Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: bG9L8qSdLQ0qC7mNgzE0y3/cQly/oCPIROPHrM9+hF0=
Subject key identifier: 2D:A6:8D:48:7B:0D:B5:55:59:0E:B5:76:7C:D3:05:4A:D6:5C:C4:58
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019A4E862FC1EB4EC0B651806E0D26CEF83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 07AC
Signing time: Tue 04 Nov 2025 11:00:08 +0000
Manifest this update: Tue 04 Nov 2025 11:00:08 +0000
Manifest next update: Wed 05 Nov 2025 11:00:08 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: CyDqlsEGucMl2T0mBnVRW2ryGsbVzdD7HC/W7IncRl4=)
2: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=)
3: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (hash: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2f:c1:eb:4e:c0:b6:51:80:6e:0d:26:ce:f8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Nov 4 11:00:08 2025 GMT
Not After : Nov 5 11:00:08 2025 GMT
Subject: CN=2da68d487b0db555590eb5767cd3054ad65cc458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:75:b1:a6:4c:c4:35:25:e0:ad:17:1f:2b:
89:70:11:00:38:4c:01:43:ca:0c:68:ae:da:34:9d:
a6:dd:52:bf:85:66:d8:a1:fe:4e:15:30:93:08:96:
0a:00:00:04:26:fd:ed:ff:ae:47:7b:b8:a2:47:72:
04:47:24:85:76:de:a2:cc:c2:ab:23:16:08:df:2a:
8f:20:5e:96:9b:e8:c4:27:c3:77:e2:a9:36:e1:04:
6e:f8:cd:e9:55:88:c5:62:7d:5a:43:0b:a0:96:b9:
fe:1c:95:e3:83:90:b0:ac:bd:1c:83:6e:05:cf:5b:
13:11:48:ec:8b:d0:fe:f8:57:f9:b3:97:41:76:be:
5c:3e:b4:ba:51:38:cc:58:a9:d1:fe:25:17:69:1a:
fc:d3:1d:43:58:4b:21:ff:83:25:7f:44:e7:b0:a7:
4a:aa:97:31:54:79:fd:93:00:e2:d0:25:9c:b4:7a:
10:83:24:33:76:b5:6f:7d:70:c7:0f:f6:e3:57:db:
36:bf:42:f5:53:46:4f:0e:78:7b:e2:4f:bb:68:56:
a9:ea:f9:92:44:ea:73:7a:9f:96:99:2a:57:c3:ac:
ce:67:d1:b1:76:93:71:3b:9c:23:e9:3a:17:bd:a2:
40:cc:7b:7a:33:5e:49:96:fe:bd:52:c6:e0:01:0c:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:8D:48:7B:0D:B5:55:59:0E:B5:76:7C:D3:05:4A:D6:5C:C4:58
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f3:d4:e2:df:01:72:bb:c5:9f:01:fb:bb:a4:9d:24:d5:83:
fa:8f:64:9d:cd:c1:d2:72:2e:98:33:4a:31:d3:74:57:bc:e3:
7a:08:af:0b:b6:77:3c:81:68:7d:7d:e8:1a:92:ad:76:23:ea:
b6:e7:6c:ac:11:dd:3f:43:27:0c:96:d6:82:71:23:0a:8a:ba:
ea:eb:41:f3:dc:b2:61:7d:3a:83:6e:8e:ad:fb:29:13:c5:74:
2c:5f:68:b3:bf:05:f1:49:c2:26:92:d1:8c:c3:6e:55:52:34:
9e:22:ae:a9:5a:77:c8:06:a0:45:5c:f6:9f:d3:08:dd:60:b1:
72:1b:7e:ad:8d:21:24:a7:73:ac:cb:e3:98:93:9d:55:ea:7e:
d1:dd:7e:df:ca:44:94:8c:95:3a:9e:27:ab:8b:63:3a:3e:2b:
dc:f8:dc:f5:bc:80:30:e6:3f:da:b2:2e:00:74:32:fe:60:6e:
7f:30:1d:a2:89:1d:2f:2f:ea:77:03:70:0d:bc:6d:39:80:66:
b4:2a:ab:3e:93:38:8c:73:c0:b7:a4:ff:fb:d6:55:59:3d:4b:
16:8b:74:e3:7b:68:e9:39:c6:12:9e:a0:41:a1:a4:e3:9c:23:
3d:88:aa:d5:50:f0:1f:96:d5:aa:5a:9f:43:42:aa:24:ae:36:
c8:ef:39:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:19 2025 by rpki-client