Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: UBQEVyQ9+Yjo+OgEBFd2aREqk8R9tDLgagmAg4jXvfk=
Subject key identifier: F9:D3:05:BB:9D:26:D1:61:76:6C:7F:2C:9B:84:D7:46:22:B5:7D:93
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 019A4E190F9B48887968C7C1ADAAFDF7CF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 05B1
Signing time: Tue 04 Nov 2025 09:00:56 +0000
Manifest this update: Tue 04 Nov 2025 09:00:56 +0000
Manifest next update: Wed 05 Nov 2025 09:00:56 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: BWPHZkLMOzggJGJfxY6pknhL2Y5jsrfGwG9MbGBXVM4=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0f:9b:48:88:79:68:c7:c1:ad:aa:fd:f7:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Nov 4 09:00:56 2025 GMT
Not After : Nov 5 09:00:56 2025 GMT
Subject: CN=f9d305bb9d26d161766c7f2c9b84d74622b57d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:04:a2:63:c6:2f:5a:af:68:58:a0:67:c3:
19:6e:9d:c8:71:cf:27:f7:89:bc:6a:bb:35:19:25:
7c:af:5f:41:6d:7d:16:bb:a5:65:f5:f1:ca:1a:d0:
ee:f4:15:b2:d8:30:33:2e:a1:2b:d3:56:2a:ac:bf:
e6:f5:61:6d:bf:4c:d6:c5:65:42:ba:3d:20:a6:cd:
e9:65:87:cb:b6:1d:37:0a:d6:9a:2b:4e:42:d2:8c:
53:9f:07:30:f9:2a:28:bc:89:e9:e5:30:55:f6:b4:
ca:28:99:51:c5:ea:44:20:63:bf:4d:95:ba:a9:37:
c6:d4:69:a3:8a:bf:2f:a3:3a:21:2a:c7:37:b1:25:
19:59:a1:c1:3d:fa:44:3c:53:d2:bf:7d:93:36:96:
61:f9:cc:a5:8e:b1:54:7e:9e:de:90:89:6d:12:9a:
f9:a3:3a:a2:62:d7:e0:6d:3c:d1:88:7c:dc:d2:a1:
82:45:9c:13:44:5f:d4:11:43:e7:a3:b5:1b:b5:60:
02:27:bf:9f:34:62:25:69:ca:90:2c:89:57:4e:2c:
27:f0:d5:92:5c:69:7c:1a:83:ac:72:22:74:25:44:
9c:0e:bc:4d:04:e3:4e:e8:9c:22:10:af:cb:47:44:
58:81:14:80:4a:84:f8:11:a8:2c:c7:3d:66:24:a4:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:05:BB:9D:26:D1:61:76:6C:7F:2C:9B:84:D7:46:22:B5:7D:93
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:75:5f:b7:13:c8:f3:25:7d:b2:de:d6:e2:94:a0:5a:04:78:
8f:6d:ee:29:0f:ae:98:cb:b9:1f:d3:f8:8d:e5:be:e8:57:c7:
ae:aa:24:14:12:47:b1:42:6b:7f:63:85:18:81:34:ca:94:ea:
c4:54:4a:42:0f:b0:5b:ee:16:6c:c3:2d:f7:15:13:82:cc:a3:
c9:5e:00:4f:ae:ae:5f:4c:d8:ee:74:35:83:95:cb:d7:86:9c:
fa:1f:19:28:3b:ce:c5:c7:f4:29:02:9e:7d:58:71:eb:ac:30:
a5:d9:9e:a2:5a:71:61:78:12:80:16:3b:85:6a:a6:8e:df:b9:
f6:71:04:03:56:dd:8a:88:fa:28:67:ab:f5:e5:0f:f5:d0:5a:
34:a6:52:e7:31:f0:5b:82:82:f8:3e:18:0e:0d:d8:35:a0:02:
6e:f1:9c:03:e4:b5:a1:30:1d:b7:67:f0:23:98:b9:8a:d4:e4:
07:c8:d4:8b:cc:99:06:60:38:8a:15:e1:00:14:40:f5:d9:15:
47:b4:7e:35:d6:78:64:96:75:6c:04:49:2c:89:0b:6f:da:77:
ed:2a:fb:3b:2b:82:3a:cf:bd:4b:92:71:b7:05:74:a2:63:64:
3b:f5:b7:55:dc:53:48:94:54:3b:b7:1f:fd:44:2e:8e:ee:4b:
45:7a:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:25 2025 by rpki-client