
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: +vbUi8eRTai4wUQ4P6FPuDlJwW1c9yguXYjyOGmZeVU=
Subject key identifier: 6D:E7:0F:CC:9C:F6:9E:3E:40:19:70:64:FA:11:74:A7:3D:78:04:37
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 019A4DE1D5A58766C7AC6D24468014B87450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0C17
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: OYL1kOLi6XIgRydGWZlaILxGL/yB6jHuvW7vVm+tRIM=)
2: xx1FjY8JYYnnymM_Usd0dhEPXMc.roa (hash: jThxXylFfBYyWhSUb/DWJLhZb//oHbnd3oYRtsD1klg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d5:a5:87:66:c7:ac:6d:24:46:80:14:b8:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=6de70fcc9cf69e3e40197064fa1174a73d780437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:78:8c:85:0a:11:3c:4c:49:f2:87:9d:65:
97:a8:00:22:92:28:89:8d:f0:54:9d:f0:8a:c1:7b:
0f:6e:96:de:1c:25:24:20:ce:e2:06:30:47:2f:cc:
57:98:7b:47:a8:db:3d:7e:48:bc:00:12:08:8e:44:
4a:3c:b6:8f:ba:5c:29:98:f6:32:f0:28:f5:45:7b:
4c:9c:9c:7e:7d:d6:d6:0c:15:3f:06:e8:6e:bc:10:
8c:e0:f9:5d:19:83:da:2e:0f:92:8b:fe:f7:71:10:
be:10:9d:a9:3a:21:2b:61:b5:d3:a2:14:65:1b:3e:
3c:c4:f7:ad:cb:68:b3:bd:90:7c:16:f2:6a:39:25:
ca:c3:fc:8c:ae:0f:0f:ce:02:eb:f8:c6:dc:69:ad:
ec:de:cb:1c:11:0f:bc:bb:cf:48:97:0e:15:c9:3a:
27:27:fc:d5:fc:7b:83:16:8c:c7:b4:fe:9e:52:5e:
ab:3d:7f:d0:87:5d:79:be:d1:97:eb:91:1f:2f:4c:
dd:0e:09:b4:3a:a7:39:30:0b:16:4d:a8:ac:2d:68:
18:37:e1:5a:c5:71:51:7e:c2:46:50:22:4d:74:35:
89:56:5e:db:64:5c:15:bd:ae:45:01:56:3c:bb:6a:
ed:7e:85:fe:40:50:f4:30:87:9a:11:f6:91:26:bd:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:0F:CC:9C:F6:9E:3E:40:19:70:64:FA:11:74:A7:3D:78:04:37
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:30:1f:62:ec:f9:f5:fe:b8:ad:2e:be:4b:e5:77:50:e3:40:
59:10:88:1b:ed:2a:31:14:63:7d:5b:4b:b5:7c:f8:ad:b2:ab:
f0:ee:01:ac:b2:d5:66:7a:6a:bb:7a:aa:c5:b6:df:2f:4a:28:
c5:bd:a5:32:0e:01:cb:6e:93:23:01:43:06:fd:fe:7d:04:7f:
e2:73:ef:f8:6f:b7:b9:9d:21:68:64:60:e9:81:2b:a7:e4:25:
1a:44:8d:d7:ab:98:5c:5f:b9:ec:fc:b4:d0:50:6a:ed:71:9e:
a5:7d:e4:7e:fb:e9:c0:59:20:a5:0b:4e:61:dc:41:a2:65:08:
3a:15:a4:b7:50:31:ba:ea:be:65:83:a5:b1:f9:7a:82:b4:99:
6b:f2:0f:04:19:09:77:ea:dc:42:73:f9:92:8f:1b:27:d6:4d:
5b:ce:c6:28:21:ed:54:9a:89:4a:e6:c5:9c:29:16:48:fe:0d:
6b:1a:de:07:3d:15:60:9e:f2:d1:cb:f0:ed:31:7f:0c:6c:18:
77:fd:93:8d:d6:b0:fc:55:3f:22:ea:2b:5e:91:ca:43:91:d5:
3d:9c:d6:d0:e6:0d:b9:02:4f:1b:85:2b:86:15:e6:77:6f:3e:
44:3f:4f:8a:27:94:04:df:ae:f2:22:3a:b0:46:d4:1d:ad:a5:
e5:2d:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:21 2025 by rpki-client