Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
File: DpFsLKNrUAlu4v5EuUUpwto8PsI.mft (raw, json)
Hash identifier: bOwiXbgN145YNRrJ36YA0gKYekJwdBrMNf1RZlhLAOw=
Subject key identifier: FD:37:AA:C7:FC:0B:27:38:00:82:55:81:86:3F:9A:DB:C9:BB:BC:7C
Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
Certificate issuer: /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Certificate serial: 019A4C60F6AC75F92EDEAE507DC775BF2E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
Manifest number: 0492
Signing time: Tue 04 Nov 2025 01:00:14 +0000
Manifest this update: Tue 04 Nov 2025 01:00:14 +0000
Manifest next update: Wed 05 Nov 2025 01:00:14 +0000
Files and hashes: 1: DpFsLKNrUAlu4v5EuUUpwto8PsI.crl (hash: 9rIhnWA9yPmPDbrJSfJpV6oIsoPkg+vogXprZRmFq4M=)
2: QGeFBaZMcPUbZlccMoyAnOzy3gE.roa (hash: 7YeLQ57g/FUFF/JvQDJhVLUE18/59LuhhMGoWNanM4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:f6:ac:75:f9:2e:de:ae:50:7d:c7:75:bf:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Validity
Not Before: Nov 4 01:00:14 2025 GMT
Not After : Nov 5 01:00:14 2025 GMT
Subject: CN=fd37aac7fc0b273800825581863f9adbc9bbbc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:f6:41:ce:88:9f:2b:39:1b:ed:d0:a6:7b:
e9:38:54:7d:35:ee:5f:a7:ac:20:75:0e:43:82:b0:
7b:df:f0:e4:74:d0:3d:ed:e4:b9:7e:3b:02:ee:12:
2c:97:e5:0c:96:f3:64:c9:89:15:8b:47:4b:ab:59:
e2:8d:0a:74:c0:a6:fd:fc:6d:88:83:9f:82:02:4d:
0a:b5:1d:f0:33:20:9a:27:f1:06:04:cb:43:9b:d3:
e5:6e:76:6f:5d:18:09:6b:a6:e1:8b:ed:e4:74:62:
4b:83:53:85:48:f7:1e:83:fd:3f:93:02:ea:69:0b:
92:ed:81:f7:72:19:fc:f6:f0:48:02:31:03:be:f3:
06:c1:91:eb:ca:ed:c5:d9:7b:3c:d3:79:e8:a4:a2:
db:82:44:01:1c:b2:29:2a:6b:af:12:39:4b:e1:7d:
16:5f:95:af:2e:c6:d7:de:37:ee:97:3c:4a:36:88:
13:08:32:f1:02:dd:e1:56:d7:1f:c6:60:ab:71:08:
79:4d:30:30:4d:90:5c:96:b0:36:0a:9b:0e:13:fc:
21:45:66:77:35:fe:a6:60:80:51:79:65:62:ec:ca:
3b:c7:6f:e9:c3:d9:f7:9d:25:d9:2f:19:a0:08:56:
bc:e4:e9:30:ce:3a:8b:3c:7c:e3:3e:62:27:c1:8f:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:AA:C7:FC:0B:27:38:00:82:55:81:86:3F:9A:DB:C9:BB:BC:7C
X509v3 Authority Key Identifier:
keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:3c:bc:13:02:62:9d:6d:cd:1f:b9:40:25:0f:15:fb:7a:
29:9f:6c:13:7d:3f:46:d0:3f:2b:03:f1:ac:d6:ac:ff:a2:d5:
d3:2d:dd:f7:e1:bf:08:2f:39:e4:36:83:e0:8b:c7:2b:af:27:
2c:95:4a:6d:20:29:47:0a:fb:3d:8c:92:ce:e0:e0:37:4c:f0:
be:aa:fb:fa:e5:91:81:7a:e9:b4:90:ed:f1:b1:43:d8:49:36:
c4:bb:ff:e8:b2:84:5b:fb:4f:16:4d:8f:56:cb:0e:3f:d5:aa:
ba:1c:af:da:98:d1:b8:44:b2:34:c6:d6:7f:b8:19:9a:8a:b6:
71:2e:6f:97:61:c7:a6:fa:db:dd:a7:76:81:2b:ed:31:05:f4:
79:e8:ac:b1:7c:21:5d:d4:18:60:47:7a:9d:0d:ab:56:47:bf:
e3:99:43:2d:b0:71:1a:cb:09:fd:d5:97:1a:b5:94:06:0d:fc:
77:ca:4c:44:47:38:4f:a5:2f:45:19:0c:f5:3b:0a:26:a6:ed:
64:0a:d2:f2:f0:33:74:6b:4f:20:f7:a8:88:5c:18:bb:fa:80:
fc:21:48:bc:b1:98:db:e0:a5:22:7f:48:fd:4b:cd:33:4d:26:
63:4f:dc:02:e2:2e:4d:46:7e:51:51:e4:2d:01:05:9b:50:40:
ed:07:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:37 2025 by rpki-client