Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: shNfI4L3aXpd8MZItF+9McIRa2rUgNoUcmldZtSD37k=
Subject key identifier: 1C:D7:33:4F:0A:56:6F:90:A0:B7:55:CC:64:2C:98:85:69:E2:EE:82
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019A515124AC92B2694E94CCF84393BAEA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0DBD
Signing time: Wed 05 Nov 2025 00:01:03 +0000
Manifest this update: Wed 05 Nov 2025 00:01:03 +0000
Manifest next update: Thu 06 Nov 2025 00:01:03 +0000
Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: 1N1Utmj/U+EHD2CEE1GZE9T8ztcQFPQ9H7J/+6pFHUw=)
3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:24:ac:92:b2:69:4e:94:cc:f8:43:93:ba:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Nov 5 00:01:03 2025 GMT
Not After : Nov 6 00:01:03 2025 GMT
Subject: CN=1cd7334f0a566f90a0b755cc642c988569e2ee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:9f:3d:71:d3:b9:c8:76:3b:71:8f:07:22:
a8:9a:25:6b:9b:4e:2d:75:55:0a:58:56:f7:6f:83:
77:0c:08:b8:56:3a:03:b1:b9:15:13:11:9c:19:2f:
dc:56:5b:5c:76:0e:09:f7:b2:f3:a7:22:97:19:9b:
3f:0f:b7:20:ba:67:4e:47:c0:78:c2:a8:e7:8a:2b:
91:0f:1c:75:41:bd:81:c7:7d:0e:d8:47:ae:fa:59:
43:c0:3c:f6:43:3a:a9:20:ac:03:4e:4f:ea:43:f1:
2a:7f:c1:24:76:35:66:22:3f:6a:2b:04:25:42:f9:
45:0d:d3:69:34:62:a7:94:d5:40:89:ab:81:b3:f3:
11:47:34:9e:02:07:9f:6d:d3:3b:fc:d6:dc:3d:b5:
6d:25:53:f8:58:ef:da:48:26:a6:f5:22:94:e2:53:
cd:b1:ac:bb:3c:7c:8b:ff:2d:8b:ef:50:c2:2b:3e:
87:a1:04:72:bb:ac:ac:bb:53:7f:0e:f1:9d:79:fc:
7a:05:e0:95:2b:f1:97:33:be:22:c8:d9:27:0f:58:
89:cc:51:dc:d9:c9:b5:de:e1:28:74:1e:09:48:1c:
24:c0:b3:ba:ef:42:24:38:f3:86:07:d7:17:f3:10:
fa:e3:7d:14:88:91:cf:0b:bd:49:f5:b6:a9:02:36:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:33:4F:0A:56:6F:90:A0:B7:55:CC:64:2C:98:85:69:E2:EE:82
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cc:47:39:63:08:f1:91:63:08:2a:79:b5:15:a0:f8:0f:4a:
51:2d:10:b9:2f:0d:dd:91:ed:3d:96:f5:71:8d:fe:65:09:d1:
ee:c5:de:eb:4d:51:fb:3f:e4:ea:d2:ce:32:a7:0f:c4:ec:8f:
f4:4e:c5:4b:e8:b9:3a:c8:e9:4f:cd:5e:da:e8:93:fd:d4:85:
0e:ae:16:ec:eb:35:1b:1c:38:d2:9d:db:99:df:06:6f:7a:45:
0e:68:ef:3a:6f:d5:52:25:0a:fa:bd:55:89:28:af:20:2b:0c:
74:68:0e:66:66:b3:a7:71:97:26:93:b3:e8:12:6f:07:6c:6a:
70:fd:6c:de:3c:54:61:f7:23:4e:18:39:5b:dd:75:23:dd:ee:
d4:36:2f:d3:ee:30:61:bd:ce:21:73:a4:f5:50:8b:c0:d0:13:
26:09:1c:6d:fd:3d:ca:e2:3b:e4:28:6d:46:58:28:2a:d9:18:
cb:b1:d5:98:8b:89:e0:3a:7c:d9:3d:d6:66:25:99:0e:21:fd:
7f:e6:73:eb:2c:3d:d6:de:81:d3:a9:03:f7:a3:d1:ad:19:f0:
a2:59:73:90:18:f9:f8:4e:c6:00:60:e5:01:8e:ae:b3:a9:00:
82:a7:2d:7a:f8:97:08:76:fd:7a:49:80:6f:1d:7e:f9:53:57:
7a:1b:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:25 2025 by rpki-client