Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: Je5B0l1tyPv1eeY1jibEup6a7C4Nxp238AnOGA/XIXY=
Subject key identifier: DB:E1:A3:BA:4B:4A:30:07:C7:5E:7D:D0:5B:AA:85:22:F4:C7:75:C4
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019A4D73B30C4BD55E7975D897B39898AE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 067A
Signing time: Tue 04 Nov 2025 06:00:19 +0000
Manifest this update: Tue 04 Nov 2025 06:00:19 +0000
Manifest next update: Wed 05 Nov 2025 06:00:19 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: CWAh/ZvLI1t1sn2tSofsIWFwer/j51R2qUZmEXrcUvE=)
2: wTSz4RaVBPCmK0HhyQREVFlvLYM.roa (hash: wdXTmnLgaVa+d8xmW5YsOirXRbVi1BqCeeIaYwQr+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b3:0c:4b:d5:5e:79:75:d8:97:b3:98:98:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Nov 4 06:00:19 2025 GMT
Not After : Nov 5 06:00:19 2025 GMT
Subject: CN=dbe1a3ba4b4a3007c75e7dd05baa8522f4c775c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:73:38:5f:de:2a:9c:53:19:7e:ea:9b:0d:
b5:ba:a7:4d:b5:44:89:35:00:12:49:70:21:d0:a1:
8a:1f:b7:95:6a:12:b6:5e:52:ac:36:1c:f4:3c:17:
9a:43:97:c2:2a:5f:d6:c5:4a:dd:0b:1e:18:b4:6e:
fc:32:e5:0d:7c:91:0f:1e:75:e2:5d:99:61:d7:6e:
ca:ec:45:1c:5e:df:1a:b6:fb:2f:c1:4a:23:ca:2f:
ba:d3:3c:71:60:37:84:00:63:9a:d5:23:b0:4d:b5:
a7:e4:15:ff:32:7f:41:15:f5:6e:16:74:7f:2a:0c:
2f:4d:37:69:aa:ef:d7:7f:83:dd:6c:00:df:d2:54:
23:17:6b:ee:d6:3a:e1:dd:d6:14:35:8a:f5:b0:1c:
bf:28:39:f4:7f:07:b7:fe:3d:92:59:cf:a6:db:0a:
6e:0e:06:b3:55:3d:26:42:6d:6d:3f:39:6b:28:d8:
d1:98:5c:32:ed:94:7e:88:12:29:eb:83:8d:84:92:
f6:c2:c5:e8:5c:0e:66:7e:48:dc:6e:54:dc:1d:15:
e8:ef:be:eb:e4:34:ff:86:88:22:43:85:07:d0:8e:
60:4b:31:ea:5f:f8:ff:47:a8:4d:0f:95:80:dc:6d:
6b:72:cd:e4:fe:56:e2:ff:9e:c1:64:7c:89:a4:27:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:A3:BA:4B:4A:30:07:C7:5E:7D:D0:5B:AA:85:22:F4:C7:75:C4
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4e:e2:a0:47:bd:91:ea:5c:33:b3:b5:42:c8:0d:b4:6a:cf:
1c:b6:5e:b4:58:02:e1:8c:0f:98:e2:36:62:50:b9:86:0e:25:
8b:6c:cb:06:00:39:bc:3e:2c:4d:12:b2:b7:fa:b2:f0:94:b4:
7f:86:cd:33:c1:8d:b3:2b:c8:0f:de:02:7b:21:f9:08:34:ed:
ac:a6:b3:fc:a4:5b:90:a7:2a:32:0a:d2:99:cb:06:8f:67:b7:
b9:bc:d7:4d:0b:85:6e:00:9e:37:bf:77:9d:da:aa:95:70:6e:
93:b0:50:92:e0:d0:e2:36:8e:f0:cd:48:ec:35:fa:d8:ef:16:
c6:32:39:af:c5:e8:43:c4:55:79:7e:4b:68:cc:54:ab:e7:b9:
d9:8b:c0:49:f4:96:1f:e2:19:e1:c7:f8:84:5c:31:ce:88:3c:
5e:7e:46:00:e5:6a:69:67:15:c5:e0:83:d2:ef:a7:2f:b1:d3:
e1:1f:e7:bd:71:37:36:65:bc:9a:b9:58:ab:c5:f4:64:ed:a9:
02:74:dc:e1:04:4a:1b:eb:9e:bf:f6:5e:ff:d2:76:d9:a3:07:
c7:93:a7:12:74:ea:81:b1:a8:89:e0:f5:44:6d:c1:cc:71:ad:
11:83:d3:3f:5f:f2:ab:07:79:db:d3:50:82:37:60:03:1e:1d:
a0:b6:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:42 2025 by rpki-client