Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: OtHOU23ZQKuhbuIf0y+lUoJAMCzMVFdtW2mL7aq4pyY=
Subject key identifier: 65:AD:56:D6:6E:B1:1C:06:CB:B6:4A:0C:FF:61:C0:E9:11:CB:E1:AD
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 019A4F625F5EA4BEB1828FD22E6E53FBA8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 0558
Signing time: Tue 04 Nov 2025 15:00:38 +0000
Manifest this update: Tue 04 Nov 2025 15:00:38 +0000
Manifest next update: Wed 05 Nov 2025 15:00:38 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: Yl16bFa8fBP1ewX34dP9cqYKPkTToxmFBeJEBviz4ok=)
2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5f:5e:a4:be:b1:82:8f:d2:2e:6e:53:fb:a8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Nov 4 15:00:38 2025 GMT
Not After : Nov 5 15:00:38 2025 GMT
Subject: CN=65ad56d66eb11c06cbb64a0cff61c0e911cbe1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:80:9e:49:4e:69:e9:36:45:d7:f5:c3:75:
64:4f:68:95:3c:1a:da:79:ad:4f:2e:03:1c:42:1c:
d6:87:80:d3:39:23:45:34:f4:b1:a1:15:1d:27:7e:
4b:a3:33:bb:c4:9a:a7:61:87:d9:6d:6c:e8:74:87:
7d:b5:0f:28:3e:4e:f5:6c:8b:29:3a:48:39:88:7c:
d7:58:df:a7:ba:5b:ba:47:b4:01:98:f5:e4:d1:cf:
28:26:ab:22:ea:b7:9d:c5:d1:b9:72:cf:ab:90:f7:
e6:e3:91:f5:0b:2f:71:7f:9b:33:10:da:0c:e8:d7:
29:c3:42:af:b4:4a:4d:9f:e9:64:08:4b:b4:e9:77:
d7:9c:34:a2:c6:31:93:9f:de:fd:d8:b5:f3:f5:94:
81:05:5c:b3:f8:dc:12:a0:b0:53:13:db:a9:5f:6a:
ff:ba:d6:14:e4:34:24:4a:85:94:2c:39:94:1b:b4:
ba:d8:97:fe:29:ee:3c:11:5b:75:cc:7e:12:46:10:
70:58:71:d8:8c:ca:2a:3c:f3:d9:1a:ad:63:62:24:
9c:53:19:27:b8:e3:87:c4:54:89:01:66:ff:a5:cc:
94:2e:4a:6d:16:bb:b3:e5:c5:82:d5:bb:ae:70:68:
9b:94:ea:7f:18:b0:59:42:ef:67:c1:a6:81:e1:dd:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:56:D6:6E:B1:1C:06:CB:B6:4A:0C:FF:61:C0:E9:11:CB:E1:AD
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6a:a6:4b:e8:d3:11:70:89:a4:ee:a8:f4:c3:10:16:8e:8e:
44:6f:50:2f:7d:d5:38:e5:8d:ca:bd:ac:10:e0:9e:e2:a2:c3:
3a:36:be:59:a9:77:27:12:5d:10:4f:07:7c:fb:b7:2e:f8:2f:
10:1f:32:64:55:99:f4:47:21:1a:c1:be:e2:a6:a7:22:b3:1c:
ae:ec:b5:d4:fc:33:67:15:4e:d9:e8:f7:51:fe:85:bc:96:e8:
8a:99:74:ce:f4:8e:63:55:9a:11:69:6d:d8:a7:2a:90:45:8c:
5e:8d:66:cf:46:11:37:9c:b4:d4:24:a8:da:d9:62:9a:bd:c0:
6a:36:03:79:a2:9d:ed:d0:eb:d4:94:ad:30:9d:f9:d1:77:9f:
2d:60:3d:3a:51:14:78:6b:20:bf:06:4d:a1:e0:3c:31:54:81:
8f:e2:c0:c5:ae:6d:d3:93:e7:b8:59:22:79:d1:1d:52:0c:22:
8f:60:c0:54:22:c2:58:ef:0b:b1:0f:19:60:18:c8:5e:84:3b:
17:9a:fb:21:08:28:0e:e6:3e:b7:5e:e7:38:f0:39:e2:35:1c:
45:4c:6a:89:ad:d1:54:fb:76:50:c7:12:e4:16:21:3f:28:6e:
f1:b9:3e:08:0a:f3:dd:92:03:02:a8:56:d8:fc:a4:26:eb:1f:
47:dd:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:50 2025 by rpki-client