Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: 5OlPnubJeTsGFql/7pAsz0tXyGAwm/XNfEoPCWAgqxo=
Subject key identifier: 4D:FB:22:04:78:3E:E6:9A:25:5C:5E:88:DC:67:91:B7:F2:C0:9E:8D
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019A4EF4A9EEC88D9FE3DA13D761B57F3D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0BC8
Signing time: Tue 04 Nov 2025 13:00:48 +0000
Manifest this update: Tue 04 Nov 2025 13:00:48 +0000
Manifest next update: Wed 05 Nov 2025 13:00:48 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: cV1fPgHHSgFe+CjAC5tmHxmGqivJ4zg8589IPiy+dek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a9:ee:c8:8d:9f:e3:da:13:d7:61:b5:7f:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Nov 4 13:00:48 2025 GMT
Not After : Nov 5 13:00:48 2025 GMT
Subject: CN=4dfb2204783ee69a255c5e88dc6791b7f2c09e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:32:fb:74:35:73:0d:ba:fd:b1:54:ba:84:
72:77:75:a4:7a:cc:e8:e1:16:4d:0e:9b:19:99:76:
8e:31:e5:5c:b3:52:7e:ee:d2:9e:92:36:04:37:d7:
76:08:f4:0d:40:ac:49:07:be:bc:6b:28:ec:df:07:
f9:66:74:cc:58:6a:9c:2f:c7:38:7a:d6:1a:58:27:
d5:af:41:39:2c:81:15:bb:82:7f:10:23:15:6a:b4:
66:65:eb:d6:e6:46:9f:b9:e0:a2:d2:9c:a2:c5:c8:
bc:93:98:62:e3:e6:fa:dd:59:96:47:cc:bc:7b:1a:
1b:d7:85:ba:8e:0c:ed:87:40:ff:69:9e:f0:5c:5c:
9b:b6:8d:76:1b:98:61:16:fc:38:76:f8:fe:de:3b:
10:0d:ff:67:01:70:78:90:b7:a3:4a:e0:ac:aa:92:
e7:d3:36:81:92:00:ad:a3:59:11:12:0b:ce:b2:8e:
bd:97:5b:0e:90:21:cf:90:0e:8f:98:22:3f:af:0d:
49:62:71:9f:19:23:62:e5:29:ee:e8:ef:08:b4:d6:
94:4b:8b:8c:66:56:e3:c1:9a:00:71:dc:ac:9f:66:
7c:59:9d:8d:9b:ab:46:ab:d7:e9:3a:57:03:20:39:
71:f9:11:37:25:85:10:38:85:cd:90:2d:f3:9a:74:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:22:04:78:3E:E6:9A:25:5C:5E:88:DC:67:91:B7:F2:C0:9E:8D
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d0:d1:56:26:23:70:b0:a3:39:86:77:76:ac:c2:55:8a:cc:
53:e1:98:1c:d8:b7:04:3f:75:b4:13:67:93:86:63:8d:82:47:
6c:07:50:1d:8c:b0:f0:53:cd:61:95:ac:d4:bb:28:1e:e7:c4:
9c:58:16:3a:f7:a0:05:a4:f5:a2:e2:bd:9a:d2:2a:60:20:57:
b2:72:6d:e1:95:cd:ca:db:7f:fd:38:db:f7:58:cf:39:d9:fc:
39:90:ef:a5:cc:31:05:b3:ad:6c:fb:58:32:de:d4:40:62:1a:
12:e9:4d:4b:e0:3a:8f:11:19:6e:89:1b:88:8e:54:e8:08:8f:
e8:98:bd:0f:a1:57:ba:99:d8:95:0e:3b:e3:e8:87:7e:68:f5:
c4:42:32:b6:14:3d:25:bf:54:e6:9f:5d:bb:07:6e:21:25:c0:
1f:64:3e:7c:95:1c:38:fb:50:08:40:4b:f7:2c:72:aa:df:e8:
30:38:01:b3:dd:de:77:8a:18:74:7b:14:eb:a7:f3:20:70:67:
4a:7b:ae:e9:f8:6a:29:aa:90:47:96:31:c7:5d:63:08:00:5e:
b1:1b:f5:f4:94:1a:e1:61:4b:45:8e:4f:c1:b9:cd:1a:82:da:
67:57:ae:4c:64:8f:0a:d2:22:9f:b2:39:bb:93:bd:73:83:3a:
73:e1:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:00 2025 by rpki-client