Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: 3WWiaTbGJz+2+hOP0vh/MsfhpPQx1ZFCs399FLUK4Xk=
Subject key identifier: 2F:D1:59:A2:08:B4:19:EF:09:E7:9E:30:C6:16:63:1B:F2:91:8D:79
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 019A4F990CFBB58591C92A194EFB484D591B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0B03
Signing time: Tue 04 Nov 2025 16:00:21 +0000
Manifest this update: Tue 04 Nov 2025 16:00:21 +0000
Manifest next update: Wed 05 Nov 2025 16:00:21 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: siFzXBjy3LPARGzl7DwmArwqMt8BfYJiMlZq1ovGJeA=)
2: IoDHlDbNXO3jlcqfipIcULBON5A.roa (hash: KOgCTDaSahbElR1Ol4oBVrEjOtYhS4W0VzXtKth8BeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:0c:fb:b5:85:91:c9:2a:19:4e:fb:48:4d:59:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Nov 4 16:00:21 2025 GMT
Not After : Nov 5 16:00:21 2025 GMT
Subject: CN=2fd159a208b419ef09e79e30c616631bf2918d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:81:10:8f:bf:ea:f0:20:0b:9d:fb:fa:0c:
13:70:a2:e7:a4:4d:16:c2:a8:5d:71:ab:ce:70:24:
0e:ac:1b:ef:8e:1c:0f:ff:0d:fb:7d:71:f0:3e:63:
a7:6c:c7:e3:1c:fc:cb:52:14:4c:54:f7:97:f2:b7:
47:3d:f0:95:4a:2c:00:e4:bf:9f:73:32:1e:7b:c1:
d1:24:9a:51:1e:3b:d7:68:31:6d:fd:28:59:53:bb:
6a:54:79:30:8a:72:3e:f0:a2:78:6d:d8:b9:43:66:
22:4f:07:2f:96:fe:d3:69:9a:84:20:02:e0:e5:ed:
c7:62:74:fe:e4:ec:37:2b:0b:51:55:2f:03:8a:bd:
3e:b8:96:0e:66:ce:9e:4b:c0:f0:a5:a5:f2:4a:2b:
83:79:eb:c8:c0:c7:aa:ec:ee:3d:b5:44:17:aa:3a:
39:b4:4b:68:89:be:7f:31:a4:cb:f8:ab:c9:11:0a:
97:f5:58:b9:86:29:8c:fc:87:69:ae:af:1b:4b:17:
b6:b8:ad:55:a9:9e:df:5e:29:8d:44:97:f0:3f:50:
7b:05:9e:11:4e:1b:c8:d6:ed:a6:74:0f:7a:fe:1d:
80:d8:21:43:4d:5c:85:57:51:9d:8e:9c:26:17:c1:
5a:d4:a4:8b:ba:46:13:8f:fb:25:00:30:da:ed:b1:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:59:A2:08:B4:19:EF:09:E7:9E:30:C6:16:63:1B:F2:91:8D:79
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:38:3c:d3:8a:e2:30:81:75:7c:54:9d:74:ad:90:3e:93:
8f:82:7c:1e:e9:bb:a4:d1:2e:13:1b:3d:9f:49:18:60:57:d1:
15:f0:27:f3:2d:cb:15:6d:b7:11:f0:aa:36:23:c6:2e:36:4a:
f1:14:99:41:2e:cc:20:25:b2:73:0a:aa:b0:ca:96:ea:44:f0:
1e:c5:c6:1f:02:0d:65:8c:de:fa:c9:38:e2:c6:6a:af:4b:0a:
7a:2f:de:ce:15:26:b9:c1:8c:52:ac:f0:4a:12:d9:a9:d8:3a:
0d:1f:4e:75:68:bc:f0:54:dd:9c:4e:d7:f5:e5:22:e5:16:04:
05:8b:88:b1:e4:b5:f5:f1:55:33:ee:45:00:e1:0f:ec:37:0c:
b9:f3:cc:6c:66:6f:52:fb:f3:4c:1e:52:da:49:26:6f:d6:54:
0b:37:d1:ba:7f:0f:3c:d4:6a:54:0e:d5:31:25:83:33:9b:d3:
47:64:b5:8b:74:e2:28:e5:da:df:f3:b6:e9:93:c3:bd:70:a2:
75:e6:1e:a6:eb:24:be:d8:39:bf:a7:a2:3f:0f:84:06:73:92:
a5:72:20:97:38:88:4e:78:95:18:04:86:08:a4:4e:c7:62:e2:
f8:bd:15:d2:4a:e4:65:25:43:ba:cd:7f:be:15:7c:ef:b8:dc:
5c:1c:cf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:50 2025 by rpki-client