Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File: DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier: pmio7FT+lbuOhr5P3LxS96FkLspGx4CjRCIScxOER0E=
Subject key identifier: 6A:0D:FF:57:56:8E:1D:75:FA:8B:D3:0E:A1:E0:25:31:62:D6:D1:91
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 019A54C08DAAAAA542AA7B50431FD37502A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number: 0E3F
Signing time: Wed 05 Nov 2025 16:01:36 +0000
Manifest this update: Wed 05 Nov 2025 16:01:36 +0000
Manifest next update: Thu 06 Nov 2025 16:01:36 +0000
Files and hashes: 1: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: FImndr1vCer58su0MCgiR4ud+BnMYY5cY8CWTwo+oJ4=)
2: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (hash: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:8d:aa:aa:a5:42:aa:7b:50:43:1f:d3:75:02:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Nov 5 16:01:36 2025 GMT
Not After : Nov 6 16:01:36 2025 GMT
Subject: CN=6a0dff57568e1d75fa8bd30ea1e0253162d6d191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:95:91:14:f6:0d:29:5d:53:8f:bc:d3:b7:
24:00:f3:d6:11:bd:8f:3a:27:3d:d4:ca:90:b7:7e:
0f:2a:66:f5:75:d1:79:ab:c0:9f:91:95:54:d5:45:
27:0a:44:e8:17:f0:8a:36:64:ec:68:83:ea:3e:ec:
f5:e4:d0:34:e7:10:15:9c:f4:73:6a:f8:07:a8:16:
ab:9e:70:6b:e4:5e:9f:d1:a4:06:52:f8:b3:4f:79:
cd:fb:e1:08:d0:4d:fe:66:6d:c1:3d:eb:98:1a:1c:
61:fe:69:52:2b:1a:36:03:77:cc:94:64:71:ea:a8:
4f:36:c9:fd:e5:b2:ac:3c:1d:ef:15:78:34:ef:3e:
e4:c1:36:d6:9f:ec:e7:38:fe:1e:01:d8:00:60:96:
f3:b3:8c:af:f5:12:29:59:7f:06:92:77:c7:ae:53:
1b:90:d6:df:99:7d:f3:dc:82:eb:57:cf:50:ee:0f:
39:fe:e9:68:9e:c3:ee:75:cd:57:5c:60:e6:39:6b:
30:9f:f4:7f:04:83:51:9f:e9:fb:af:58:17:af:82:
c7:35:64:d6:72:0b:c5:47:10:93:fc:1d:28:ad:03:
47:98:a6:26:fc:69:9b:4d:19:ce:3b:dc:1e:4f:17:
da:c4:a1:84:db:ef:d8:6a:e3:42:60:a4:e1:7e:08:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0D:FF:57:56:8E:1D:75:FA:8B:D3:0E:A1:E0:25:31:62:D6:D1:91
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e7:ea:c6:74:57:46:7c:3e:e0:36:a1:79:e0:17:20:53:20:
f6:83:ad:cf:5a:84:7d:1e:9c:30:7b:f5:a0:86:98:53:02:0a:
b4:fa:2a:64:ba:46:1c:d8:06:ab:40:11:78:32:59:69:bd:e2:
f5:4e:a2:1a:37:c3:4f:de:1c:02:bb:9c:bd:06:cd:e1:a8:0d:
a2:77:3d:49:98:95:9a:9a:49:8d:ae:c1:8f:58:d2:27:7f:c4:
8f:aa:94:84:a8:b5:7f:5e:c3:dd:09:4d:6b:24:c6:b1:05:ce:
9f:79:8b:6b:41:7f:b8:ae:7c:a8:5e:b0:f9:56:45:ef:4e:a2:
58:1c:df:93:e3:48:89:59:29:f2:94:32:2b:10:ec:ff:ea:b2:
0f:cc:6e:18:46:3d:90:9b:66:b3:cf:28:fe:1e:3a:b3:c0:5e:
0c:fc:87:4c:bf:16:1f:fd:29:39:6c:0a:34:4d:ce:3d:cb:0a:
5f:df:1d:b9:7e:64:97:e7:74:94:99:25:df:f0:77:e9:3c:67:
e3:c5:f2:95:d2:57:ff:01:35:95:a1:4f:00:35:d2:ab:01:1c:
4b:a3:32:c2:61:76:36:98:08:e1:5b:38:8b:e6:a2:28:7d:01:
75:cc:7b:cf:33:91:0a:1f:ad:42:70:08:08:75:bf:a3:1d:ff:
ab:a7:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:05:54 2025 by rpki-client