Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: R39Fj+JFzxLAa2L73267T4owm/sVLfP/qH6JP5+avVw=
Subject key identifier: 5E:36:BF:09:8C:07:5F:81:A8:D0:15:94:75:5B:35:C6:0B:03:D7:68
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019A4DE1611306D9DEB2A493E3C2F724835A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:07 +0000
Manifest this update: Tue 04 Nov 2025 08:00:07 +0000
Manifest next update: Wed 05 Nov 2025 08:00:07 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: G0dyIpv8a/Nz6X1tF/RHY20zFtaG5vxnXmDQIVsweBE=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:61:13:06:d9:de:b2:a4:93:e3:c2:f7:24:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Nov 4 08:00:07 2025 GMT
Not After : Nov 5 08:00:07 2025 GMT
Subject: CN=5e36bf098c075f81a8d01594755b35c60b03d768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:11:a0:4a:a3:8f:8b:88:66:7a:d9:25:ae:
68:0f:73:da:ec:d8:56:32:14:33:4f:53:61:0e:b2:
00:4d:7f:1d:8c:37:c8:a5:7b:66:4f:83:3a:6e:5a:
66:ce:55:bb:3c:ae:31:a5:12:6b:81:03:71:ea:3c:
87:4a:74:93:d3:bc:2a:37:24:c4:71:3c:99:ca:48:
4a:02:98:7c:93:2f:cf:b9:cb:8f:b4:40:97:04:3d:
91:2e:13:98:af:41:2e:4b:c1:93:4b:50:07:93:28:
ef:2d:27:f3:fe:3f:5d:c2:7d:6c:86:62:00:e8:50:
77:fb:5b:f1:db:64:ff:18:a9:6e:25:f5:52:11:d6:
9f:50:2c:3d:28:98:24:bb:78:48:de:10:80:78:57:
dc:75:73:6b:e1:b7:07:67:56:15:cf:0c:66:88:b7:
e6:5d:c5:85:df:ea:7a:66:7a:43:5b:64:56:9f:cf:
2b:5a:fb:36:97:12:f0:85:8e:55:3e:2f:42:e8:85:
80:db:60:41:12:53:c5:f1:00:e0:ca:b6:24:0d:b4:
72:dc:e5:56:a6:fc:47:05:0f:e4:ac:c6:70:a2:18:
46:78:b8:29:2f:30:57:9a:72:c9:c3:32:43:95:01:
1d:93:98:aa:d2:ff:12:b0:da:2c:6c:3a:3b:20:dd:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:BF:09:8C:07:5F:81:A8:D0:15:94:75:5B:35:C6:0B:03:D7:68
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:33:87:5b:04:1c:82:28:ac:60:27:7f:4a:c5:1a:d7:da:28:
4d:dc:3f:de:5a:35:1c:29:e5:f6:bb:28:1b:30:dd:dd:09:fb:
f1:2d:71:4a:d3:09:71:29:25:1f:b3:f5:b0:fd:08:51:ba:46:
8a:e2:b0:f2:1f:52:4f:a8:c8:02:ab:25:79:4c:51:50:0e:a3:
a2:a3:9d:27:b5:da:13:d7:22:d9:a2:7c:48:df:c9:f5:4f:90:
8b:57:11:92:27:88:e6:0a:73:64:55:dd:93:05:cf:c4:4f:2b:
42:ba:ba:57:78:5e:54:c3:80:ff:64:6f:88:02:29:be:f3:95:
66:83:88:8b:6b:6f:c0:0d:62:52:17:29:e4:5c:53:b8:e6:aa:
9a:ca:6a:6c:33:8e:99:11:4c:84:9e:42:45:83:c6:1f:08:81:
e6:eb:a1:55:b4:f8:8f:cf:57:ea:bd:70:90:e3:da:44:84:f3:
73:9b:30:9e:19:4f:20:94:9a:3c:2a:7d:cb:5a:61:e0:7e:ff:
5a:14:92:05:23:4b:fc:52:d3:48:ff:80:fd:a2:76:8c:96:09:
7a:dd:76:ac:c1:97:43:a4:01:81:9f:90:ab:c2:df:0b:65:77:
0e:79:8a:17:e6:11:5e:4b:3e:7f:fb:77:d1:a9:b8:6c:1a:2d:
a3:40:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:20 2025 by rpki-client