Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: /jxWMex1pt+IRtA9c4uNdl05undSlQh0+eZeJPfp7Gc=
Subject key identifier: 6F:24:93:19:22:D6:FB:55:16:BF:F8:E4:B9:77:B0:97:CE:EA:5D:D3
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019A4DE20629FD6A4F51A7A6C1D3DD7F49C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0EEB
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: XVUYfiih4aWiWEPnHDaC234cYjvF362+BRYei41Vn58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:06:29:fd:6a:4f:51:a7:a6:c1:d3:dd:7f:49:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=6f24931922d6fb5516bff8e4b977b097ceea5dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:4f:43:a7:99:ef:cb:9f:40:56:07:f5:0e:
6d:19:ea:14:b3:89:6a:fc:86:e3:8e:6c:a0:16:61:
3a:a8:ae:3b:29:ac:ab:1d:a1:0b:0f:63:1d:ef:09:
85:94:28:ab:90:4a:6c:b3:77:4f:5b:d7:83:fc:99:
48:49:42:11:cc:4b:ae:2d:f6:97:e9:c6:d6:2d:06:
50:fa:b5:18:ee:f0:eb:dc:e9:80:e7:5c:72:b3:1c:
40:aa:d8:55:3d:09:36:20:08:b5:d7:88:b1:6a:73:
56:fc:c1:a9:72:6d:e1:00:2a:c1:41:17:48:83:00:
34:85:b6:82:08:57:76:9c:a0:7a:77:3b:e3:5e:40:
70:d3:06:66:1f:cc:87:c5:ac:08:38:f8:74:b9:c5:
b6:30:f1:9b:2e:3d:8b:7f:22:b7:0c:4a:2b:fb:3f:
f4:b5:e7:88:79:eb:7e:5a:7c:4e:8e:0c:e3:b8:f0:
19:0a:91:d3:ee:66:3c:2f:d2:cb:64:17:17:fd:74:
dc:b1:4d:1e:66:57:dc:09:a2:1b:99:7d:82:01:34:
24:7a:f6:c9:cd:20:30:61:b6:2c:2f:fb:11:1d:a3:
50:00:22:2c:75:81:7d:e3:c1:a2:f0:d4:03:9c:47:
83:91:c7:3e:45:9c:8f:9e:58:19:34:36:cc:66:2d:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:93:19:22:D6:FB:55:16:BF:F8:E4:B9:77:B0:97:CE:EA:5D:D3
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:03:62:81:2a:f0:85:a5:ff:5d:0d:15:8b:d6:fd:bd:23:84:
30:2c:5f:f7:50:5f:74:5d:92:ee:bf:8b:42:7e:04:da:f7:f2:
2f:54:b7:6d:31:2f:a6:f0:98:e6:eb:7b:da:b5:a6:d0:54:83:
ec:0c:eb:65:1b:b8:a3:0c:c6:17:cf:5f:e4:e9:a8:10:37:d3:
bf:05:5b:3e:41:a4:a8:69:21:21:d0:96:d1:cf:d4:13:91:bd:
de:57:ad:e1:86:75:66:1f:21:be:4f:6b:8e:dc:6e:42:0e:9a:
68:25:48:14:0c:6e:a5:90:ec:2c:3a:f7:a6:0e:32:9f:e9:60:
dd:10:c3:fd:0a:62:7d:e6:49:da:b4:37:61:d9:dc:4c:cd:ed:
64:37:5b:ac:08:e0:59:d3:e0:c1:d7:75:b3:08:a1:33:f0:54:
c3:fa:f8:43:cf:1e:ca:96:66:a2:73:06:6e:b3:9b:5f:02:af:
67:b1:c3:c8:de:8c:8c:64:f5:63:1e:56:63:a4:e2:92:21:3b:
2a:1a:08:ba:1e:5f:4c:67:7a:2f:56:ea:ec:0a:dd:73:8c:7a:
87:6a:bb:45:d6:14:a8:b9:0d:1f:fd:fe:ee:32:d4:f9:a2:b4:
a5:0c:d9:f2:d3:90:5b:20:56:3c:a5:6e:21:77:b6:64:aa:cc:
0e:8b:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:54 2025 by rpki-client