Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier: Okjh/W3KTTZmmROSjQ3IHqUszAc781WEwJls5pmbG4I=
Subject key identifier: FD:BA:4F:5F:B9:83:80:91:E3:A0:7F:62:B8:11:6A:B7:B6:92:98:2C
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial: 019A5119F121A699D1D5682597117D187A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number: 03F2
Signing time: Tue 04 Nov 2025 23:00:45 +0000
Manifest this update: Tue 04 Nov 2025 23:00:45 +0000
Manifest next update: Wed 05 Nov 2025 23:00:45 +0000
Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: JktQluQQXy8AlQq3GPxI/2Bn9N2LxI8BOqXGT6PmIO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:f1:21:a6:99:d1:d5:68:25:97:11:7d:18:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Validity
Not Before: Nov 4 23:00:45 2025 GMT
Not After : Nov 5 23:00:45 2025 GMT
Subject: CN=fdba4f5fb9838091e3a07f62b8116ab7b692982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:31:a1:7b:59:00:55:b2:16:67:f8:5a:77:
8d:a4:4e:dd:47:f4:46:e7:ec:23:41:b0:5c:c7:6d:
06:fc:49:4a:52:91:0d:7b:e0:a5:d6:7d:ca:ed:ac:
1f:8d:72:b7:c0:42:05:0c:8e:b3:cc:f6:90:7c:6c:
d1:52:30:17:86:d7:c3:c7:a5:f9:06:2f:bc:d8:2a:
b2:68:56:be:f2:70:26:7f:b3:88:4b:a2:6f:e5:6f:
58:4f:46:95:45:22:e8:a8:c4:b1:bd:eb:62:93:a2:
12:00:73:db:a1:65:92:f9:25:8d:cc:0f:c0:76:b7:
b5:d7:c3:84:e1:b8:00:65:0e:17:b1:8b:db:5f:3c:
8c:a5:f8:cd:34:64:fb:1f:85:e4:b9:1c:0b:88:c6:
68:ec:5a:b2:f6:ef:3d:eb:48:1b:9d:4b:57:eb:9e:
4d:f0:81:bd:6f:18:21:9f:2f:d1:24:20:eb:7c:1b:
d9:d1:36:d8:ee:15:f4:25:9b:12:ff:5f:10:5a:d5:
f2:8c:8b:c3:38:a1:e9:d6:f5:d7:fb:83:5b:77:07:
e6:28:68:3f:ab:91:20:85:dc:f3:e9:17:a3:fe:9c:
92:7e:f4:db:62:0b:a0:a8:8f:64:de:92:a8:be:32:
97:04:52:86:9d:3f:e1:a9:22:29:88:48:d9:e1:37:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BA:4F:5F:B9:83:80:91:E3:A0:7F:62:B8:11:6A:B7:B6:92:98:2C
X509v3 Authority Key Identifier:
keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c1:d3:51:6a:b3:f3:52:e4:a8:e2:69:bc:0d:e2:09:68:6b:
87:73:c6:67:8b:c3:d0:86:a2:9a:48:14:a5:d0:75:5c:50:24:
b6:98:0a:dd:d6:c3:79:e3:be:fd:3a:91:4c:fa:64:97:a0:02:
ea:9e:a9:17:5f:5a:bb:13:bd:25:06:56:6a:77:ef:53:e3:a8:
53:29:f3:01:89:b1:19:62:d5:51:33:b9:4e:7c:28:15:93:84:
a1:54:45:fc:d2:24:aa:a1:68:99:0f:9d:67:c0:7c:3e:95:2a:
cf:6c:9f:20:ab:9c:e9:ed:9d:6e:65:8a:d9:c4:30:87:c2:7e:
ef:b1:5f:cf:c8:83:e1:97:d3:7b:e8:1a:2d:a5:b3:01:94:05:
5f:10:90:d3:53:e6:d1:13:fc:17:d9:ad:30:13:35:98:b8:ea:
48:a4:2f:82:f6:f1:b1:f5:ed:06:b0:37:a1:3a:75:6d:24:5d:
a9:ec:71:e8:7d:e6:ef:fa:87:b0:a1:75:2e:91:17:c5:39:95:
67:09:41:bb:5d:17:4e:7b:90:c2:b1:10:63:97:31:35:c1:1b:
e3:01:a0:77:bc:cd:77:92:0b:43:31:c1:8e:ff:e6:b2:55:2b:
06:cc:73:00:21:d4:17:25:10:93:3c:15:7a:6c:6d:7e:b1:01:
da:f6:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:20 2025 by rpki-client