Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: 9ePs2yD9mf9yuR1Ewrd0xI8FjkChV2gKeYK7GEg+9fQ=
Subject key identifier: 98:B4:70:0B:BD:61:B9:9D:AE:CE:2C:FD:21:BC:8E:7A:61:40:1B:69
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019A52D2A785809DA656B26BCDC6E83C953D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1793
Signing time: Wed 05 Nov 2025 07:02:08 +0000
Manifest this update: Wed 05 Nov 2025 07:02:08 +0000
Manifest next update: Thu 06 Nov 2025 07:02:08 +0000
Files and hashes: 1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: /UYvK8hd0riy5HdmazQ3KajimG2UyXUCu1cOJw1r+Pg=)
3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:a7:85:80:9d:a6:56:b2:6b:cd:c6:e8:3c:95:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Nov 5 07:02:08 2025 GMT
Not After : Nov 6 07:02:08 2025 GMT
Subject: CN=98b4700bbd61b99daece2cfd21bc8e7a61401b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:0e:91:e9:58:3e:a1:e4:3f:ae:e6:79:79:
78:af:b5:ef:88:c2:db:4e:78:e3:18:26:4a:61:75:
79:fd:fd:31:bb:73:41:c4:90:a5:52:62:91:22:38:
4f:0e:92:db:d0:89:2c:b3:bc:db:01:b1:3e:f6:d9:
1f:c1:ce:a3:fc:b4:47:8b:69:d2:ab:af:e9:88:4b:
05:57:d5:f1:ff:b1:46:e6:9c:0f:6d:a8:94:79:64:
c8:97:46:5e:c9:76:2d:de:80:cb:7b:74:ce:ce:ad:
ef:53:e1:dc:c6:2b:fc:07:c2:2d:e3:18:89:0a:4e:
83:a0:d0:56:0a:4f:c8:71:11:2a:97:ea:84:59:04:
87:e8:50:3f:4d:af:c5:47:ba:b0:04:6d:9e:19:35:
07:d6:00:cf:7b:a5:b2:72:82:b1:d8:56:8d:14:66:
46:3c:62:64:16:cb:a7:69:4f:f1:e5:40:d2:1f:f4:
f8:72:4d:ca:88:ba:bd:15:05:22:e2:34:7b:29:22:
79:2e:b3:0a:1c:50:ec:bc:41:c3:55:79:ab:bb:06:
68:db:ad:57:5b:0c:00:78:92:47:1e:01:53:97:f2:
b7:72:ba:3e:b0:27:89:fe:47:60:47:26:a3:6e:f3:
1f:1e:8b:89:ff:ed:46:6c:ee:5f:34:77:49:96:da:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:70:0B:BD:61:B9:9D:AE:CE:2C:FD:21:BC:8E:7A:61:40:1B:69
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fc:ab:6c:9b:3c:9c:15:56:ad:14:b0:e3:c7:ed:d0:c0:75:
c4:f4:9a:5d:8d:4e:42:19:75:c7:02:97:14:02:ab:8f:b0:6e:
b1:e8:6d:d4:0b:ef:63:c0:73:9f:9f:b1:3a:1d:01:9a:f1:fa:
a0:81:5a:f2:82:3c:08:50:e2:d3:31:21:72:94:fe:cd:a7:61:
6f:ef:e6:19:ac:09:45:3c:ba:02:10:4d:e7:4a:3d:2b:f4:14:
a1:d2:fa:cc:33:d1:92:0c:ba:49:ab:95:8c:c8:d0:24:e5:12:
f3:ce:54:d6:7b:3d:c2:41:77:28:12:30:be:d0:69:57:aa:4d:
53:97:7a:f6:8b:7e:5c:ba:6b:00:f8:13:db:56:a9:ed:bc:75:
58:86:60:ff:cf:11:47:e2:89:a2:7f:2b:54:93:9a:5f:72:d7:
00:7d:24:b9:e9:c8:54:33:02:a0:4b:41:b7:62:e5:ca:0e:1e:
7d:88:36:cb:91:a2:8f:6a:12:fa:80:21:f8:1a:31:bf:fd:68:
40:35:be:86:33:e5:90:12:eb:90:a6:9e:6a:dd:e1:9f:9d:80:
06:89:65:2c:ea:1b:07:4a:4c:7c:d3:bb:14:fe:ef:73:1c:8b:
54:16:8f:59:8f:75:62:bb:cb:62:76:b7:b1:2f:2d:5f:20:a2:
31:55:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:07 2025 by rpki-client