Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: W/sytbiiAD4264w4TT6r4Fl8sg3gjVnP0Dh6ApWlVO0=
Subject key identifier: 91:97:53:81:C7:46:4C:75:58:53:D3:A0:90:62:66:E5:E6:3F:6B:82
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019A51BEA5F80FECCCF2709DF307C4B6E288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 02A6
Signing time: Wed 05 Nov 2025 02:00:39 +0000
Manifest this update: Wed 05 Nov 2025 02:00:39 +0000
Manifest next update: Thu 06 Nov 2025 02:00:39 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: EWD7lz+WSTEnaYoV3eVCtdb7YMrfkqU8mMw6MvbMxrY=)
2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=)
3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a5:f8:0f:ec:cc:f2:70:9d:f3:07:c4:b6:e2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Nov 5 02:00:39 2025 GMT
Not After : Nov 6 02:00:39 2025 GMT
Subject: CN=91975381c7464c755853d3a0906266e5e63f6b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:c8:6e:e2:cd:eb:f4:c3:03:64:36:17:95:
cf:57:6a:46:e1:3b:03:d3:f3:d1:b9:55:10:3a:2b:
b7:36:ca:8c:ad:57:62:cc:83:98:ea:ff:cb:b6:99:
8c:6f:93:97:9c:11:80:81:af:de:5a:b8:e6:4c:c8:
ff:66:dc:7b:6f:4a:89:10:2b:a7:17:e5:43:dc:51:
b2:f1:f5:82:c8:5c:cf:91:7c:b7:c6:ad:ad:c5:3b:
31:90:75:29:ef:ae:c0:4d:5f:a3:02:04:70:37:b4:
19:b6:58:25:dd:a6:7c:85:6b:53:bd:64:d0:9d:c2:
c4:17:ba:f9:bc:2a:92:b5:14:35:26:e0:8a:3f:ce:
40:d2:a4:46:eb:58:56:86:94:f2:a5:a7:5a:9f:f3:
bf:d5:7e:e0:0d:16:54:d1:a8:00:70:20:94:38:31:
af:c0:bc:84:c4:0d:a7:f5:3b:6d:5c:76:66:4f:7e:
c8:3e:d2:aa:30:31:c0:bb:2a:9a:8f:b1:8f:03:6d:
b3:77:83:43:6f:0c:de:4f:1c:15:8d:68:b9:dd:14:
e4:6e:3b:74:a6:b1:07:69:79:ef:03:e7:9a:63:1a:
b7:02:41:f1:42:89:15:91:52:d9:82:15:a7:60:5f:
8b:10:02:85:f3:f1:39:e1:be:22:26:21:9f:03:be:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:53:81:C7:46:4C:75:58:53:D3:A0:90:62:66:E5:E6:3F:6B:82
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:25:a0:6f:5c:dd:5b:ea:e1:f1:e6:bc:00:31:6f:c5:16:d0:
17:e7:4b:1c:11:56:1a:60:55:3d:19:8f:c7:61:2c:31:5c:8f:
64:fe:50:66:fa:8a:81:84:64:cd:a7:34:ea:1b:b3:7a:af:a8:
0f:ee:4c:39:1a:6a:9a:38:14:e9:c6:89:0c:c2:3c:60:a8:29:
6f:d2:e9:c6:a7:f0:f2:1e:ea:68:c9:a6:06:3f:76:28:e1:f0:
de:db:99:7b:ae:d1:1c:54:c5:5c:04:14:2e:bc:f6:0b:27:04:
95:2b:8c:14:7c:20:35:c5:32:a8:29:9c:2e:a4:b6:5e:d2:f3:
a4:04:9c:42:af:c0:b2:27:0d:f0:f0:93:e9:25:94:a5:d3:c0:
7e:cb:1f:e4:8a:05:16:40:13:13:82:52:32:ce:af:2b:43:84:
c5:b5:6a:d2:f1:2f:ef:85:f4:79:49:37:02:2e:29:3f:0f:dc:
33:84:99:5e:0b:5f:fd:17:82:8f:29:f1:94:c9:5a:f4:7f:28:
a9:42:56:eb:c5:99:44:d7:96:d3:fb:11:aa:76:34:19:f6:20:
ff:77:0f:fd:9c:1a:ec:e9:e2:ea:44:76:65:19:60:74:86:72:
ad:6e:c1:8a:0f:ca:3a:85:07:7e:4d:f8:b7:f2:7b:f4:81:7f:
79:c9:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:19:50 2025 by rpki-client