Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: GNM1PMZmCsQpK6cjd6jQkw1leV+xhKYcSww1bXNibCQ=
Subject key identifier: DB:D0:24:3B:88:7A:98:92:94:F2:A7:CC:16:58:45:A0:3D:22:E0:DC
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 019A4EF4B388E6F5157EF6E4DF57322532E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 06E0
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: NWSRnOr7d0fyH2V4rgcZXPkvjhqRkex3c06stnQB1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b3:88:e6:f5:15:7e:f6:e4:df:57:32:25:32:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=dbd0243b887a989294f2a7cc165845a03d22e0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:28:73:6b:16:0e:af:90:30:af:46:a9:06:
8f:97:63:69:9d:0c:3b:ad:68:5c:2e:92:92:c7:3b:
dd:ea:91:f5:b7:f3:21:d8:b8:d5:78:36:98:88:c1:
92:3c:86:ef:de:ab:2e:51:94:f5:50:4b:94:9a:54:
fd:56:3e:4a:d2:24:f3:a1:50:e8:0a:82:27:ec:a6:
91:7a:22:62:4c:49:22:71:d8:e3:3f:70:01:c1:90:
c5:69:f9:4d:61:49:c7:55:60:af:17:13:c5:0c:4c:
5c:2e:98:08:20:2c:c8:b6:4f:76:12:60:bc:bf:88:
0e:1d:5b:ea:b2:3d:73:b4:66:12:6d:38:0c:f4:a1:
83:13:85:07:fc:c2:13:fb:1b:30:c5:fd:0d:e8:c2:
c4:8d:e0:72:b8:ab:66:6b:82:b0:fc:02:c5:7c:b1:
d9:8c:7a:00:bc:c9:1b:04:a4:24:d8:aa:45:2e:54:
36:2a:34:44:19:35:9f:31:62:16:c8:03:c0:6f:6f:
2f:8b:84:af:27:6d:1d:40:58:57:53:27:61:62:ef:
f3:c8:6f:35:6f:56:32:8d:af:63:93:c6:13:f0:99:
51:f5:82:e0:36:13:5e:2f:a6:d6:01:3a:50:cc:d4:
a6:dc:b4:4a:40:f2:5d:73:67:8f:74:03:35:05:6a:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:24:3B:88:7A:98:92:94:F2:A7:CC:16:58:45:A0:3D:22:E0:DC
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:48:5f:eb:10:c1:80:48:9a:7a:4b:49:79:49:55:43:d1:82:
c4:4f:7a:1e:09:3f:e3:8e:0f:cf:d6:66:25:21:ef:e3:e2:94:
29:75:db:65:5a:ba:56:e6:c8:57:95:67:f5:e0:00:e3:31:c9:
df:48:07:ef:99:74:46:9e:23:20:0c:27:31:54:7d:22:db:31:
42:52:94:6b:34:ae:fd:31:ca:a4:d0:6f:72:58:3f:0b:c0:7e:
65:63:65:f3:68:fa:8b:f8:1b:a0:43:b4:b8:0b:64:17:1e:da:
d1:4e:7f:be:cf:af:af:6a:cf:dd:7e:f9:c9:e5:27:c1:c0:cd:
a0:8c:b0:5c:a0:99:04:91:1a:06:12:56:4a:0c:97:67:9d:d9:
41:44:e7:4e:61:c4:28:8f:ce:df:9a:95:6d:07:f9:77:da:fe:
da:2a:21:01:12:6c:c9:0e:e9:0f:c4:9e:f2:42:4b:ae:1c:a2:
c0:b4:36:5c:69:d7:15:d4:85:37:6a:5d:43:84:fb:66:08:bb:
dd:5f:1b:47:e0:e8:09:b1:1e:56:4a:45:c5:95:3b:71:2e:36:
27:89:15:37:63:a1:8d:ab:b0:aa:03:03:70:a3:e8:86:f9:a4:
31:28:1d:20:cb:b3:6b:e7:8e:69:bc:40:49:eb:dc:53:de:45:
20:70:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:51:52 2025 by rpki-client