not After : Oct 21 08:01:06 2025 GMT
Subject: CN=2144bf6a91f528d4f27bf15854ad58131620b7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:66:65:1d:39:33:b6:98:c5:0f:0d:73:b1:
0e:24:1f:07:02:b3:37:27:03:d9:f9:32:80:1a:7c:
85:1e:da:21:63:67:ae:43:55:cc:55:42:8d:3d:77:
b6:4d:27:99:7c:e1:8d:63:c7:f2:af:fc:67:d0:0a:
f6:75:3f:b3:1c:8c:ee:b2:51:4b:07:4f:d7:f4:ac:
cf:b6:c9:3a:69:2f:01:d6:41:7d:ce:fe:3a:b2:9d:
2a:fe:56:e9:44:c1:a4:97:c5:1a:1d:c8:5a:7c:8d:
22:9e:e2:75:ef:c1:4a:66:6f:e9:f6:23:79:65:16:
bb:b7:f7:55:09:ac:b2:37:a8:bf:c4:cd:92:25:bf:
ce:a7:9b:a8:9a:3b:50:1c:8a:c9:36:78:bc:70:b8:
33:b1:da:71:93:fe:ba:8c:49:97:4e:bd:c1:e8:de:
7f:d6:8d:c6:b1:33:94:d0:2d:ba:a2:5c:3e:d1:f3:
87:98:3c:7e:db:c6:44:af:c8:f1:d0:4e:e4:ad:cc:
1f:22:79:d8:2a:36:30:90:81:5c:8f:8e:97:2e:2c:
24:d4:a7:9d:56:2f:98:24:d3:3c:b8:67:38:97:45:
ac:4e:d3:e7:77:75:05:e3:3b:78:cc:7b:24:00:cd:
3e:bc:68:71:de:24:48:85:28:b4:b8:ff:1d:64:59:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:44:BF:6A:91:F5:28:D4:F2:7B:F1:58:54:AD:58:13:16:20:B7:EA
X509v3 Authority Key Identifier:
keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fb:e5:51:38:77:84:75:73:42:8e:83:8b:2c:5d:cc:ac:12:
a6:81:1d:08:ba:22:c9:83:8c:69:2b:39:06:40:a1:0c:29:ac:
a3:a7:5f:0b:ee:a2:ad:af:9d:16:bd:d7:26:5b:e5:09:bb:69:
83:17:31:22:94:03:26:a2:67:12:c3:a5:43:6c:e7:0c:77:ea:
cd:f0:ea:d0:ad:cb:cd:92:79:5b:ec:55:cb:38:55:7a:78:69:
f0:a0:ac:3b:45:7f:1d:4b:08:1c:b0:cb:55:79:5b:66:f8:db:
a8:a4:4a:71:ee:6a:52:ad:1e:5f:d3:24:87:9d:75:49:62:c7:
0d:4e:76:86:08:1b:63:71:33:2e:0f:1e:85:56:c8:b4:ef:34:
59:f8:7b:4c:4c:d3:27:f8:d8:40:ca:61:92:a7:1d:e4:48:85:
ad:a6:19:67:db:ba:e5:e7:9d:ca:8f:d2:e8:3c:fd:6d:ef:19:
0a:36:34:94:34:b5:cc:99:7b:d1:94:15:8a:30:ce:e3:90:db:
82:a1:cf:f3:d3:e3:0a:f1:c7:21:23:56:6f:2d:b4:71:43:2e:
07:d9:b7:73:0e:7d:e2:2f:5b:b1:3b:4e:67:fd:91:6c:bd:75:
aa:26:58:fa:dc:00:b0:ec:30:d2:b3:b1:72:a5:74:d8:6a:54:
8e:ab:c3:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAouOHRRujRuJ+48t360gZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYTU0NjM5MzE2ZjVjZDUyODdmODQxZDdmOGNmZjE2NTIx
ZDA1NzYwHhcNMjUxMDIwMDgwMTA2WhcNMjUxMDIxMDgwMTA2WjAzMTEwLwYDVQQD
EygyMTQ0YmY2YTkxZjUyOGQ0ZjI3YmYxNTg1NGFkNTgxMzE2MjBiN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT5mZR05M7aYxQ8Nc7EOJB8HArM3
JwPZ+TKAGnyFHtohY2euQ1XMVUKNPXe2TSeZfOGNY8fyr/xn0Ar2dT+zHIzuslFL
B0/X9KzPtsk6aS8B1kF9zv46sp0q/lbpRMGkl8UaHchafI0inuJ178FKZm/p9iN5
ZRa7t/dVCayyN6i/xM2SJb/Op5uomjtQHIrJNni8cLgzsdpxk/66jEmXTr3B6N5/
1o3GsTOU0C26olw+0fOHmDx+28ZEr8jx0E7krcwfInnYKjYwkIFcj46XLiwk1Ked
Vi+YJNM8uGc4l0WsTtPnd3UF4zt4zHskAM0+vGhx3iRIhSi0uP8dZFmnTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFEv2qR9SjU8nvxWFStWBMWILfqMB8GA1UdIwQY
MBaAFA6lRjkxb1zVKH+EHX+M/xZSHQV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzMGMtYzFiMS00N2ZiLTg1Yjgt
NDE3ZjUzZjFhNGEwLzEvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZmMzMGMtYzFiMS00N2ZiLTg1YjgtNDE3ZjUzZjFhNGEw
LzEvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPvlUTh3
hHVzQo6DiyxdzKwSpoEdCLoiyYOMaSs5BkChDCmso6dfC+6ira+dFr3XJlvlCbtp
gxcxIpQDJqJnEsOlQ2znDHfqzfDq0K3LzZJ5W+xVyzhVenhp8KCsO0V/HUsIHLDL
VXlbZvjbqKRKce5qUq0eX9Mkh511SWLHDU52hggbY3EzLg8ehVbItO80Wfh7TEzT
J/jYQMphkqcd5EiFraYZZ9u65eedyo/S6Dz9be8ZCjY0lDS1zJl70ZQVijDO45Db
gqHP89PjCvHHISNWby20cUMuB9m3cw594i9bsTtOZ/2RbL11qiZY+twAsOww0rOx
cqV02GpUjqvDVQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:47:09 2025 by rpki-client