Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: qt5T8lMS6ESflGazvU/y8ke2I1lOqKoeLAKcS9sjit4=
Subject key identifier: 3D:9C:0A:1E:C2:56:AE:CD:24:97:9A:DA:40:F7:84:13:CF:FD:67:A1
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019A4E4FE6427169D011B02862641F2ECB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 03EF
Signing time: Tue 04 Nov 2025 10:00:50 +0000
Manifest this update: Tue 04 Nov 2025 10:00:50 +0000
Manifest next update: Wed 05 Nov 2025 10:00:50 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: i8ILSrY3kULaZhM2YjOmuzfsBhkbeFbTjMl0tESXdoE=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e6:42:71:69:d0:11:b0:28:62:64:1f:2e:cb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Nov 4 10:00:50 2025 GMT
Not After : Nov 5 10:00:50 2025 GMT
Subject: CN=3d9c0a1ec256aecd24979ada40f78413cffd67a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:ff:78:7a:b1:08:6f:03:14:07:79:cb:c1:
62:9e:f3:3e:f6:bb:bc:c1:eb:0b:97:a9:6a:63:3f:
6f:2d:c8:28:14:67:ef:db:5f:d0:8b:98:d3:1f:b0:
49:38:1d:23:00:d8:ea:0d:6d:ad:5e:73:83:ef:0c:
67:2c:f8:7f:2b:fd:af:34:af:fa:95:7c:fc:c5:4f:
4a:53:d4:ba:97:d4:7f:c8:ea:52:72:5e:6a:79:d8:
75:f7:ec:eb:80:08:22:54:d0:60:b9:1e:0a:03:96:
25:59:0b:ad:52:49:7b:af:d7:cd:db:76:d4:0d:57:
76:58:20:ca:94:23:59:16:71:c0:a0:02:d6:0e:13:
47:1d:16:1b:ca:88:9d:cc:4f:c0:f8:80:d2:e7:84:
d6:d3:fb:f2:04:82:16:0b:d5:c7:2a:c3:1c:e3:e1:
33:0c:cf:ae:ca:3e:4d:7c:0c:f9:1b:24:a2:fe:67:
d7:05:5d:24:10:04:a9:63:28:15:cb:69:51:21:2d:
16:58:ca:7f:78:38:f3:7e:88:d1:84:82:65:d0:63:
90:b4:9f:32:c4:d1:b5:38:87:fa:3d:c8:d0:61:28:
ad:a1:23:45:34:df:b4:aa:e6:73:64:a3:c7:57:89:
29:de:5d:20:fd:a7:1d:74:21:58:24:39:dc:ae:8c:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9C:0A:1E:C2:56:AE:CD:24:97:9A:DA:40:F7:84:13:CF:FD:67:A1
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:3a:1f:ee:59:a8:9f:24:f5:27:f4:10:c7:63:1d:09:c7:
00:c8:ff:27:f8:33:27:88:75:db:a1:8e:2b:82:61:b6:42:36:
da:d7:d6:2e:83:e8:d4:1f:8a:53:12:46:68:62:08:ae:ea:e8:
1f:55:4b:e5:3f:a9:88:1a:87:9e:c2:05:0a:3c:e4:49:ea:43:
11:3c:16:5d:8f:9e:10:c4:1b:c9:af:5f:2e:60:0c:63:19:33:
0f:ed:ee:2b:b1:85:91:8f:b6:ec:12:c7:5a:ae:d5:65:72:cb:
88:e4:f4:d3:13:ec:60:94:c8:a8:71:b4:ef:be:3c:3b:bf:c6:
43:29:ba:62:6a:a6:76:a1:80:b5:98:ba:5f:03:84:a5:0d:a3:
54:bd:02:87:65:c9:70:4f:dc:f1:73:0e:d8:dd:e5:dd:3e:c4:
2a:ee:b5:b9:86:fd:82:ce:93:c8:10:09:20:c4:0b:41:b1:1a:
57:ae:67:52:e7:c4:56:f8:49:32:ab:ac:0f:5a:66:ca:64:88:
8f:ef:a0:e7:7a:3a:80:98:cf:a7:cf:37:b1:ee:1f:0d:33:6f:
d7:84:09:b1:f6:8a:a0:04:07:d7:e7:71:e1:86:66:6a:df:95:
75:13:56:d7:c2:a7:65:dc:27:4e:70:ef:c4:ec:7f:58:79:bb:
b5:1d:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:14 2025 by rpki-client