
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: avfTAljb3a3opvWOvrtD4yR8a/N1W46q5r+1LZTw/Bo=
Subject key identifier: 46:30:ED:23:8B:E0:09:81:22:4A:56:FC:33:4E:DE:77:D9:A1:E5:47
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019A5119D25FBA951ACB6100A0364775247E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 0524
Signing time: Tue 04 Nov 2025 23:00:37 +0000
Manifest this update: Tue 04 Nov 2025 23:00:37 +0000
Manifest next update: Wed 05 Nov 2025 23:00:37 +0000
Files and hashes: 1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=)
2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: eQAaxI3TQzET1AonqDN+P/ofG9naPAhuX4AyKjUS7NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:d2:5f:ba:95:1a:cb:61:00:a0:36:47:75:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Nov 4 23:00:37 2025 GMT
Not After : Nov 5 23:00:37 2025 GMT
Subject: CN=4630ed238be00981224a56fc334ede77d9a1e547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:50:8f:2a:3e:3c:7b:fc:3d:7b:e9:c8:9e:
62:c6:d1:f3:82:68:e2:9d:a4:1e:da:9e:f1:83:e4:
b1:cd:6f:20:d1:1f:a5:72:1a:52:d1:e1:d4:2a:a6:
c5:e9:3c:fe:bf:61:63:fb:ec:24:81:4f:69:47:96:
2f:30:68:cd:bb:3d:b2:8f:ef:55:3a:cb:0d:ff:23:
39:b5:5e:c0:a7:24:cc:8c:e5:39:2e:bc:4c:04:60:
5f:5d:54:61:94:70:51:a5:e7:65:f8:40:20:b3:69:
ab:de:9c:6d:b0:7c:c4:be:ee:fe:2e:b4:6c:07:79:
29:c2:c7:de:d4:7d:cf:0f:15:81:92:7f:6a:94:b1:
60:9d:5e:d3:6d:67:4f:b2:e8:18:9a:51:93:c7:a2:
19:dc:f4:01:fc:fd:28:f2:c8:56:23:13:c8:8a:c0:
ba:d8:49:37:88:96:92:3a:90:3c:02:94:69:35:97:
f5:10:fb:fc:fc:1b:3b:42:7b:63:21:2a:a8:72:27:
61:52:07:57:a9:57:3a:62:40:89:a8:40:46:ed:f4:
53:f2:99:04:08:b5:43:fe:52:36:09:d8:c7:9e:3e:
a5:a1:b2:8e:f4:72:e1:f8:c5:e6:23:12:bf:10:9e:
1f:0a:07:96:aa:98:ac:8c:76:7b:df:f0:42:20:41:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:30:ED:23:8B:E0:09:81:22:4A:56:FC:33:4E:DE:77:D9:A1:E5:47
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d5:ea:d5:bf:25:dd:5e:10:3a:44:04:aa:4f:61:54:b2:3a:
8e:b2:74:75:28:d0:39:a4:12:89:cd:96:f1:7e:b6:83:4d:eb:
77:9f:b4:e8:05:ad:bc:5a:64:b6:6c:99:85:64:3f:d5:00:29:
b8:76:92:4c:2e:e1:09:7c:d5:25:f0:25:68:30:75:03:aa:b0:
a4:a9:26:2f:d2:2c:66:c7:f2:d5:6a:2e:93:25:c0:75:3c:db:
41:e2:64:23:b8:9b:10:a0:9b:f4:00:ec:a4:04:c5:c4:42:35:
56:4e:29:7f:50:17:3b:f7:d6:c0:5c:6e:a4:05:c2:71:3a:0a:
a9:ab:b8:29:e7:dd:2d:a9:44:5d:6a:54:f6:1e:e6:cb:6a:30:
40:ae:b8:66:00:82:cd:4e:40:13:99:00:5e:09:01:99:35:14:
a2:0d:cd:6a:4b:69:ce:2c:a4:17:e9:19:76:57:59:4a:9a:a3:
26:81:c1:d7:4c:58:e3:8a:59:17:b0:59:d8:2c:33:82:91:ad:
7e:0b:9d:e8:c8:bf:2f:c5:18:27:a7:96:9f:14:1a:99:59:cd:
f8:a9:b4:f6:75:a0:df:5b:e9:ae:6e:22:e8:b8:3b:7c:e9:db:
6d:11:b7:45:13:ba:c5:24:c5:e5:6e:20:ee:ca:a1:8f:bc:6e:
3a:18:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:25 2025 by rpki-client