Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: whr9HZQUoahammfRbeNa6TnBudYDALHcUNRG5n/hg2o=
Subject key identifier: B4:1D:74:9E:4E:7F:17:AC:13:5B:67:70:56:9E:8D:CA:4A:80:06:BD
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019A4F2B7F037AE9DBDFFF431D4A69EFEA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: 8PcaPbYdrp7m5AAdOLSNTiwwbxfWDTrM2qNvCuAE4ag=)
2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7f:03:7a:e9:db:df:ff:43:1d:4a:69:ef:ea:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=b41d749e4e7f17ac135b6770569e8dca4a8006bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:61:25:38:28:fd:c6:47:cf:9f:de:62:80:
c9:97:fc:b2:95:86:a9:05:73:3a:0b:7f:61:07:0c:
24:53:e8:6a:58:ec:6f:e6:86:75:5d:e9:28:fb:2b:
33:6b:64:b0:f6:5f:f2:0c:b0:19:4d:1a:3e:3a:8c:
43:92:75:e8:d3:53:2d:92:3e:e5:24:78:fe:ce:bc:
6a:6c:8d:74:54:b1:7e:6d:d3:45:d5:32:b3:00:b4:
69:14:23:cc:31:3b:86:76:17:0b:81:bd:50:30:87:
8c:d3:26:88:1c:b3:2a:4d:20:3a:3c:2d:ee:d0:e6:
db:43:22:98:ff:2c:7a:49:96:e6:44:96:45:9f:f4:
6d:e5:9c:67:d8:7c:d8:18:8d:ad:93:1c:6b:57:9e:
bf:ae:38:d9:49:20:f1:31:9d:13:19:9c:4f:61:0d:
17:3a:5e:fa:6e:99:cb:79:78:57:ca:fa:72:8c:c3:
be:ac:25:be:85:e8:d3:17:eb:8d:a4:66:da:88:07:
cb:52:b4:03:3b:1d:be:0a:45:4a:45:b7:35:5a:dc:
7b:28:55:20:c7:30:c2:36:49:26:9d:85:d3:24:2b:
21:a7:1f:66:69:dd:14:8a:62:53:e8:36:b8:1f:c0:
b6:d1:be:7e:ec:da:5b:f1:67:b8:84:2b:81:4c:e0:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1D:74:9E:4E:7F:17:AC:13:5B:67:70:56:9E:8D:CA:4A:80:06:BD
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:83:2e:9f:84:8a:e2:38:3f:f3:ed:2f:0a:e2:0e:00:ba:5f:
f1:9b:00:83:cb:3b:18:f3:f1:27:a1:ce:16:8a:71:d6:3d:73:
d4:9c:2a:94:dc:10:96:fc:a7:59:26:75:19:fd:ca:52:65:ba:
71:f3:a9:ce:29:e4:45:1a:27:75:99:cd:c5:bd:2f:92:bd:ba:
47:d4:12:a0:fd:aa:d3:d0:2e:16:09:e1:43:a7:fc:c5:11:bf:
dc:8b:33:3e:70:e7:1c:6d:e4:b3:5c:7c:28:6d:af:4f:2f:ad:
4a:5a:8a:18:ab:62:e3:0f:c8:bc:d3:40:7b:cd:ce:58:56:0d:
82:cd:84:48:81:bf:12:3f:ce:24:e3:a1:c4:dc:47:fb:db:0c:
35:b9:c8:dc:56:0d:ce:1f:4d:cc:a6:9c:ce:1e:ca:cc:38:ab:
2e:a4:93:e4:08:c3:4c:3a:77:92:40:9a:f8:92:a9:13:e2:e5:
ea:55:41:18:0f:c6:ca:54:39:a7:b9:81:3d:20:8a:b2:a8:08:
06:3b:f0:69:d9:4d:c3:06:82:50:34:9a:27:45:d4:54:63:8e:
5d:9d:c5:49:f9:aa:c4:52:34:80:00:21:56:26:26:09:0b:d7:
95:89:3c:43:9e:5d:25:ce:46:f8:40:8e:78:b2:f1:8c:9f:eb:
66:ed:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:09 2025 by rpki-client