Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: eUvwgI/Rw4s9DhfWpbevba4aRZKBA00paXTWGfhQ2V4=
Subject key identifier: 0D:07:2D:E3:03:E8:8C:C4:78:0A:C5:C7:FE:7C:C7:31:69:A1:2B:F5
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 019A4DE1A6E6DB58EC400ADAF668C40166CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 0F74
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: tyS3ZQ7R8T+joLzC0YZH9BVQ5+aL+Xa8uBUlbAuyoFY=)
2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a6:e6:db:58:ec:40:0a:da:f6:68:c4:01:66:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=0d072de303e88cc4780ac5c7fe7cc73169a12bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:df:38:27:9e:97:b3:df:34:d2:0b:e7:b6:
dc:2b:63:b9:3d:ab:f7:76:53:74:ca:4e:f8:be:1e:
9a:83:cc:74:25:2d:18:a2:eb:52:aa:bc:5d:19:30:
ce:60:1d:5b:b0:7a:7f:96:be:f3:af:b9:a2:eb:f1:
17:14:48:d3:13:92:47:e0:d1:70:e9:71:84:af:e8:
e3:57:5d:ab:fe:63:5b:88:b4:a8:68:88:ef:1a:e4:
cd:d8:2b:ef:42:90:76:4d:14:5f:59:a9:6a:62:eb:
de:4f:80:31:69:9b:a8:e3:18:c4:ec:1d:b5:91:69:
25:d7:61:39:51:d4:79:f7:bb:4a:56:30:3b:dc:51:
69:70:16:ca:3b:c8:6e:c1:d8:16:b2:cf:5b:37:e8:
61:36:c3:18:b0:ca:26:b3:d3:f9:e5:b1:ed:f6:b3:
b9:38:8f:70:6c:3d:8b:aa:d8:66:78:60:64:77:5e:
a8:93:c0:2a:c4:b9:7e:9f:0f:d4:f1:ee:d1:48:6d:
4b:2a:3b:6f:87:58:8c:af:02:74:0a:28:17:6d:a1:
c4:a7:a8:78:23:59:4f:0b:b6:b5:74:83:86:c0:49:
c5:1f:9a:12:19:50:fe:87:9c:2a:ea:41:a0:35:1c:
1b:95:95:33:6d:5a:51:f0:1f:8e:5d:47:f9:0c:5f:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:2D:E3:03:E8:8C:C4:78:0A:C5:C7:FE:7C:C7:31:69:A1:2B:F5
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:61:7f:0b:ba:d8:a6:d4:d9:0b:5f:30:a7:51:86:e4:ec:c7:
15:94:07:ce:38:b4:ae:ff:34:c3:ee:16:61:32:6f:32:91:20:
4f:8d:fc:50:ee:0d:be:d8:02:65:d5:ae:c6:dd:7e:f7:d7:85:
4a:dc:45:67:2c:3e:41:1f:5e:27:93:26:3a:e9:e7:8a:67:c4:
94:aa:f1:50:e9:1b:74:23:75:45:57:7f:35:8d:7b:04:76:17:
12:65:54:a9:9c:8c:96:9b:9a:a0:2f:59:45:63:d9:83:ec:88:
82:bd:16:e0:a3:ec:df:c5:e0:14:3b:53:23:f7:6e:fd:c7:fa:
04:28:08:33:8e:ca:d0:4f:e6:a7:9e:aa:85:33:c4:ec:c0:20:
17:1f:9f:ad:84:35:1c:39:ea:11:4b:13:60:ba:80:26:da:4d:
5f:26:f1:3e:17:6d:fb:32:30:0d:2f:96:a2:5b:7c:ae:1d:0d:
1c:fd:29:12:37:91:12:47:c6:ca:20:c9:a4:16:a4:93:69:a9:
dc:27:d4:2d:53:d1:af:12:56:97:58:29:a9:b7:34:30:0c:dc:
c2:63:c8:74:e3:9c:1f:db:88:06:4c:fe:8a:a3:53:52:2f:98:
63:14:67:d8:07:b5:ef:f2:f9:c4:eb:3f:9a:51:bc:af:a8:77:
70:e9:0c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:10 2025 by rpki-client