Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: SUq5iPMQ3y55uyuno0ihMdKCoMcfYLMd5XFDnDkUIm0=
Subject key identifier: 35:B8:57:7C:B5:F4:CC:B2:15:A5:0F:30:F3:26:83:56:C3:0D:20:57
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 019A52634E1B7719D29638BAEE81DD596F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 05:00:30 +0000
Manifest this update: Wed 05 Nov 2025 05:00:30 +0000
Manifest next update: Thu 06 Nov 2025 05:00:30 +0000
Files and hashes: 1: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (hash: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: fXJ02V0aN7qaLym4PNhZrY1y8aVKN/cILiKyIZFNdQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:4e:1b:77:19:d2:96:38:ba:ee:81:dd:59:6f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Nov 5 05:00:30 2025 GMT
Not After : Nov 6 05:00:30 2025 GMT
Subject: CN=35b8577cb5f4ccb215a50f30f3268356c30d2057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:06:2d:b0:91:f5:2b:90:a7:37:9a:3b:d1:
e8:ab:d6:95:a0:03:bf:4a:b2:f4:14:1a:2a:2d:3a:
39:20:e3:84:85:2c:e4:5e:f8:7a:56:89:c9:b8:02:
26:00:a5:32:62:a5:2d:44:7e:c8:3d:b1:a6:08:d3:
12:25:aa:f8:8a:e9:10:d3:72:b8:70:bb:9f:11:fd:
d7:e1:83:4d:b0:82:6d:89:63:23:b9:96:85:98:ee:
30:6b:bc:0a:64:bd:3c:33:69:3f:f4:c6:f2:51:9a:
fe:82:3c:e7:af:aa:f3:63:a3:6b:b5:4a:64:59:93:
04:92:09:15:f2:96:68:1b:d6:43:7c:2c:86:57:4b:
70:a4:49:f7:13:fe:77:a0:b3:60:74:03:7b:3d:84:
47:8d:66:01:38:18:b4:f5:15:f3:a5:64:07:5b:b1:
58:e4:d7:5a:7b:ec:0a:0b:3f:67:4a:08:35:dc:5f:
59:69:47:2a:ba:51:8b:0d:fd:4c:3e:b0:53:5b:d7:
2c:59:9f:16:66:d2:4f:2f:a5:8a:a0:a0:fd:53:5c:
b9:0b:78:e4:77:93:43:73:ee:cc:cd:83:5c:c9:2b:
a8:c4:a0:e7:0f:58:c0:6b:8d:c4:82:e8:6c:13:3f:
28:8a:0b:30:55:b1:cd:30:a0:5d:f5:a5:f3:48:ba:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B8:57:7C:B5:F4:CC:B2:15:A5:0F:30:F3:26:83:56:C3:0D:20:57
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:a0:86:2d:d8:41:4b:6a:44:b2:ef:67:d4:2b:46:40:57:
c7:84:8a:1c:77:37:22:a4:17:25:06:d3:63:53:21:95:67:f4:
38:e2:d5:2c:d2:01:0a:96:cc:8e:a4:93:d8:2f:1a:9e:52:bf:
83:95:eb:e5:89:d3:76:05:7e:49:f8:90:2c:ee:52:40:6d:74:
7e:72:a1:24:fc:e5:be:db:15:91:7d:66:a3:b8:89:d8:fa:4e:
8b:e0:72:bb:d9:3e:be:6d:f5:00:dd:bf:7c:ac:3c:1c:ed:f9:
fc:fa:ba:af:6c:b1:4c:90:39:e1:0d:64:17:9f:c3:8f:6b:a7:
ba:a1:1b:65:2a:dd:d8:00:b3:e3:a4:a7:a5:57:82:f1:95:5d:
ca:db:5f:10:61:ea:ad:d8:ec:8d:f3:8d:7a:ed:62:27:93:e7:
12:4b:01:27:76:d4:97:fc:20:40:b9:32:5b:d6:ce:a0:b7:f4:
da:2c:06:e1:ba:ae:28:8c:ef:3f:29:50:61:f0:63:ec:b7:ca:
65:37:ad:12:92:23:10:30:c4:9c:18:b6:58:ac:8f:10:5e:c1:
b3:7f:65:17:52:cb:e9:3e:6d:d6:e8:e1:b0:46:3e:35:dd:b9:
8f:e7:e3:19:11:c7:99:a7:ad:21:72:a6:3c:73:a2:68:99:04:
cd:b6:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:08 2025 by rpki-client