Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: wc8V31YZLiPHi/TNkS8HsPFSucM8vD03FtzoEtLKE3c=
Subject key identifier: 5D:3D:C7:BA:38:85:EB:07:F0:36:59:CE:89:14:C0:1A:56:30:1B:46
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019A4FD05AB32AB4310C48CFE677B6494429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0E2B
Signing time: Tue 04 Nov 2025 17:00:45 +0000
Manifest this update: Tue 04 Nov 2025 17:00:45 +0000
Manifest next update: Wed 05 Nov 2025 17:00:45 +0000
Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: 5Hs0+CEDlkM8lV5Vu0ejnQ5cSG78fCVGxQk/EoZILWY=)
3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:5a:b3:2a:b4:31:0c:48:cf:e6:77:b6:49:44:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Nov 4 17:00:45 2025 GMT
Not After : Nov 5 17:00:45 2025 GMT
Subject: CN=5d3dc7ba3885eb07f03659ce8914c01a56301b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:df:bb:ee:aa:1e:fe:4e:50:e6:d6:47:d8:
0c:6e:fd:dd:a6:49:a8:32:c8:c8:22:cc:74:96:33:
d6:ff:a7:37:c9:6f:b0:c8:19:37:9f:d1:c9:f9:3b:
de:a5:48:db:92:6e:53:3f:ca:79:5e:5f:d5:be:90:
a4:17:a3:57:27:a8:f3:e3:9e:a1:f3:bc:0c:47:b4:
99:20:8b:12:0d:5a:1b:ec:eb:27:91:90:19:e6:1a:
1e:45:bf:85:3b:db:45:fa:05:72:4b:21:f9:96:3c:
71:92:10:16:8a:72:4b:bf:5c:b3:40:aa:c1:d5:e4:
ac:61:da:7b:50:f8:45:af:1c:6b:e4:ab:7a:db:22:
b7:32:91:13:f6:e6:7d:fd:a6:68:9b:a3:7c:e5:e9:
40:05:de:3d:7a:5b:1b:8e:b2:d1:04:73:28:f9:06:
57:ff:e4:e5:83:8c:63:28:7a:11:87:21:33:90:3d:
db:11:5c:1e:1e:30:b7:38:16:9c:e0:19:23:bc:07:
45:bc:52:77:0a:7b:cc:cb:f0:1e:b9:7c:e5:ba:2f:
6a:9a:15:26:2d:36:66:7c:89:2a:bc:25:0e:b6:38:
a0:c4:d2:d2:82:c9:60:32:78:6e:fb:76:9f:dd:6a:
b5:03:93:ee:f3:12:77:11:3c:20:8e:97:d5:47:b1:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:C7:BA:38:85:EB:07:F0:36:59:CE:89:14:C0:1A:56:30:1B:46
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:49:71:eb:d0:fb:f5:00:60:4f:ea:fa:2d:ec:c2:b7:da:99:
31:45:ca:5d:9a:c5:de:f9:c3:93:7e:59:00:a6:41:44:b5:76:
71:b9:fe:03:94:0c:9a:0b:79:aa:d7:d1:04:ae:c0:22:d1:c3:
95:dd:0e:1c:30:9f:d9:e1:5f:68:c8:a4:c7:80:94:a2:6e:c9:
ed:01:e7:c0:86:ef:7e:fa:d0:bb:22:cf:db:8f:af:e3:c5:95:
e1:c4:d9:79:c1:bd:11:44:e8:f9:0c:8a:fe:6d:96:50:d0:05:
cd:ee:70:ee:2d:c5:5a:88:72:6c:9f:31:d2:ae:f9:06:5a:3e:
f5:f3:9e:38:10:82:b4:ea:67:ec:25:3b:e9:34:09:84:fc:e9:
69:5f:e8:52:56:ae:ae:30:f0:8c:58:ac:fd:b3:eb:39:96:27:
fb:7b:c7:31:9a:92:85:5e:6d:a3:01:45:d7:6f:b7:dc:28:7a:
2a:a7:26:ce:09:bd:95:7c:7c:a3:04:d9:8c:00:d2:d2:40:35:
af:ac:67:a6:7e:6e:2e:6d:d0:70:c9:dc:2e:3e:d0:4f:c1:b0:
63:32:c9:c2:de:dd:e1:b0:b6:fa:57:2b:79:a2:76:b8:dd:8d:
7b:8e:a9:64:5e:3e:21:e9:c5:da:ea:d0:16:3b:06:e2:d6:12:
c4:1e:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:42 2025 by rpki-client