Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: pW/GQm8QD1DnjgxBrvxAAJNiY0fwo0NkqpTe4IKLPYY=
Subject key identifier: 2C:F1:83:25:83:3D:78:36:A3:C9:5B:B0:BE:63:F3:33:D6:4D:18:62
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019A54F61786820D0C601951A79DEE327B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 025D
Signing time: Wed 05 Nov 2025 17:00:05 +0000
Manifest this update: Wed 05 Nov 2025 17:00:05 +0000
Manifest next update: Thu 06 Nov 2025 17:00:05 +0000
Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: YqL4N1FzahDUDxE4kYv2p8NFdICo/kZFlzLGsFDLSuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:17:86:82:0d:0c:60:19:51:a7:9d:ee:32:7b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Nov 5 17:00:05 2025 GMT
Not After : Nov 6 17:00:05 2025 GMT
Subject: CN=2cf18325833d7836a3c95bb0be63f333d64d1862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:d4:0c:64:35:22:90:e4:7c:41:4b:00:74:
8b:e9:a2:a9:3c:16:48:ff:eb:88:db:09:64:98:60:
53:82:95:02:5a:e0:64:24:43:76:ea:fd:12:28:08:
30:3b:75:9e:b6:a1:da:fb:fe:fa:ba:bd:41:fe:ef:
7b:da:b9:7c:81:6a:4a:4f:8d:e4:0e:17:02:ad:a4:
8a:f0:73:2c:b6:b2:23:fb:33:e6:1f:99:aa:e6:a1:
34:96:1b:48:c7:92:cf:9b:fe:45:e1:1c:bb:a8:3f:
92:be:10:0a:7b:f1:1e:56:0c:b8:03:f2:b3:09:39:
2b:f6:67:3b:f8:49:0b:b5:83:68:96:f3:d2:96:c3:
c6:66:bb:73:0f:52:7e:bf:a1:d3:ab:ae:26:30:19:
35:eb:a2:fb:82:23:2e:e3:8f:fa:17:23:72:69:da:
97:0e:60:0d:85:c2:ef:05:ce:04:02:c6:6b:22:40:
23:3d:a0:59:ff:ba:2c:31:93:51:bf:1e:d9:fd:bb:
c3:b2:5e:12:9f:d0:ca:d7:66:d2:7f:e7:d7:fe:98:
11:17:db:77:19:00:dc:d5:aa:fe:4b:ee:3f:b8:ab:
d4:cc:31:16:e2:43:e2:9f:2d:4d:6c:97:d4:da:44:
ba:24:3a:0e:92:8f:9f:c5:1e:60:42:cd:02:72:d0:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:83:25:83:3D:78:36:A3:C9:5B:B0:BE:63:F3:33:D6:4D:18:62
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:78:61:a9:71:ce:69:7b:19:7a:3a:88:86:0b:e2:c7:5a:0a:
59:cb:87:be:63:01:2a:1e:b1:32:03:c5:8c:11:e7:f4:9a:69:
92:e2:22:b0:fb:92:7b:44:cb:8f:35:05:ca:2f:a5:d1:95:98:
09:22:cc:e2:a8:c6:7d:53:df:69:1f:0c:97:de:68:57:db:d3:
e3:7e:85:3e:8c:8f:17:04:10:db:47:25:7a:ac:21:b3:99:86:
39:0d:97:e2:d0:b0:3d:83:0d:96:c2:e4:f2:bd:f9:c5:49:4c:
e9:79:0f:21:aa:f7:b9:3b:3e:95:f3:97:7f:44:a8:95:3a:bd:
02:4f:b8:6e:c1:e2:40:b6:89:41:98:9b:d8:b2:66:a5:29:7b:
b0:59:3a:1d:14:b8:d2:42:84:34:c7:a6:3a:24:8e:f8:45:28:
a9:65:78:41:49:b6:f8:5b:eb:9e:56:2c:7c:42:e5:6f:52:f9:
8d:6b:bd:77:fa:d4:8b:c6:e6:19:d5:02:79:e2:74:16:63:e3:
78:b3:36:a8:9c:68:d8:78:e6:9e:86:07:a0:0d:9c:ed:17:05:
f5:9c:96:5c:13:b0:91:f6:9f:fc:c7:a7:b0:83:f9:b8:dd:e0:
51:96:fe:7b:9e:e4:07:22:eb:4b:80:be:e5:a4:87:40:71:9a:
bf:e5:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:35:45 2025 by rpki-client