
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: R6/3q6WEvSZat3y7K3XBgUs/LbRca842CecYVJBUPfo=
Subject key identifier: 5A:73:59:4F:AF:9B:8E:B1:A3:57:BA:34:55:E0:EE:98:19:FA:D6:88
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 019A503D944FD5BF6F254DA86E243087D17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 19:00:04 +0000
Manifest this update: Tue 04 Nov 2025 19:00:04 +0000
Manifest next update: Wed 05 Nov 2025 19:00:04 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: fomdCMk/D4tv4QZe5TxvJbSven0dpRsUlOSDpVNlTQc=)
2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:94:4f:d5:bf:6f:25:4d:a8:6e:24:30:87:d1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Nov 4 19:00:04 2025 GMT
Not After : Nov 5 19:00:04 2025 GMT
Subject: CN=5a73594faf9b8eb1a357ba3455e0ee9819fad688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:3b:99:be:fe:27:3d:26:12:26:0a:1c:c0:
fc:5a:69:bb:01:cb:9c:fb:58:ea:5b:ca:d5:29:d4:
19:e1:9f:04:aa:1d:82:bc:cb:57:c6:c8:80:40:84:
c7:1a:47:05:f2:68:45:59:20:85:de:f7:87:69:c0:
fb:8d:20:fd:bd:22:bc:8b:05:00:dd:e6:2f:e7:46:
13:22:c2:6d:b3:1a:84:16:8d:1b:d0:2e:c5:9c:e2:
bd:5f:ba:78:af:39:b7:01:57:1f:d5:14:35:bc:f5:
1f:32:70:80:ad:8d:5a:35:bf:9b:ea:0d:e0:a5:5f:
f3:94:f2:79:90:82:40:95:29:3c:fd:6d:7f:aa:56:
41:0e:2d:59:bc:ef:2d:37:8f:0d:f9:01:be:cc:15:
8a:84:bf:3a:fb:67:ee:20:8c:72:31:f9:64:e2:e7:
9d:01:f4:57:fa:df:1c:bc:81:cd:14:41:b6:31:5d:
46:9f:19:39:09:b7:fe:0b:83:61:f9:3a:27:d0:29:
01:b6:58:05:ea:a4:e3:ac:f2:61:80:19:e0:8f:1a:
ee:ba:a2:b5:e8:05:6f:6f:7e:27:84:b0:91:ec:f3:
d3:91:2c:4f:fc:2e:dd:7d:02:56:4d:5b:d8:a0:63:
36:05:f4:33:2c:4d:bc:d1:cb:0e:87:3f:79:8d:e1:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:59:4F:AF:9B:8E:B1:A3:57:BA:34:55:E0:EE:98:19:FA:D6:88
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:27:53:5f:72:df:30:f1:dc:d8:28:b2:44:6b:89:91:ea:39:
bf:ef:79:8c:08:63:da:c3:66:96:35:00:6a:60:0c:4d:64:58:
41:62:93:f5:bd:2e:0f:ad:fa:37:8e:69:65:f3:4b:f2:6f:ae:
9e:42:8d:5c:79:4b:f6:98:f4:87:bc:d9:9a:7d:f8:c9:03:ba:
ad:39:2c:5d:21:bb:f4:15:76:4a:bb:39:2a:10:21:a4:2d:a2:
22:1d:fa:89:ed:07:cf:b6:1f:3f:9d:46:55:c0:ee:46:f5:75:
4c:b8:27:90:bf:e4:bf:ae:98:ac:1c:39:3a:fd:1a:ea:96:71:
09:3c:94:00:8d:c9:25:58:ab:53:de:21:71:bb:d5:4b:6a:61:
30:d0:46:53:2c:b0:54:4d:9e:b2:18:28:75:5d:65:4a:8f:e4:
d6:2a:b9:d0:9d:03:df:c4:dc:6d:67:3c:46:31:c1:10:87:f4:
e0:c8:96:86:32:ed:29:c2:93:75:59:d9:a8:d8:9b:0e:b0:73:
ce:30:6f:80:45:e2:ac:66:22:58:d0:3c:bf:24:51:1f:ca:d2:
42:83:ad:91:a2:c3:6e:39:16:1f:7d:99:07:c7:97:b9:c4:1b:
d5:f9:43:f9:20:4d:03:84:5b:a5:04:25:d7:af:b1:0d:be:db:
96:0f:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:36 2025 by rpki-client