Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: Vs6qEw4XC3h3/Pt+tKPxtpMA+UtmgMoAoERDpDCU7Ig=
Subject key identifier: 3B:38:49:6B:B5:E9:7A:E5:4D:42:C8:C0:D0:88:D4:A0:3A:24:9F:18
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 019A533EAE2988674DF7242BA8813B3ACD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 02B2
Signing time: Wed 05 Nov 2025 09:00:07 +0000
Manifest this update: Wed 05 Nov 2025 09:00:07 +0000
Manifest next update: Thu 06 Nov 2025 09:00:07 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: jJPx3dAXxGGgydYcZwlzFttlTTOA4E1wP7/nZq1FPiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:ae:29:88:67:4d:f7:24:2b:a8:81:3b:3a:cd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Nov 5 09:00:07 2025 GMT
Not After : Nov 6 09:00:07 2025 GMT
Subject: CN=3b38496bb5e97ae54d42c8c0d088d4a03a249f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:6c:85:fa:c2:7a:7e:19:a9:84:c8:a7:1f:
84:95:df:9e:06:68:03:a8:03:c1:77:6d:65:00:f1:
20:1f:57:89:bf:39:9e:f4:36:7d:cd:3c:ee:62:dc:
52:bc:92:1c:23:4a:a0:c9:1f:88:10:57:8a:1c:c3:
ae:5a:81:d2:9b:9d:06:5c:61:df:b0:fc:5d:63:11:
11:2a:c4:ba:ee:2b:21:4a:e4:73:92:27:4f:44:b3:
37:ac:f8:ae:ca:ab:68:f1:8f:bb:51:46:3c:f9:c1:
07:02:c6:ac:24:d0:1f:36:31:8e:0d:cc:31:91:c3:
8a:82:a5:f2:49:fe:14:4b:c0:23:21:3f:0f:01:43:
8d:7f:45:b4:68:85:33:98:88:3c:62:6a:25:dc:ad:
42:15:88:f2:68:21:83:08:e9:50:3f:94:4b:8f:a5:
e5:f1:c7:88:c2:92:54:f6:8c:c8:8a:d1:fd:34:78:
ef:67:0d:d7:fb:61:67:85:49:c1:e2:8e:59:23:5b:
61:92:7a:be:d7:0c:87:c9:6c:d2:b9:61:f1:04:76:
61:2e:ee:89:ff:10:4d:da:75:03:13:90:b0:2e:6f:
e9:38:98:82:25:f5:02:a1:03:ea:e9:c8:4f:25:6c:
c9:38:b5:7a:26:8e:5d:ad:b1:51:95:e7:fd:f1:e6:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:49:6B:B5:E9:7A:E5:4D:42:C8:C0:D0:88:D4:A0:3A:24:9F:18
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8f:39:8c:de:88:98:64:36:d1:6a:a7:a4:c5:c8:9f:35:df:
24:2a:b5:e5:d3:5a:5f:c3:b3:b0:c8:f4:dd:d7:62:df:75:1e:
64:dc:e9:bf:e3:9e:3c:f8:78:32:ba:99:8d:68:a8:58:e4:72:
4b:e2:34:7f:48:82:84:37:4d:d9:af:6d:b4:46:a3:0a:45:37:
30:f2:c2:bf:ed:61:dd:95:55:3b:3a:6b:45:9c:3b:ee:dc:0b:
cd:31:b5:15:c4:23:62:9b:09:44:b0:eb:3a:0f:39:3a:9e:d5:
ce:1b:e0:c4:cc:b5:31:cc:22:e5:fe:aa:b7:d2:5d:8b:42:c3:
53:6e:91:50:d6:48:90:82:3f:43:6f:a0:80:ac:f3:b6:29:bd:
50:25:a2:35:bc:e3:02:18:8c:3e:fc:c3:72:a4:12:f8:07:55:
bc:71:0e:2a:e0:27:89:75:b2:3d:9d:31:13:aa:f2:4e:35:1b:
9e:49:8d:0a:ec:68:a6:54:cc:17:64:39:30:63:de:c5:f5:ac:
d2:77:52:25:b7:1e:d4:53:9c:a4:ef:13:36:35:01:6c:55:10:
b4:89:22:77:a2:d2:a2:59:18:3c:c5:1b:8f:ad:21:18:70:3d:
86:30:84:f3:08:b1:a2:72:ed:dc:a8:6d:34:79:89:a8:db:71:
fa:aa:d1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:16:55 2025 by rpki-client