Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: vTCPP0lYpW8Ux51qUt0mKCsOom3dUOIW7p37FM7IxL0=
Subject key identifier: 5D:FC:F8:50:20:24:AA:1E:0A:62:D9:6B:F3:AB:41:72:05:9F:97:F2
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 019A50077A0044333FFD03449EC094B72DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0DAA
Signing time: Tue 04 Nov 2025 18:00:58 +0000
Manifest this update: Tue 04 Nov 2025 18:00:58 +0000
Manifest next update: Wed 05 Nov 2025 18:00:58 +0000
Files and hashes: 1: 6Y2-BPBwmi0ajRFfuk-7gjxb3VY.roa (hash: zEnO2OcP02snJFVmokqdabitxnMtngb7RKkC32lY0BQ=)
2: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: 7jAldfOovJfBcM+ya472yYRlwKxAK+HJlyXn+QOYk4A=)
3: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
4: tn_gy-6KAV5ZpTSqYbryoSs6AIA.roa (hash: tZ5/NhO61aB/g/lfOTBKTOhiuBSX3QMZ1HNoyXDOpwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7a:00:44:33:3f:fd:03:44:9e:c0:94:b7:2d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Nov 4 18:00:58 2025 GMT
Not After : Nov 5 18:00:58 2025 GMT
Subject: CN=5dfcf8502024aa1e0a62d96bf3ab4172059f97f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:1e:c8:b3:2b:b6:35:ad:c7:b5:26:d4:26:
7a:39:0a:c9:b8:1b:2b:d5:3c:9a:fb:62:a7:ee:2a:
6a:7c:ab:38:4b:d2:11:42:a6:bf:4a:a9:74:f2:02:
2d:f2:ca:3c:d4:9e:e7:6b:38:96:c3:85:44:92:9f:
5f:28:f4:83:b2:28:10:48:e0:2f:5a:f9:87:24:cf:
15:87:af:df:58:be:d6:60:33:19:e1:c2:c6:2f:ca:
96:fd:16:46:f9:e0:21:c5:9b:b8:64:81:2b:98:05:
7b:9c:7c:75:5d:18:06:4b:94:5f:ae:7e:24:f8:55:
9b:35:79:15:8a:05:36:ff:c0:9d:fb:3f:30:8c:c5:
80:6f:dc:89:13:c5:78:ff:61:7c:3b:c2:e5:b2:87:
58:61:23:6c:25:d2:93:3d:89:04:8a:3f:cb:6a:68:
c1:6c:46:78:a9:ba:d0:09:b3:ae:5f:89:03:d0:48:
b7:73:ca:93:e4:aa:3f:fb:d7:ce:35:49:be:8c:2f:
2d:f2:f8:ed:3e:42:03:a9:42:8b:fb:a8:bd:25:52:
a0:3a:39:81:4a:96:ba:f4:5b:89:ad:f0:f4:e6:1e:
62:46:15:9c:bb:e6:ce:ad:62:fb:7f:8a:b2:01:c3:
9a:b8:b0:c6:3c:29:0e:07:15:ae:ae:07:41:44:ef:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:F8:50:20:24:AA:1E:0A:62:D9:6B:F3:AB:41:72:05:9F:97:F2
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7a:2a:f5:1c:22:05:65:52:b4:d2:c1:c1:e1:e7:1f:af:3d:
00:ad:9e:61:03:be:32:73:0e:65:18:50:56:dd:4f:b1:76:b4:
46:6b:12:d8:31:de:03:6f:e0:3e:29:fe:e1:81:c2:35:4b:d7:
89:ec:3c:6a:2a:58:90:66:c6:dc:1d:44:81:a5:53:6c:8b:c0:
21:df:e9:e9:af:ad:46:e0:26:45:39:f6:70:84:ea:80:49:42:
84:05:aa:6b:4b:60:03:3a:33:25:f3:c1:03:97:a5:42:0b:e0:
65:da:fb:14:e8:2a:cf:f2:dd:35:e4:02:25:bf:06:ee:c0:2d:
12:72:ff:47:27:ca:13:8d:7f:46:4a:9b:9d:f4:03:6f:02:da:
0d:87:69:56:60:c5:0c:d9:69:b5:65:68:06:19:8b:28:0b:d5:
5d:34:0f:8b:0c:c8:1b:3b:23:31:a5:f5:39:16:4c:3f:15:95:
66:ae:ab:c7:10:2d:c4:8e:00:d0:a4:38:9d:4a:d2:69:49:a5:
ae:7f:1a:b4:5d:bb:35:90:19:03:00:bd:82:17:d2:fb:21:6c:
66:c4:a6:93:fd:75:5f:73:bc:42:14:25:08:6e:66:a5:a8:f2:
9e:ce:9f:e8:18:ee:c6:6d:f8:e0:f9:5e:4c:d6:01:80:30:62:
a1:29:78:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:04 2025 by rpki-client