Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json)
Hash identifier: DBnKxdC5Uprh5+3/pLligHxiRD0TGbiiW56ieRmCS6o=
Subject key identifier: E1:30:63:65:03:FF:9F:D5:F2:85:39:D5:07:53:9B:F5:CA:16:76:3C
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 019A4EF5F8858471EDB7589BC058CFFFD5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
Manifest number: 08DC
Signing time: Tue 04 Nov 2025 13:02:13 +0000
Manifest this update: Tue 04 Nov 2025 13:02:13 +0000
Manifest next update: Wed 05 Nov 2025 13:02:13 +0000
Files and hashes: 1: VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa (hash: SxWsENl0azYTplSpEg/TKtQu0dvHaU6Cl+WjOSHnKaA=)
2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: G4qXPK6gUsYEwboLpeNSJxWqC/T0e2fpssEZaMTzijI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f8:85:84:71:ed:b7:58:9b:c0:58:cf:ff:d5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Nov 4 13:02:13 2025 GMT
Not After : Nov 5 13:02:13 2025 GMT
Subject: CN=e130636503ff9fd5f28539d507539bf5ca16763c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:81:ec:34:9c:4e:39:20:1d:00:c9:bd:10:
71:60:72:d9:ab:80:c0:83:ca:2f:0f:3e:23:d6:94:
62:cb:a5:7c:00:2d:63:20:3f:44:eb:22:ca:01:ca:
50:0b:87:42:c9:84:16:22:26:7c:96:88:5c:f8:52:
07:bb:a7:71:0e:2c:ab:e4:e4:5c:78:db:9b:23:89:
4d:57:cc:a5:53:b5:b0:10:c2:f9:29:68:e3:e9:41:
b1:0b:c2:b9:db:af:a0:d0:5c:9b:39:7f:b4:a2:7a:
bb:8f:d3:ba:c1:8f:d2:a7:1e:25:46:44:36:a5:2e:
b5:96:13:1a:6a:05:43:59:a6:71:01:89:a0:28:dc:
ac:8a:f0:7d:71:14:34:e8:28:b9:49:76:0b:b2:2b:
e2:43:33:7a:af:76:96:ae:36:b1:7b:bf:63:55:1f:
26:63:1b:56:b1:94:f7:38:90:e4:dd:90:8a:f1:2e:
b7:a3:1d:97:24:87:e0:9a:5a:39:80:f6:82:57:17:
ba:01:5c:9d:ac:3e:c9:f6:18:9d:45:6f:35:67:8a:
5f:53:c7:7b:e6:9e:cc:49:af:ca:a5:71:f0:1c:43:
50:e2:09:28:cf:0f:4f:c6:19:02:d3:74:53:cf:8a:
f6:93:35:ff:71:0e:a3:8d:93:f1:ca:b3:8d:f7:3b:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:63:65:03:FF:9F:D5:F2:85:39:D5:07:53:9B:F5:CA:16:76:3C
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:61:03:3c:15:d0:6f:f9:d2:47:fd:f3:0d:03:aa:fc:8b:ef:
fb:c7:4d:de:49:e0:62:c6:06:49:a2:5b:e8:68:d8:e2:dd:bc:
3a:52:db:fe:06:26:a7:d8:51:e2:0b:c9:6d:93:67:9a:d4:83:
72:41:36:50:d3:98:88:27:e3:0b:21:8c:e3:cf:ce:81:8a:a0:
a5:f7:52:72:a2:e6:cb:1a:1b:3d:2a:23:fc:8c:88:12:d8:c1:
59:c0:24:e1:36:94:03:33:45:12:5a:2a:df:33:bd:91:24:1c:
7d:71:e0:c6:d4:f0:23:db:e7:ce:0c:c0:e8:b3:cc:3c:b8:62:
36:f4:6f:c2:e9:ff:3e:14:8c:7f:fd:8f:0f:26:f9:ee:27:cd:
bf:fa:2d:30:83:d4:83:2e:84:28:16:0d:9e:7c:d6:60:e5:26:
1d:9e:3c:be:2b:87:5b:ce:d2:e0:4b:a4:fd:b1:73:59:98:57:
16:23:04:c2:4c:0b:21:08:8a:69:e4:d1:c7:d9:84:d3:06:95:
45:7a:ac:d0:ff:70:36:93:61:85:2f:73:e0:65:a7:bc:e9:e3:
b3:ff:32:17:90:67:0b:2e:ed:a5:ca:80:a1:a8:3e:ba:5a:d2:
4c:25:5f:f4:75:b0:44:20:aa:40:0c:b2:cb:e7:29:24:5d:ca:
69:d7:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:26 2025 by rpki-client