Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: yLtim919J+U+U4BmOp7aMXPGGQaK8FCX8l/HemPxw9k=
Subject key identifier: 90:A4:FE:EE:C2:5C:71:9B:A9:25:4F:FE:D0:77:1B:02:43:11:A3:29
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019A4F2B96E4A056770336801B6FA9C78CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0426
Signing time: Tue 04 Nov 2025 14:00:47 +0000
Manifest this update: Tue 04 Nov 2025 14:00:47 +0000
Manifest next update: Wed 05 Nov 2025 14:00:47 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: X+7wy6sCKGgFYyQVliOgWD2lxDkkAnvwXM/Z4Cqh7NY=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:96:e4:a0:56:77:03:36:80:1b:6f:a9:c7:8c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Nov 4 14:00:47 2025 GMT
Not After : Nov 5 14:00:47 2025 GMT
Subject: CN=90a4feeec25c719ba9254ffed0771b024311a329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:8c:df:c6:d3:e0:65:fd:d2:7d:8c:6e:aa:
63:59:26:59:43:29:e3:a9:22:18:c3:04:cb:34:a2:
7c:77:2c:d1:cc:4c:f1:47:f6:fb:2c:91:dc:0a:fa:
05:20:c9:da:30:7d:06:f4:fa:f8:c4:21:dd:ee:59:
6d:c3:7f:2a:80:45:23:b5:aa:d4:9f:78:af:4f:26:
3a:67:17:7d:38:15:c4:7d:b7:a8:b9:08:1c:5e:3b:
54:3c:70:5c:c2:45:e1:e5:b7:cc:5b:79:36:bf:9a:
ec:2d:07:26:ee:df:14:d1:fa:c6:0b:a5:64:30:69:
ed:63:a0:a8:3e:79:bf:e6:c9:6c:10:b0:94:17:d3:
e7:6d:d7:c0:83:88:b0:04:4a:e3:78:f2:7d:5e:2a:
01:b1:4a:0d:ac:ad:39:12:ce:f9:83:0b:e8:de:3c:
4b:c1:a5:de:82:b9:45:63:ff:b4:8e:c8:1d:09:e7:
8d:6b:1e:21:de:02:1a:c1:f6:e8:47:51:66:1e:93:
84:1c:50:f3:6d:0e:98:4c:28:02:04:ea:a7:b5:d9:
86:b8:3d:fe:0f:d9:80:63:8c:7e:9a:51:f4:fb:e2:
49:55:74:09:c8:b5:c3:bb:0b:4b:04:32:4d:e6:13:
04:92:31:c4:01:b8:85:70:f8:45:da:c0:7a:0a:50:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A4:FE:EE:C2:5C:71:9B:A9:25:4F:FE:D0:77:1B:02:43:11:A3:29
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:1a:67:e1:40:b1:0f:dc:da:a1:c8:7d:a9:74:30:f2:55:
44:01:39:0e:45:b2:a9:3c:88:71:59:c8:8f:d0:56:0a:17:ff:
b5:dc:7e:23:f5:05:1c:cd:28:6a:90:c3:6d:96:f9:5b:d3:e7:
9d:c6:6f:46:89:3a:78:d8:b3:45:93:c6:77:6c:b2:19:e8:af:
3f:82:c6:86:3b:0a:76:c7:90:de:29:07:0f:07:9c:fb:6f:79:
47:68:7f:f4:3f:bc:8e:ed:b9:01:b5:41:be:de:35:ed:ad:d9:
82:d1:3c:a4:09:d4:57:de:ce:8c:a1:b0:24:32:ea:04:18:c8:
b8:a5:41:ec:5c:b8:91:5e:3a:9b:7e:7c:69:51:07:0a:e4:04:
08:52:32:d6:85:2b:ba:a3:14:0e:f6:6d:36:6e:6f:73:09:69:
53:3a:a9:80:5a:8a:51:c9:e3:31:ff:03:a2:ee:8a:7b:0c:66:
10:02:d1:ce:cb:47:35:b6:0a:93:b5:62:3d:5b:95:63:09:52:
2d:25:69:4d:d5:0c:f8:62:9d:d3:f7:6a:9a:3a:7e:fa:04:26:
65:b2:39:ae:c9:6a:22:e7:08:55:e6:f0:84:dd:5c:8e:e7:16:
79:1b:31:4e:30:16:d7:0c:f3:a4:d4:43:73:4f:64:6d:b7:09:
d7:01:05:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:28 2025 by rpki-client