Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: 6Efl7n8sLjkeye5UqL4XEgS6y1A0rxv05mooIxwBOtQ=
Subject key identifier: 74:82:83:FA:05:86:A5:4F:B7:10:BF:A5:C1:67:23:B9:83:99:CC:AC
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 019A4E18E3F5A5D99332B9B7F76418D44FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 09:00:45 +0000
Manifest this update: Tue 04 Nov 2025 09:00:45 +0000
Manifest next update: Wed 05 Nov 2025 09:00:45 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: 2MDcFpmJSI1uwh/dGwnIKQnMpUtFrBDV1045ZQgJ3+8=)
2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e3:f5:a5:d9:93:32:b9:b7:f7:64:18:d4:4f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Nov 4 09:00:45 2025 GMT
Not After : Nov 5 09:00:45 2025 GMT
Subject: CN=748283fa0586a54fb710bfa5c16723b98399ccac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:95:04:8a:7a:c3:e8:a4:f6:20:f9:ef:3a:
5b:ae:2d:c8:b9:46:8d:c3:eb:2f:f5:02:3f:2a:66:
dd:59:60:a5:4e:b3:3d:c8:db:9c:cc:ab:ff:af:e5:
0a:f3:01:a2:e8:2a:db:88:a4:e4:8f:54:c4:66:43:
72:e6:ed:a8:4a:86:e2:f4:e0:64:47:ef:56:8a:cd:
d3:a6:42:b8:f5:ee:6f:6a:36:7f:78:61:64:e5:75:
cf:45:b0:2e:b4:0b:aa:bf:7e:7b:95:eb:68:19:df:
28:bd:5e:59:39:7d:39:a2:43:2a:75:ce:53:5b:41:
45:09:ef:91:11:fd:c0:59:84:85:8b:a2:10:93:ed:
55:2d:79:32:49:21:87:56:e5:d2:e4:cc:98:ce:49:
01:2c:b3:d4:1c:6e:d0:99:43:9a:b3:b4:72:13:77:
52:78:aa:83:01:bf:8b:01:d0:a2:d7:81:f3:51:80:
03:9a:2f:3f:a2:e1:6d:b7:72:80:a5:00:43:13:70:
d2:c7:26:0c:76:2c:05:3d:d1:8c:3f:87:a1:34:bb:
81:76:dd:b8:95:c2:fa:15:9f:d5:82:a6:d6:93:13:
11:06:f8:51:e5:78:44:2d:9a:ce:82:c7:61:9d:16:
d3:4d:a7:e8:ba:51:80:e7:20:39:a2:55:75:6a:71:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:82:83:FA:05:86:A5:4F:B7:10:BF:A5:C1:67:23:B9:83:99:CC:AC
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7c:f0:32:d7:cc:46:b9:94:7c:15:5f:d0:f3:8f:a7:31:ca:
55:a7:d6:8e:b6:a5:99:a3:62:67:3f:c1:8f:38:26:b9:2b:06:
59:4a:62:db:44:58:08:bc:40:51:39:21:fa:ec:66:fa:20:0e:
ba:47:57:4e:8b:fb:d1:01:ab:16:d3:fb:e5:6d:79:6a:31:99:
5b:bc:72:6e:95:50:e6:ff:f5:03:29:bc:00:65:59:27:34:34:
f8:22:b7:e9:e6:e9:5b:30:b1:8f:f7:a1:83:05:76:58:68:74:
22:54:05:53:95:eb:37:eb:27:4d:45:14:e4:b5:ed:e4:ae:82:
80:c8:e3:2b:13:1f:95:c9:fd:af:24:93:7f:8d:b2:78:3d:18:
9d:05:57:25:9b:53:de:e6:f4:c9:31:b3:d4:cb:2f:43:dd:f9:
65:56:41:9d:ac:36:75:f1:e0:a1:59:59:9c:4f:07:a7:f3:c7:
aa:38:2e:8e:ba:27:f5:41:f4:b0:7a:56:59:78:44:0a:a2:80:
f0:9f:ac:a8:1d:16:af:d3:40:93:b7:66:d3:8f:a9:b2:27:53:
ac:72:0c:9a:50:0d:6d:dc:ef:fe:45:a1:e5:a3:88:a5:48:1f:
ed:91:cf:e3:b6:c2:cc:08:59:58:c8:4f:95:e4:47:a6:33:52:
48:ee:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:14 2025 by rpki-client