Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: po7imvX4tOSA7xrz3B/yNgXhOAtTos9O0jSXMdCXXUM=
Subject key identifier: B2:96:F8:E5:9D:B5:47:11:6A:92:96:25:E6:99:76:A8:53:B7:B1:82
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019A4EF45237464116FFE37C589D110D96E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 13:00:25 +0000
Manifest this update: Tue 04 Nov 2025 13:00:25 +0000
Manifest next update: Wed 05 Nov 2025 13:00:25 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: DBPiHreXwE9ZK5ALPo6vBpt8+y79FllywJaSHSTt4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:52:37:46:41:16:ff:e3:7c:58:9d:11:0d:96:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Nov 4 13:00:25 2025 GMT
Not After : Nov 5 13:00:25 2025 GMT
Subject: CN=b296f8e59db547116a929625e69976a853b7b182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:d3:95:06:b6:62:a8:9c:20:70:78:ee:50:
6f:29:57:73:c0:87:33:5b:55:81:45:34:41:47:e4:
01:24:95:2f:ff:c0:40:68:48:be:5b:a3:2d:7d:e2:
d6:ce:51:95:98:4f:c4:19:87:c6:30:ec:78:eb:2b:
2e:3a:ef:bf:c4:d4:5f:d6:f1:20:ba:d3:b2:0b:74:
90:ad:08:5e:13:15:bd:9d:1b:ce:a9:fe:1e:d4:31:
6d:58:3b:9d:c8:39:dc:1d:be:84:d9:f4:b5:ad:07:
95:d2:fc:19:a6:bf:1b:33:ad:31:5a:fa:79:f8:4f:
22:51:26:4a:1c:cd:c7:0a:dc:90:45:6d:36:66:e2:
b3:97:86:5f:43:48:e4:8d:e9:92:5f:0b:54:08:73:
8e:bc:d6:74:84:1c:54:6f:ee:c4:aa:4e:46:2b:b3:
6e:52:3f:a1:ad:28:33:d7:44:be:69:d8:d4:ed:09:
09:27:ef:f9:3a:bf:f2:5b:1c:ce:64:81:9d:69:54:
e7:ab:3c:6c:c0:96:16:43:2f:ef:53:95:12:98:1a:
81:bb:1b:af:04:8e:fd:8a:0f:ac:79:1b:14:9d:fb:
ca:f6:d7:28:10:91:2b:4f:94:fc:a7:96:16:3e:94:
db:dc:4f:cf:bb:71:57:1b:a7:bd:2a:3c:e2:80:67:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:96:F8:E5:9D:B5:47:11:6A:92:96:25:E6:99:76:A8:53:B7:B1:82
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2d:4b:8e:28:4d:b8:0d:a9:36:f5:ee:36:f4:96:54:11:1e:
79:64:f4:24:4f:cd:6d:59:47:65:63:74:36:db:33:df:15:0f:
6e:6d:f8:4b:78:5c:32:45:0d:e0:80:b5:9a:bd:62:b7:af:cc:
7c:d6:3a:16:8d:36:60:f6:46:a5:43:a4:7b:d1:b5:d0:ef:95:
ba:0c:36:02:eb:66:d1:20:6e:89:d5:3d:98:58:a6:ab:fa:eb:
7b:b4:50:3f:c2:cb:05:f5:f9:09:1e:1c:a9:49:c9:0c:92:7f:
4d:f0:ee:4b:aa:3b:25:e7:05:3c:47:0c:75:e9:36:e3:bd:83:
51:68:64:f2:79:14:8a:20:44:f3:0f:ff:1b:1a:70:28:22:a0:
5b:c7:b3:4e:51:59:d8:fa:29:d4:b6:6c:01:d1:5b:61:28:3b:
aa:db:95:35:dd:1f:0a:60:9e:a2:f6:f1:41:08:cc:29:57:5e:
3b:b7:e8:f6:5e:13:27:af:35:eb:db:21:ee:13:6f:31:f2:85:
f8:e8:d6:44:8a:bd:16:12:74:6e:05:61:9c:8e:3f:72:8a:93:
f0:f7:45:c0:26:2c:f6:8f:24:85:c4:e0:e8:a7:b5:98:1a:c5:
da:58:af:01:d0:77:34:3d:4e:70:a2:eb:2e:7d:d6:60:37:e4:
b1:37:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:28 2025 by rpki-client