Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: ANYgs+82oprvowbQ6QFaQ77Js8n1acb/285nE4tcKW4=
Subject key identifier: E9:56:13:46:AD:74:0E:C9:B1:F4:13:DB:B7:7D:36:6F:9E:2A:C3:33
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 019A4EF53C1BE0FB10FC92B41345D46B9E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0B4C
Signing time: Tue 04 Nov 2025 13:01:25 +0000
Manifest this update: Tue 04 Nov 2025 13:01:25 +0000
Manifest next update: Wed 05 Nov 2025 13:01:25 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: +CG/IFpXX5iTMi79ZapdQwxBFU0yOor9+LRzLbVC0ks=)
2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3c:1b:e0:fb:10:fc:92:b4:13:45:d4:6b:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Nov 4 13:01:25 2025 GMT
Not After : Nov 5 13:01:25 2025 GMT
Subject: CN=e9561346ad740ec9b1f413dbb77d366f9e2ac333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:f4:8d:30:52:20:e7:69:7d:ad:3b:43:08:
08:cb:f7:eb:d4:5e:ef:1b:cf:bc:99:b6:2d:82:b1:
14:1d:97:b6:94:55:73:fb:21:60:39:3a:9a:7f:d0:
5f:11:bc:22:8d:35:09:f1:4d:2d:3d:cd:44:4e:e7:
06:f9:bd:ad:7b:51:95:bc:29:06:54:ab:42:42:7e:
7c:3f:73:dc:ac:73:94:78:78:b0:42:a0:5a:53:0d:
e1:55:11:fc:55:6d:b7:d1:9c:1d:7e:85:80:dc:60:
af:bc:4e:95:f1:b3:53:09:d0:a1:90:54:ca:04:85:
8e:95:80:81:92:5b:40:55:43:f2:7a:a7:04:04:11:
3b:10:b8:5e:de:45:fc:66:d9:38:e3:78:94:74:d0:
e4:0f:29:e9:36:f9:b8:15:d0:61:c5:dd:52:87:1a:
9b:62:a0:85:12:99:b5:be:dc:9c:54:ea:8b:fe:b5:
5f:2c:da:32:ac:a6:20:58:88:f1:c2:bb:e9:a8:6b:
54:d0:27:67:17:f0:1f:d6:20:fd:a2:41:02:f7:40:
20:29:00:a2:83:11:06:78:c4:74:5c:0d:a7:c4:63:
57:44:fe:63:e8:af:80:54:42:0e:ed:63:62:77:07:
a9:b0:15:e4:bf:ba:bd:a1:c4:b4:c2:86:ca:1b:c3:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:56:13:46:AD:74:0E:C9:B1:F4:13:DB:B7:7D:36:6F:9E:2A:C3:33
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:06:20:0f:7d:78:59:47:a7:b8:02:b9:fc:45:d0:86:cc:c2:
c2:bd:22:ab:f8:96:c8:47:7a:16:7f:55:94:02:1c:f5:c3:2b:
59:5c:01:e7:fb:67:5f:cf:1d:1b:70:24:96:8d:df:ab:03:73:
72:2e:1a:a9:fb:74:70:d2:17:f7:5d:be:ac:41:5b:0d:c5:24:
b0:62:71:2e:86:58:d2:52:1c:88:4c:19:6e:5e:5b:3c:2b:a7:
c0:bf:a7:3e:62:9d:19:9b:b4:16:4e:bb:7a:18:d6:2d:3a:13:
79:dd:20:35:87:a1:a0:bb:43:a5:f9:b2:81:6b:e4:33:69:9a:
b2:37:8b:78:b7:b7:4f:8f:6b:1e:3b:64:00:29:f2:1e:a4:39:
b1:56:00:f4:06:aa:db:8d:45:bf:ae:7e:5c:20:97:7c:02:55:
78:ff:8d:aa:73:9b:f2:83:4f:eb:b9:37:97:08:5b:14:24:00:
eb:3f:62:50:a1:ef:24:33:2a:5b:b1:fa:85:6e:ba:19:ea:de:
dc:d1:ef:90:27:81:ab:df:39:44:66:a2:27:20:8e:97:d9:45:
61:4e:74:b9:da:7e:40:dc:fa:e6:17:ab:dc:29:f7:71:cc:5a:
9e:90:f8:bc:53:2d:d5:87:8f:75:5a:21:e8:21:17:5c:70:ea:
88:9b:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:39 2025 by rpki-client