Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: azmGcq9I5hcuRktbpDzOuyYhj0xbFATltsw6BSwgIig=
Subject key identifier: 0E:9F:92:62:2B:C8:C5:81:62:F8:C4:A1:B3:3D:FA:3D:98:D9:A3:2B
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019A5451C6B468DA4B06CE585E952C784BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 14:00:36 +0000
Manifest this update: Wed 05 Nov 2025 14:00:36 +0000
Manifest next update: Thu 06 Nov 2025 14:00:36 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: MRCKMVzO7jmI3GdhoZ03OmtzKKz8mDqW4ISWGC6NITY=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:c6:b4:68:da:4b:06:ce:58:5e:95:2c:78:4b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Nov 5 14:00:36 2025 GMT
Not After : Nov 6 14:00:36 2025 GMT
Subject: CN=0e9f92622bc8c58162f8c4a1b33dfa3d98d9a32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:98:12:f1:a6:2d:48:1e:3a:98:65:31:78:
b3:c8:e0:ef:81:4a:5c:79:e2:0f:c5:b4:ab:96:49:
1f:1c:2b:ef:ad:a3:0a:eb:74:77:5e:bf:31:a2:aa:
83:c4:73:dc:c5:92:f2:11:84:ea:9f:bc:bb:d5:cf:
a0:f5:0b:79:90:07:9b:c3:1a:8f:70:24:c6:74:e2:
7a:82:24:1e:dd:e1:18:41:26:99:94:02:46:1d:0d:
5a:38:ab:8c:a4:9b:62:c9:f6:37:ea:5c:4f:3f:6c:
3d:7a:a7:cb:17:27:3b:89:22:22:38:91:cb:4d:8a:
6c:7f:3b:03:9b:bc:25:73:67:95:32:1a:14:60:ec:
b9:6a:3b:26:2b:41:69:75:3a:86:fb:2c:3e:2a:d4:
83:6c:91:84:36:0d:26:06:32:47:d9:3a:c0:6c:9e:
fc:e0:1b:6f:7d:7f:b5:1c:20:e0:91:a8:dc:12:59:
8d:38:97:9d:5b:43:88:83:05:e9:c5:2f:15:1e:c5:
c2:d1:3b:7a:01:44:32:ef:69:10:e4:67:b5:b5:98:
3c:be:51:fb:37:80:5c:e3:63:47:5a:47:8d:9d:ed:
45:5e:32:03:b0:56:a9:5f:f5:86:9d:4a:7b:25:f5:
4d:d5:9e:c6:64:9d:97:67:e1:38:57:9a:fe:2f:10:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:92:62:2B:C8:C5:81:62:F8:C4:A1:B3:3D:FA:3D:98:D9:A3:2B
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:43:b1:13:ec:8f:56:22:5f:ac:52:8e:c9:e2:5c:b4:01:3b:
2e:44:7e:4b:96:1d:29:cb:b8:1f:9f:08:35:58:bf:2e:a4:79:
52:b9:83:15:0e:65:8a:34:41:44:6a:4f:a6:10:c7:77:be:10:
ea:4d:47:f1:dc:d9:1a:9e:a2:c8:34:55:61:7e:dc:fc:40:c9:
0f:63:9c:d5:f8:e5:06:c6:74:02:6e:d8:46:ce:94:a1:e9:32:
e8:0c:96:43:80:87:4f:eb:ad:6c:b6:37:07:85:cf:af:a2:d5:
84:de:69:6d:21:8c:10:da:8e:6b:71:fa:a4:7f:33:bf:12:05:
49:89:ee:2f:e3:65:a1:b7:dd:f6:54:b6:3b:af:3e:7f:68:6b:
a2:6a:f6:32:b9:aa:ab:2a:e7:9f:97:48:46:8d:c9:a6:1b:a2:
19:50:70:48:02:82:31:12:d2:5a:5d:ff:42:29:93:28:96:ff:
2c:2c:ea:4d:bb:95:94:33:87:a0:de:b4:e7:1b:8f:d7:b3:ce:
39:79:14:c7:dc:ae:48:45:f4:91:58:f6:69:ec:ed:42:4d:af:
1d:9f:89:d0:23:56:24:8d:17:0d:41:d4:58:06:f6:d6:e0:a0:
5e:7a:d1:7b:20:4a:ef:46:84:10:0b:c6:b2:2f:5d:ec:17:28:
17:dc:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:42:06 2025 by rpki-client