Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: gnV2rLoijPUlRYyg0nuttoxHq81sPhdYwm20HX25jDE=
Subject key identifier: AC:D2:BE:CD:75:87:E7:7F:52:74:B3:00:18:4F:35:91:7F:5C:18:17
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 019A4E4F8E8B50F3241DE8BE2C10D04362F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 095A
Signing time: Tue 04 Nov 2025 10:00:27 +0000
Manifest this update: Tue 04 Nov 2025 10:00:27 +0000
Manifest next update: Wed 05 Nov 2025 10:00:27 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: SZwcZeHqcxrRxmD7lb5J3SYzmSq8/BWH5VRIWJBYu8k=)
2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8e:8b:50:f3:24:1d:e8:be:2c:10:d0:43:62:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Nov 4 10:00:27 2025 GMT
Not After : Nov 5 10:00:27 2025 GMT
Subject: CN=acd2becd7587e77f5274b300184f35917f5c1817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:52:f4:1f:2d:a0:14:d6:e2:62:5f:11:82:
a6:a7:c7:b0:1f:e1:fe:c1:f1:c4:a1:a7:21:07:e4:
a2:09:59:df:1f:e8:5a:a0:3d:44:04:b0:f6:b0:75:
39:92:6c:37:bf:86:c8:c8:3c:1c:1a:7c:c8:57:7c:
7e:53:9c:5c:7c:ce:bb:6b:f3:df:49:bc:ea:8a:f7:
c7:f5:a2:ec:24:9c:63:26:45:5c:c4:50:62:10:74:
cb:3d:39:7f:90:8b:01:1e:ee:1e:12:d7:86:aa:d4:
1c:5d:9c:08:68:a6:e6:95:a3:7b:87:cd:dc:74:1e:
30:e0:eb:ca:4d:8f:bf:5d:9b:b7:ad:ea:c6:86:34:
8a:49:1a:99:46:2f:cd:61:f4:a6:d9:c0:09:4f:94:
f4:84:4f:6d:e0:e5:19:ad:5b:7d:7c:04:86:56:1c:
ab:2f:07:0a:77:70:b2:1c:14:e3:ee:5d:16:e4:70:
f4:0b:4d:87:1e:78:45:50:a6:eb:32:c2:86:84:15:
0d:0b:02:1e:28:4b:c9:48:68:f4:12:ff:8b:90:37:
60:d7:1d:36:a7:53:e8:b4:31:db:09:3a:18:87:5a:
ea:5c:4a:29:40:55:a2:be:f9:1a:8e:8e:f5:da:a6:
5d:10:04:c7:21:ff:af:e4:8f:46:a8:66:df:1c:c5:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:BE:CD:75:87:E7:7F:52:74:B3:00:18:4F:35:91:7F:5C:18:17
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7d:81:11:96:de:83:86:e9:71:00:52:f9:25:71:2f:f2:fa:
21:24:ae:ce:21:7a:c9:c8:17:0c:49:e2:36:93:1a:bf:e7:e2:
05:d3:f4:14:1c:c7:75:ec:d7:4e:ca:3f:f5:3c:d0:d1:7c:d6:
26:e5:90:42:f9:82:37:10:aa:27:0c:08:7f:d6:14:69:e9:0f:
de:2b:08:99:46:db:27:ae:20:f7:88:79:9e:b1:17:d3:2b:f5:
e2:bf:c5:b4:f2:fd:19:0f:ab:60:9a:37:39:4e:f5:b5:77:23:
b7:2d:7f:86:c5:7b:4a:32:02:73:95:b0:a0:95:bb:19:c6:f1:
fb:90:ff:64:27:0c:0f:59:6f:ec:72:07:fc:72:03:01:f5:ea:
ad:d0:fc:8d:e1:a3:df:b4:3d:67:91:7b:f2:fc:67:a0:23:c4:
14:40:65:09:59:26:c2:c5:9b:3a:da:e9:50:cb:b8:ed:1b:d5:
af:46:81:6f:a1:7f:9e:9c:73:9d:05:ac:f7:2b:22:3a:c9:17:
1d:70:5d:e0:19:71:c8:28:7f:4c:ac:ff:87:cb:8b:be:c4:62:
8d:dd:22:86:f0:f4:a8:30:1a:54:da:62:b5:61:cc:d0:2b:ff:
fb:5f:f7:ae:45:ab:41:ff:af:a2:7c:30:00:c5:ca:7d:89:72:
b0:41:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:35 2025 by rpki-client