Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier: BM4PrfufbT1lwsrXRFi1Ro8A2oUp3qXF53nn9u0x/1M=
Subject key identifier: 9B:35:8E:9F:05:D7:6B:CF:77:05:A1:CC:43:F4:E1:24:73:71:D9:C5
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 019A50E2CBBA194040F1C6272B7C26357519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number: 0A0A
Signing time: Tue 04 Nov 2025 22:00:31 +0000
Manifest this update: Tue 04 Nov 2025 22:00:31 +0000
Manifest next update: Wed 05 Nov 2025 22:00:31 +0000
Files and hashes: 1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: YuM+D6h1cH25OUnrf8ZTNovj9iVfFWiCYL1VuDZSVDE=)
2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:cb:ba:19:40:40:f1:c6:27:2b:7c:26:35:75:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Nov 4 22:00:31 2025 GMT
Not After : Nov 5 22:00:31 2025 GMT
Subject: CN=9b358e9f05d76bcf7705a1cc43f4e1247371d9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:7b:59:c1:92:28:9b:2a:4c:7e:08:49:ec:
fb:7c:26:84:de:ea:c4:8b:ff:a8:c4:5a:5a:27:e2:
e4:29:6b:ed:a5:56:bd:61:bc:5b:e1:de:16:bc:fd:
57:53:8b:43:d9:d1:9c:a7:c0:71:d8:88:af:a6:9f:
f3:83:e4:24:78:c1:fe:4b:44:c9:77:f8:3e:ed:97:
75:7b:77:c7:a0:3b:28:e9:c3:cd:9d:66:a0:42:2d:
37:9c:a6:3a:c7:8c:6e:75:ae:f2:52:ff:15:4b:e3:
16:d7:7d:81:1a:cf:be:ed:c1:0e:bc:56:3c:83:43:
8f:d8:fd:fa:3b:3c:de:aa:42:48:8e:3b:f8:75:59:
95:fb:54:a4:ec:ff:40:23:5a:45:c4:b7:91:c6:77:
7e:76:79:6f:c9:d4:f3:2b:21:17:8c:0a:a5:9c:17:
bc:63:75:52:35:8d:58:64:15:a6:84:24:f3:af:55:
52:15:fb:39:a1:b0:df:a1:ce:78:af:a8:49:46:f7:
5f:3d:0d:61:0b:fc:d2:a0:69:c3:f7:c4:a7:e6:b2:
38:1d:17:ea:41:02:ab:f3:f0:e7:d1:da:8a:fb:d3:
fb:25:9e:e8:52:4b:52:e9:cd:7e:e7:ec:35:c0:5e:
35:47:ef:e6:eb:76:4d:df:8c:b7:59:83:1e:84:14:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:35:8E:9F:05:D7:6B:CF:77:05:A1:CC:43:F4:E1:24:73:71:D9:C5
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:32:f2:2c:0d:5f:1a:25:af:25:15:6d:b0:d5:dd:18:c3:90:
9a:aa:2e:57:e5:a1:a5:08:c0:2c:54:a6:09:00:87:aa:94:6d:
15:ef:de:4b:b7:a7:ba:72:4c:59:ce:74:5c:ee:ef:9f:2d:2e:
a9:04:be:a0:c4:98:a6:ed:e5:66:66:62:27:90:f2:c7:e2:82:
0e:97:97:49:7e:29:04:2b:2e:d0:a8:74:5f:0d:8d:b6:43:26:
14:66:91:0a:26:b0:d3:84:43:eb:96:35:15:72:95:47:b2:82:
f5:26:a1:9b:9c:65:60:73:c2:0e:7a:5c:22:27:3a:37:1f:f8:
f4:93:ba:9d:08:83:91:8e:1d:51:94:36:4d:85:8a:53:ad:d5:
95:a3:c6:84:3b:8c:13:82:cc:5f:cd:c6:f5:68:98:3c:ee:e3:
cd:e9:0f:7c:19:d4:65:9b:70:3f:89:8e:af:a9:e9:69:89:e8:
d5:54:c9:2c:00:5c:d1:99:8a:02:52:e6:6a:14:a2:b0:53:80:
a7:95:1a:57:a0:ff:ae:56:a3:cd:3d:78:53:f9:09:85:b3:c0:
07:31:5d:9e:1b:45:b5:96:af:fc:68:84:d0:e3:92:ab:9a:ac:
fa:a6:e7:e0:fa:fb:de:6a:1a:90:62:4d:3e:9a:a3:7e:c8:8d:
cf:19:ff:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:50 2025 by rpki-client