Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: aTtYcmAnFdljvr7lTvUex6QKQ7xh9ucfrO0vdZmRtSc=
Subject key identifier: 0E:57:F7:AE:C9:8D:E8:3D:93:41:58:B8:9A:53:F0:35:B4:94:8D:58
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 019A4E18E048D58B372DB9F202EE461ED2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0C43
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: KPlaq01Tm_7ZQDcSXoByiFXkYP4.roa (hash: pqcUxo+09w1rwwb/a+Pv1KMDwz7jBVowX0NYd3fbC7s=)
3: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
4: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
5: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
6: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
7: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: dqBQmzrYjVL06E805GZKa2QyJAmcXeFVbELTjKHmXe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e0:48:d5:8b:37:2d:b9:f2:02:ee:46:1e:d2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=0e57f7aec98de83d934158b89a53f035b4948d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:40:55:7c:c2:11:bf:72:39:e5:ed:44:da:
c5:87:ee:74:89:d8:1c:ab:95:64:a3:d0:ee:93:70:
c6:ec:1d:7e:44:e1:d0:93:ef:4a:02:97:d6:9e:e6:
43:6e:e5:14:03:fe:dd:d1:d2:0c:b1:6d:19:75:b5:
79:c0:86:36:dc:50:6a:20:58:4c:cd:23:3c:82:c9:
57:93:37:c6:d5:10:51:70:c0:73:4c:ec:d4:b1:b7:
9f:77:66:9d:f3:33:41:33:3d:62:31:eb:fc:ff:87:
9c:a4:86:d2:f2:54:27:57:bd:35:51:7d:e4:95:64:
2f:b0:d0:33:9a:a9:42:62:1d:5d:fc:10:38:7a:7f:
d9:ab:81:9a:2f:26:fc:e0:f7:ea:8c:3f:99:2f:f3:
bd:e7:5b:98:69:0b:d5:60:a3:de:bb:d1:4c:ee:92:
86:96:7a:2e:8f:1b:91:45:31:22:14:1b:fa:40:f3:
92:19:ef:31:3e:14:b1:bd:cc:5e:aa:49:ca:a9:74:
77:b4:47:12:5f:c8:f8:4a:ec:66:8d:1d:e3:21:65:
94:5d:c7:b2:f2:96:3f:81:67:4e:db:60:71:41:31:
94:88:ea:51:2d:68:59:6d:46:ac:5f:56:4c:ad:f4:
a0:78:5e:f3:e2:be:f7:53:91:42:47:5e:46:7f:ab:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:57:F7:AE:C9:8D:E8:3D:93:41:58:B8:9A:53:F0:35:B4:94:8D:58
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:aa:8b:da:e4:93:63:58:bc:89:68:ca:9e:5a:37:d7:64:14:
33:2b:22:2f:7f:c4:38:ba:09:d1:4b:9d:92:ce:f5:1e:8e:3a:
a1:e9:16:03:c0:f2:5c:48:6d:9e:0a:52:13:7c:82:c1:ae:b4:
dd:7d:61:23:1e:1c:0a:93:6e:57:f3:ab:91:10:3e:31:1d:ab:
6a:a5:13:d0:09:24:1a:2f:0e:6d:50:dd:75:28:32:e8:8c:04:
84:a5:1e:c2:8c:9d:c3:90:0a:65:76:b8:f1:bf:55:c7:4b:f4:
9e:fb:ee:f7:24:6e:12:de:ed:86:30:e3:b3:06:3b:7f:87:70:
76:98:69:82:1c:ab:c2:1c:94:b6:c3:81:57:1f:01:46:f0:9e:
0f:a1:d1:76:a5:04:a8:6c:0f:a9:c6:b6:77:95:12:cf:5b:8c:
b7:ec:c3:4b:81:bf:0a:6c:d6:70:97:c0:3b:ad:29:12:a4:3d:
6b:61:f2:d7:cf:ce:73:60:fd:2b:74:47:27:51:f3:00:e5:6a:
66:26:62:fe:0f:50:97:29:2d:a6:55:e2:82:7b:9d:82:6b:87:
26:d8:1d:e2:d8:66:f3:36:77:6b:70:ca:82:b5:c3:08:7e:5f:
4c:c3:eb:ae:a9:04:86:0c:a7:25:46:b5:f2:bd:5a:6d:89:9c:
f6:4b:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:40 2025 by rpki-client