
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: jKWicM03zTEzgQtKPcz3jeToCxzICc0HgE2uBGsJQP8=
Subject key identifier: E6:88:80:07:90:B6:6D:32:3F:95:AF:22:9E:0B:92:09:6E:69:30:48
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019A4F626A2612DDBA9C457D8A9AAF3697D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 0521
Signing time: Tue 04 Nov 2025 15:00:40 +0000
Manifest this update: Tue 04 Nov 2025 15:00:40 +0000
Manifest next update: Wed 05 Nov 2025 15:00:40 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: I21F2UnNTaL6taklTMs2c65dJlQz9/XWs+WqOulCWms=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6a:26:12:dd:ba:9c:45:7d:8a:9a:af:36:97:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Nov 4 15:00:40 2025 GMT
Not After : Nov 5 15:00:40 2025 GMT
Subject: CN=e688800790b66d323f95af229e0b92096e693048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:ff:e4:90:80:f5:a2:78:5d:1a:11:e2:de:
c8:8a:ad:63:73:7b:03:1b:21:56:f8:96:4d:8f:bc:
de:f4:ea:15:2d:4f:e2:3f:7d:1d:34:3c:d4:47:93:
29:1f:63:9b:3b:f6:0c:7e:1a:94:15:be:29:86:8c:
f0:00:17:81:1f:f1:3d:b6:e4:fa:87:a3:c2:65:2b:
1f:59:18:fa:92:8d:65:22:0c:eb:26:3d:4d:ba:34:
17:03:de:f2:22:3c:55:dc:45:de:6d:6f:f0:22:80:
1b:0a:8d:12:3e:ab:3a:5e:18:bb:5a:11:2d:e2:10:
3c:8e:4f:07:01:e2:53:6d:7b:4a:fb:8d:4a:47:2a:
3f:79:9d:aa:2e:d1:b3:86:31:4c:01:65:22:01:70:
a8:a5:0d:33:be:1f:e7:6b:7f:0e:ce:32:8b:4f:f5:
40:15:60:4a:b1:24:be:8c:21:8a:65:16:ae:00:ea:
5c:24:2a:da:49:35:15:bf:b6:ba:dc:02:ea:ed:00:
72:1e:94:d9:a2:8e:d2:c1:07:63:65:44:af:00:66:
23:d3:1a:23:99:03:71:7d:5e:eb:4b:68:51:5d:fb:
64:47:25:8f:f9:62:59:e9:8a:24:76:43:df:4b:c3:
aa:ac:d2:09:a4:18:a5:3b:8c:ab:96:10:bb:80:8c:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:88:80:07:90:B6:6D:32:3F:95:AF:22:9E:0B:92:09:6E:69:30:48
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4c:62:0b:b8:89:85:fd:58:4e:37:ec:7d:73:72:c5:ba:97:
27:fe:ad:9f:eb:11:8e:a2:ab:c9:e5:1d:18:41:42:e3:51:65:
a8:9f:15:0c:88:88:9f:c2:82:ad:51:1a:44:24:3f:91:a0:74:
ed:b2:57:93:5a:2a:e6:ba:5f:c5:e1:59:53:90:e0:06:92:8f:
71:d5:ff:3e:ed:f7:8a:89:43:f6:c0:ee:48:ca:e7:bf:9c:7d:
2e:df:54:7a:87:8c:41:1a:16:6d:46:21:6c:43:df:e0:59:68:
bb:ff:11:cb:95:5a:7b:f7:19:dc:03:fe:be:8e:49:d6:d1:54:
17:b1:b2:dd:ae:d7:68:38:3c:77:b6:84:d5:18:e9:3a:16:9f:
5c:89:da:95:e1:9c:04:82:7c:ed:61:e6:34:6b:16:b8:e3:ed:
bf:49:46:aa:1d:00:64:b1:d7:07:8e:f8:74:49:03:d1:f7:3d:
dc:54:cc:00:09:a0:d0:03:71:3d:f8:1b:63:a9:d5:72:e3:72:
18:e2:ca:1b:1c:fc:db:7c:b3:ca:2b:97:1b:7e:1a:9a:33:77:
b5:7b:bb:f5:cc:21:61:f9:32:0d:c1:f5:c5:f3:d5:a9:c0:a3:
14:0f:e0:4f:51:d2:2e:e0:ed:99:87:ac:4e:24:4a:55:4e:48:
b3:0a:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:57 2025 by rpki-client