Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: LdNTSOu/pJiV4SUCkxjCMnYsQBPYW2Vn2XQACmNiqhE=
Subject key identifier: E3:5E:D5:FE:BA:EE:84:50:79:52:A8:99:69:72:A1:5E:59:E5:B9:CE
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 019A53AD2F6DD65B257DACF959EBE287E2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 087A
Signing time: Wed 05 Nov 2025 11:00:49 +0000
Manifest this update: Wed 05 Nov 2025 11:00:49 +0000
Manifest next update: Thu 06 Nov 2025 11:00:49 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: wUn9RTwzkElVfizOhFGDCi8F8L4EFC4Nmwuqa30M5/c=)
2: GXOLHwEFu0p7gKJgkJ5kY6IvzIE.roa (hash: pAl+GrJaPPBbeJpVI3BoizE0NzXiXcJyNH8QYeo2rB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:2f:6d:d6:5b:25:7d:ac:f9:59:eb:e2:87:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Nov 5 11:00:49 2025 GMT
Not After : Nov 6 11:00:49 2025 GMT
Subject: CN=e35ed5febaee84507952a8996972a15e59e5b9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:d5:31:0a:c7:ce:5a:90:0f:af:3b:f2:c6:
e0:7e:b8:e6:bc:09:38:22:5f:94:8a:83:7f:c7:10:
c3:3e:5e:eb:55:a7:c3:7e:f0:a2:d7:e2:0e:02:f6:
a9:75:49:a4:8d:43:d6:ee:da:02:e4:00:75:ff:22:
47:21:9a:7a:7b:31:79:25:d4:2d:a1:82:92:48:77:
bf:6c:a1:d9:44:c6:4f:40:6e:7f:58:9b:aa:62:31:
64:19:56:11:a4:df:d5:41:37:62:2f:1f:88:a3:96:
b9:2b:85:4d:f1:af:ad:f8:90:fc:d5:71:aa:34:56:
fd:d6:d4:c3:b0:6d:a1:1c:f2:44:19:b7:77:77:39:
47:35:e6:02:1f:b1:f3:c6:3d:c7:33:9b:1c:32:12:
a9:f8:17:07:32:9f:42:62:06:44:6a:92:9c:19:5a:
1f:67:2e:c3:5c:50:98:a5:92:7b:05:93:fa:7c:e4:
11:10:e3:2f:5a:27:b2:cc:22:0c:22:2e:2b:85:1c:
11:9d:c0:7a:99:f2:cb:d8:a2:15:c1:aa:ea:0e:25:
05:d2:3d:a2:22:0a:a8:cc:ac:2a:89:f9:9e:2a:b2:
3c:a9:5e:8e:99:9c:e7:22:c1:f9:ea:b5:f0:36:7f:
aa:3d:e7:b4:3d:a6:c5:9a:c8:38:42:fc:ab:04:26:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:D5:FE:BA:EE:84:50:79:52:A8:99:69:72:A1:5E:59:E5:B9:CE
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:08:e8:cf:5d:c4:83:eb:83:42:13:7f:9c:d6:1c:0a:30:2f:
0b:e4:fd:83:d2:85:04:ff:86:32:59:f2:cd:03:6f:d7:a5:19:
51:a6:6e:d5:77:06:90:91:00:68:8b:24:55:66:ab:cb:6e:d8:
99:08:18:d1:b5:95:07:f4:a5:cc:43:e5:33:01:01:56:aa:75:
a4:49:90:06:2b:89:38:f6:1c:44:7f:f9:d2:b6:52:5c:a3:16:
b1:8e:69:14:98:7e:08:4c:a5:b9:fc:ef:f9:5c:86:21:21:ba:
06:8f:0f:60:4a:c5:7a:a6:a4:b0:0a:34:3c:a6:4e:2c:09:39:
80:e0:5f:d2:b2:9d:2c:58:3f:fe:60:46:67:7f:d1:6c:61:86:
d8:06:21:f1:4a:2d:e1:b8:a2:18:f8:32:68:96:42:11:90:45:
37:1a:43:c9:be:7c:12:0c:93:e2:2a:53:e8:c4:b5:c3:24:8a:
3d:c8:96:bc:56:b3:49:40:1d:c9:99:10:62:90:e7:ab:73:18:
c3:91:0e:e2:82:48:55:2c:c2:6d:08:69:96:e9:ca:6e:d5:02:
b6:49:3f:41:2a:0b:fa:06:1e:7a:8b:46:9c:01:a4:3a:e1:9e:
5d:4b:f1:f6:da:fd:1f:c3:b3:03:37:2a:38:e4:d9:49:36:92:
b7:4c:cd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:23:14 2025 by rpki-client