Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: kHaO3Dq4Vz6JFs9xlymNdqdM01cUXrQjgwLKRVZgZwU=
Subject key identifier: 37:B6:8D:FB:C6:6C:23:25:54:F7:7E:5D:BC:C5:A6:D9:57:AC:C4:C1
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 019A53AD5C311729C0E151BE8E2BE6484E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 052A
Signing time: Wed 05 Nov 2025 11:01:01 +0000
Manifest this update: Wed 05 Nov 2025 11:01:01 +0000
Manifest next update: Thu 06 Nov 2025 11:01:01 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: EBzvecQBis1beliiyR1vPARzRZK+UxaNc9H9UqAI/a0=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:5c:31:17:29:c0:e1:51:be:8e:2b:e6:48:4e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Nov 5 11:01:01 2025 GMT
Not After : Nov 6 11:01:01 2025 GMT
Subject: CN=37b68dfbc66c232554f77e5dbcc5a6d957acc4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:ad:cd:78:88:59:f9:65:28:11:fc:e0:72:
d7:c0:52:67:39:c5:a6:fb:80:0a:bf:80:1a:d7:72:
16:9c:4b:83:7b:1a:58:a4:aa:96:f9:06:f5:0e:f0:
a0:d6:22:33:a3:59:4d:8e:e4:68:44:ae:e7:41:fd:
c4:cf:f0:e8:e0:49:29:67:80:fe:6b:d7:c9:d7:43:
73:f3:c0:e8:d3:0d:fd:e6:be:32:3e:aa:84:bc:d5:
ec:86:a1:6f:74:bb:9a:67:96:6e:03:9f:56:1c:a1:
65:6b:fc:0e:79:e5:a6:6f:11:4e:46:d7:9d:72:21:
58:62:4d:ac:c0:e3:f5:66:cf:e7:dd:3a:45:fc:a9:
e7:6d:93:a1:4d:32:4f:64:70:07:b9:30:86:90:19:
f0:e8:6d:ae:92:dd:1c:fe:12:01:e4:9d:40:f0:d8:
b1:c7:d5:c1:3a:b3:80:6c:9f:1d:b2:52:98:b2:fa:
cd:ec:05:dc:68:ad:7f:c5:e8:e0:22:45:4c:27:70:
71:2d:c2:76:40:15:65:f3:71:81:9b:cf:2e:ac:8d:
18:ae:c0:5d:7d:e6:85:55:a0:39:c6:25:6b:92:32:
4e:ce:ba:14:93:2e:97:af:a4:7a:ce:2e:95:5e:c0:
b8:de:fa:fe:f4:39:f4:41:b2:f4:ec:de:dd:a8:2e:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B6:8D:FB:C6:6C:23:25:54:F7:7E:5D:BC:C5:A6:D9:57:AC:C4:C1
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4c:cb:8a:66:a1:8d:31:d7:f5:fe:aa:f2:53:f5:4a:63:16:
31:16:53:7f:01:e6:c4:60:f3:60:ce:4a:e1:94:eb:82:87:69:
cc:e8:3a:2b:e4:94:91:5f:03:bd:6e:92:cb:c2:9d:ea:2c:23:
d2:28:51:80:ab:51:29:04:27:c8:28:30:28:15:91:4c:c9:45:
18:97:ed:73:d4:83:92:bf:a8:a9:8d:2f:93:05:28:39:9c:d5:
73:08:eb:b6:43:b9:46:54:2f:79:fd:98:6a:1d:3a:45:ab:9f:
9d:0b:40:3c:19:37:ef:15:da:66:06:cd:c0:91:2e:82:71:16:
23:60:f6:3c:9e:47:40:f6:bf:c7:79:a6:51:ee:40:ce:9f:c1:
78:47:55:43:14:d1:f5:11:7f:3a:bc:2b:6d:f2:0c:10:aa:f1:
29:75:ff:a0:cf:c1:83:a0:03:ee:b7:d2:c9:66:bc:c1:d4:1c:
4a:a3:d0:10:41:49:99:44:fe:f8:c2:e3:68:d8:ee:89:1c:8e:
67:b9:1f:ee:2d:ef:51:c2:2b:0e:6f:36:da:54:34:13:78:cf:
47:bc:5d:26:89:97:9c:30:49:6f:48:be:4e:36:52:6e:79:fd:
88:83:68:86:af:45:85:c2:7d:08:f8:11:6c:ee:83:43:b3:ee:
53:42:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:11 2025 by rpki-client