Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier: cTgIGZNG0N631Srf5MT0iY3zRTexH3lPro2X0MU/olg=
Subject key identifier: 49:FA:02:18:97:03:6F:8E:3B:41:3F:06:69:62:2B:0C:7E:9E:B1:13
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 019A526362F6CC5A62ECC41CDF46AE693F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number: 0429
Signing time: Wed 05 Nov 2025 05:00:36 +0000
Manifest this update: Wed 05 Nov 2025 05:00:36 +0000
Manifest next update: Thu 06 Nov 2025 05:00:36 +0000
Files and hashes: 1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=)
2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: kDIb3cRBpO/l7skDDBTiJRaaqwVcVm3rrxN2JxBYQM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:62:f6:cc:5a:62:ec:c4:1c:df:46:ae:69:3f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Nov 5 05:00:36 2025 GMT
Not After : Nov 6 05:00:36 2025 GMT
Subject: CN=49fa021897036f8e3b413f0669622b0c7e9eb113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:17:43:9a:fd:de:2e:aa:1b:87:bc:f0:36:
65:f6:f2:d7:14:55:08:44:12:c7:2c:81:e2:4a:f0:
c7:b6:28:cb:35:1f:50:1b:e1:8b:bb:94:c8:37:ee:
dc:48:44:f7:84:cf:f0:3a:b6:59:22:2a:96:1c:c9:
93:28:79:83:3e:2e:0e:8a:cd:6a:f4:fb:98:71:71:
84:3e:3b:5c:1f:bc:f2:6f:4d:12:00:87:82:36:9e:
7b:88:4d:88:54:3d:04:35:fb:eb:41:56:c6:17:d9:
17:0c:81:66:27:a8:9e:da:15:9a:c5:78:52:a6:b1:
98:64:d8:95:8e:04:5b:27:1f:7d:86:2f:04:a2:86:
13:55:45:be:69:67:87:6f:30:29:f6:f4:14:54:18:
07:7f:3a:69:73:09:52:c5:30:41:2f:2d:1e:13:4f:
f4:6b:c2:02:c5:7a:65:3d:b5:fb:c3:b6:8f:b0:bb:
94:93:92:a9:b5:78:34:ce:a8:c1:54:aa:07:11:2b:
5f:ac:52:0c:d7:27:a7:4f:50:1f:2c:47:27:f7:0d:
76:a0:ec:8b:d9:9a:e6:e0:15:a3:39:17:22:11:8c:
20:65:4f:6b:ed:4a:50:97:fc:7c:aa:50:8b:07:82:
c8:c7:76:26:22:d7:1c:1b:64:14:b6:be:a8:e3:75:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:02:18:97:03:6F:8E:3B:41:3F:06:69:62:2B:0C:7E:9E:B1:13
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:db:b5:28:6b:bb:c9:c1:2e:9b:fa:40:a9:e5:ef:5d:b4:da:
84:a2:5e:a5:25:ed:96:f3:9f:81:ae:12:7e:d2:2d:cf:5e:7e:
2f:f6:52:4d:48:4d:b7:15:72:f7:49:75:e7:3b:7d:66:0b:8c:
34:4a:82:74:66:11:c9:28:c4:50:67:fa:20:45:ad:e3:47:00:
63:1f:fe:9d:b0:f5:f9:d6:df:b5:b8:16:05:7b:53:93:09:82:
32:cf:cc:07:47:0c:6b:a5:8c:75:39:62:e9:47:36:4d:6e:2d:
05:e3:26:ec:8f:93:65:ef:5a:44:e4:3a:e6:8f:70:dd:5a:71:
7e:3b:3a:d3:15:fa:c5:dd:d3:3d:82:a3:48:f7:21:0f:f9:7e:
34:3b:5c:3a:e2:f0:d5:b1:64:b4:81:31:ee:33:6d:a0:03:62:
0d:97:70:e8:14:55:6b:f0:b2:07:ae:9a:57:9c:f0:35:61:65:
70:07:72:35:70:dc:51:a1:25:6e:13:4e:e4:4e:fd:d6:17:a0:
57:61:0c:00:14:bb:68:5d:03:95:fc:c7:e0:dd:41:92:a9:47:
82:8e:8f:a4:b1:40:ec:d2:c0:73:95:9d:69:e7:1c:6c:3f:45:
c3:9f:c1:f8:8a:cd:7d:86:34:fa:d7:8f:dc:2e:b8:fd:19:b4:
ed:80:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:10 2025 by rpki-client