Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: J4/Ho5S5dIFpu6kojHT/VEZxT4qgzs59ElCE9Xu12d4=
Subject key identifier: E2:6A:8A:3E:42:A7:14:46:B6:98:5C:71:24:C2:36:DC:F5:CB:77:56
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019A4EF4995BF0046E5803B4218570E994E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: 0tiADo5gWvtNjvVYU+JO45ut2GUtY8ffbQBZPgz9sew=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:99:5b:f0:04:6e:58:03:b4:21:85:70:e9:94:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=e26a8a3e42a71446b6985c7124c236dcf5cb7756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:27:30:14:c9:ce:64:b6:87:16:9c:fb:e2:
68:83:2c:10:1e:b8:be:fc:b9:f1:c8:96:7b:7d:ec:
03:c9:ef:59:b4:e7:d7:ae:5f:4f:15:91:ab:ad:42:
03:b5:5d:92:e0:ee:df:39:b4:50:9d:66:b7:3a:d9:
70:5d:17:00:a1:33:36:0a:09:c0:8c:65:18:a4:8a:
1b:42:e1:de:68:46:34:d6:df:d3:e9:23:87:08:15:
ff:76:77:18:4d:3f:de:11:c4:d3:e8:82:18:4e:00:
61:b8:dc:bb:32:34:9f:84:4d:68:c7:31:e1:1f:4d:
a2:35:2e:0d:48:92:70:71:8f:4d:88:e5:82:f8:fa:
d5:29:c9:7b:9c:cf:93:06:92:4f:79:76:ae:ba:ad:
a7:0a:37:ed:07:69:03:2d:20:2a:fe:7e:44:23:f2:
05:67:4a:44:5e:ca:43:48:7e:63:4f:11:f3:19:37:
a6:cf:94:fc:36:1f:10:42:24:ee:72:84:d2:8d:6c:
f3:50:83:f9:ce:84:df:13:d7:ab:5b:98:a0:d7:36:
29:3a:85:6e:1c:b9:a6:cb:d9:36:13:60:56:49:87:
0f:3c:8c:dc:d3:0e:03:14:02:c8:e6:74:e9:75:d0:
4b:2f:b1:ec:69:cb:2b:48:ed:d0:d7:07:d7:bd:24:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6A:8A:3E:42:A7:14:46:B6:98:5C:71:24:C2:36:DC:F5:CB:77:56
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:3f:bb:60:ed:9a:be:b2:1c:e2:34:6a:ab:04:fa:2d:84:
86:3f:de:6f:e3:62:13:ff:0a:91:05:2b:9c:57:9a:02:33:fd:
ed:64:b7:9c:ae:f9:7c:37:49:fb:c5:eb:1f:4d:d9:f2:be:20:
95:19:4d:c2:52:bd:49:51:e9:2e:86:90:c3:23:ec:5b:cb:6b:
c2:a9:55:37:83:03:95:43:f1:1a:08:d7:35:ad:cd:a2:25:75:
d2:52:73:1f:df:fc:25:13:ad:85:00:47:29:de:63:d2:cd:98:
9c:f6:be:85:25:49:52:9a:d0:08:c1:d2:df:bc:3d:63:3b:e9:
8d:81:50:05:5d:32:26:03:41:ab:c5:b1:92:03:82:e3:29:81:
fa:63:a4:15:eb:a8:c6:f2:a2:e1:96:d3:34:f9:5b:58:f0:5c:
89:39:79:38:4a:4a:84:fa:16:6f:e5:0b:68:11:ee:e4:28:1e:
7b:ea:19:57:b6:30:6b:31:63:89:37:02:df:cc:4f:2f:0e:7f:
fc:aa:35:cd:42:b7:e4:3e:ce:76:56:01:01:b4:0a:50:3d:bc:
50:4a:27:44:9d:3f:20:83:1a:4d:c3:f7:0d:e7:5f:38:77:57:
3e:30:7c:c9:e9:73:7e:97:12:d8:f6:01:ff:b2:be:46:57:4f:
4a:86:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:19 2025 by rpki-client