Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: 3rfK4JSHDAunLJv4edEq3shi2cHg0zvodIanIonq4e8=
Subject key identifier: 74:87:5E:CD:7E:D8:29:CF:D6:60:7C:82:D0:55:DA:D6:50:B8:A0:B0
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019A4DE2029E813327C5D1BEAFF154B94B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: RV8Jxqg/jY0owfvj7221XDKTQQAHc9v/bRHIGyDHyn0=)
2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:02:9e:81:33:27:c5:d1:be:af:f1:54:b9:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=74875ecd7ed829cfd6607c82d055dad650b8a0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:60:9c:35:ef:49:ed:49:8b:f0:3b:8f:53:
f0:c9:0e:b5:37:97:2b:d3:8b:79:27:3b:46:64:bc:
1d:14:b0:8b:27:85:8b:b3:11:4c:ef:c8:de:94:d1:
be:d4:d6:3a:fd:58:cd:e0:7a:08:5c:54:3e:41:84:
b2:91:6f:a3:15:ae:ed:8b:9a:74:df:c3:60:bc:9f:
09:5f:36:cf:cf:60:9d:be:1d:a7:64:6e:0b:38:e9:
e4:b2:b8:47:26:46:86:5e:93:d7:4e:6e:3c:58:77:
3e:11:9b:aa:76:39:16:c1:84:3a:71:ae:e4:0f:a3:
62:f1:f8:c4:6a:92:21:c6:72:eb:8a:4e:ec:5b:dd:
ca:e4:d8:01:6f:6f:10:ce:d3:94:75:82:26:63:35:
cc:89:ec:1b:4b:c3:6a:fd:54:2b:06:3f:5b:19:88:
03:05:29:5e:a7:08:a9:3d:63:c0:56:63:91:bc:14:
fc:ff:99:1b:36:ec:e5:f8:25:8f:46:dd:2b:9f:6a:
21:ba:2d:2b:e1:1e:97:7a:a0:10:2b:40:79:4c:a6:
e8:9e:39:bd:03:10:00:d5:c5:7d:cf:15:58:6f:6b:
d0:01:89:9c:00:b6:17:5f:33:9e:6d:ad:11:2f:7d:
ed:fc:f2:93:71:05:bc:6b:d5:18:58:5a:5e:9a:56:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:87:5E:CD:7E:D8:29:CF:D6:60:7C:82:D0:55:DA:D6:50:B8:A0:B0
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:88:e7:6a:06:f4:81:9d:22:80:43:d1:4a:fa:dd:a0:f4:2b:
41:50:10:6e:30:0d:e1:f8:96:54:ac:8f:82:32:96:b8:b3:88:
7e:87:fa:81:bc:89:39:f2:be:03:d9:9e:e6:79:11:8d:f8:24:
4b:31:6c:9a:5f:e9:d2:3e:13:8c:5a:27:27:de:19:cd:4b:37:
d5:40:9d:78:3c:b8:12:14:43:63:bd:d5:5f:b5:07:d0:02:b7:
90:20:aa:d9:cd:5e:34:6c:f9:e1:ba:55:10:f4:85:2a:9e:25:
7a:85:74:a5:89:d3:cf:e6:6a:10:a9:b4:ee:b9:24:8e:53:c4:
33:5e:2b:7d:fe:26:ab:89:ce:c3:7d:51:80:2a:8b:4e:f5:36:
71:e1:ef:bc:dd:12:f1:6e:02:48:d1:35:b8:8a:d7:6d:0d:0a:
1d:e9:48:78:13:10:b2:d4:76:b9:9a:e2:5f:2e:76:03:b8:e4:
1c:12:05:80:cb:c0:3a:e8:db:b1:49:b9:9c:b0:04:0b:51:c4:
d7:85:32:6c:19:26:8d:60:4a:5f:2e:32:dc:fa:2e:ae:26:d9:
c6:f2:8b:4a:9d:06:e9:dc:02:db:04:8e:d2:a5:c4:aa:2f:8b:
e9:77:37:3d:58:8c:7a:67:00:2f:86:c8:08:cf:c6:d6:d2:2e:
3b:c4:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:55 2025 by rpki-client