Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: 8MAbPLFPLAmaZmwuKGMa/W8SzlmR4CPvZtCHiKkDzkU=
Subject key identifier: F8:45:D7:32:6A:4C:77:CE:71:7C:7B:48:68:75:D7:71:9B:F4:E3:2E
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019A4F992FE8F23CEC27F6DEBD21D2866507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 166B
Signing time: Tue 04 Nov 2025 16:00:30 +0000
Manifest this update: Tue 04 Nov 2025 16:00:30 +0000
Manifest next update: Wed 05 Nov 2025 16:00:30 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: FXKGDqtXqugtjy7ULQgIlcgnKqr9q36CP8DyGu/jK60=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:2f:e8:f2:3c:ec:27:f6:de:bd:21:d2:86:65:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Nov 4 16:00:30 2025 GMT
Not After : Nov 5 16:00:30 2025 GMT
Subject: CN=f845d7326a4c77ce717c7b486875d7719bf4e32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:75:39:4f:55:9b:e8:7b:b5:e8:82:e9:d0:
6f:6c:f9:8d:cb:82:a9:bc:6e:d1:38:14:1d:7a:be:
b8:5a:e8:9a:64:f6:b7:9f:ab:88:47:ca:1b:79:29:
e1:f1:47:70:fc:82:eb:fd:2e:be:83:ac:c8:63:e1:
f4:b2:0c:52:4a:3a:bd:eb:16:f8:1b:d6:8a:74:88:
a3:10:aa:32:ad:55:0e:52:22:4c:cc:0d:6d:71:cf:
cc:58:a3:ae:3e:76:b2:38:8d:39:f1:ee:48:2e:81:
28:ca:e1:65:8c:0e:c4:ce:18:3c:2a:e7:56:a5:f0:
b7:72:c7:b0:d4:60:82:fc:af:a9:3a:ce:76:1d:58:
26:e6:a5:cd:75:f4:85:72:2c:29:4d:79:3e:65:6f:
31:a9:63:30:80:82:67:87:f4:eb:4c:3a:a9:b3:c2:
b1:44:cb:2d:84:f9:f5:51:c7:e9:2c:13:41:08:52:
99:8d:57:df:3b:c3:28:38:d6:5d:24:5f:6f:51:6f:
e1:8c:2a:2d:6d:58:61:5a:f7:b4:91:99:0c:eb:5c:
25:c9:d9:9a:d5:64:94:e0:2d:12:df:68:27:61:cc:
62:64:23:f4:4e:bc:8a:eb:9a:9c:50:e7:1f:3e:6b:
71:8e:a7:e0:43:78:46:22:6f:16:01:0c:78:46:85:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:D7:32:6A:4C:77:CE:71:7C:7B:48:68:75:D7:71:9B:F4:E3:2E
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5a:d0:de:ef:02:f6:84:a3:87:0a:64:34:11:86:ef:63:76:
f5:d4:1b:9d:8f:d7:ce:f9:f6:a7:76:d5:9a:34:c5:65:a2:0d:
10:c0:75:3f:44:30:27:d5:50:b1:6a:11:cf:2a:fb:b3:ad:70:
bd:a9:ac:2d:24:f3:78:6e:99:9f:1d:82:ac:5e:40:94:38:e4:
5b:44:be:8c:a1:2f:51:ca:33:a7:59:ec:95:d2:b0:01:c0:be:
f2:e9:55:ee:98:ba:3d:bf:65:e9:aa:75:0c:d2:04:dd:84:b6:
3a:a9:09:1e:69:81:27:a6:ef:11:58:c4:19:c5:63:b0:06:de:
a8:7a:82:9d:f8:25:7d:e7:db:d1:b2:96:3a:da:1d:61:49:cb:
c2:28:9c:77:c7:be:a6:06:92:33:2f:bf:4b:c7:74:02:fb:00:
a2:94:5d:8d:e3:c9:42:39:33:c4:f7:55:e8:44:b3:40:28:b3:
72:36:49:44:c8:f9:aa:79:0a:d8:48:06:b3:b4:44:9c:a9:44:
8b:de:37:5e:74:64:87:a2:37:d1:bf:5a:ed:f9:a0:4e:6e:dd:
24:bd:7b:99:97:48:9d:17:d4:5c:94:6d:be:ad:bf:5e:23:a0:
fd:5f:a3:ee:91:75:3e:33:d6:ad:ba:e6:cd:56:17:1f:8e:0c:
30:86:ab:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:24 2025 by rpki-client