Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: MEoc3PxSdTDQPj1M4h4LNTamMFd44yihFaUmMogu3y8=
Subject key identifier: 3E:66:50:71:3C:69:C1:0F:11:B0:13:A2:79:FE:24:91:25:A4:42:6B
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019A53ACDB562661C34601A09606F7D1BC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 11:00:28 +0000
Manifest this update: Wed 05 Nov 2025 11:00:28 +0000
Manifest next update: Thu 06 Nov 2025 11:00:28 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: XOhWLJH2nSNqpAeV1FzUb7PvdbtRbd0AFqPFk/eKdGQ=)
2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:db:56:26:61:c3:46:01:a0:96:06:f7:d1:bc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Nov 5 11:00:28 2025 GMT
Not After : Nov 6 11:00:28 2025 GMT
Subject: CN=3e6650713c69c10f11b013a279fe249125a4426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:13:d3:dd:62:4c:68:1d:7b:a5:7e:c1:87:
99:17:9d:f6:57:b2:b1:3e:cd:0f:f8:e0:8d:c0:9c:
20:8f:1b:96:b8:75:ef:1f:37:4c:dc:f7:58:99:30:
49:e7:28:27:54:f0:32:49:8f:27:a7:25:01:9e:52:
f9:c7:d7:da:4b:69:65:82:4e:c5:b9:84:06:af:10:
5d:72:cb:b0:59:08:dd:a2:ee:16:30:79:7c:f8:ea:
47:c4:cd:3d:d8:79:4c:a9:b4:04:90:60:23:a1:00:
42:56:08:d0:14:b9:44:b4:82:0b:58:b0:3b:89:27:
bf:d3:57:3e:bf:52:5a:38:5f:f1:0d:a7:e0:2f:50:
7a:f0:9e:54:d6:93:83:5d:7d:1e:f2:9f:d8:9e:dc:
ec:af:9f:ff:c2:17:ab:4e:32:89:4e:20:14:af:83:
0c:a8:47:f0:9b:7e:43:53:35:e4:c1:45:30:00:c0:
5b:da:33:37:e6:4e:57:a2:7b:74:fd:60:1b:20:df:
9a:b1:f2:df:80:50:19:97:f5:ed:a8:60:ed:b7:64:
8f:74:b8:21:c1:6a:0a:4a:d0:6f:11:dc:c9:88:5f:
b6:0e:e9:c6:82:ea:62:f4:8a:f6:43:71:37:61:71:
5f:7e:d2:d7:81:5a:3f:a2:13:8c:2e:ad:07:96:12:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:50:71:3C:69:C1:0F:11:B0:13:A2:79:FE:24:91:25:A4:42:6B
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:23:81:e5:c9:bc:3b:ce:e5:e2:a4:61:60:e0:bf:1e:b0:80:
05:1a:b9:85:b4:a0:f1:ec:6b:67:56:2f:c2:e7:8b:db:a3:3b:
8e:39:91:2c:56:dc:6b:e9:0e:63:d0:4d:b8:8b:3a:30:36:62:
7a:cc:0a:e5:66:64:53:69:de:63:fc:e0:3f:fa:c9:11:0b:6d:
0f:eb:99:d6:45:96:8b:df:7f:0f:fb:61:a3:a3:17:90:e1:0f:
7c:3b:f7:5e:60:b4:a8:b9:43:17:8a:82:3c:3a:57:5c:a9:15:
b2:08:a1:be:5c:c2:f5:d2:a5:23:4f:82:7b:6b:d5:a4:21:1c:
89:1e:e1:fe:37:60:03:c7:64:95:f6:fe:94:d8:74:c1:58:5f:
7c:82:e3:c9:24:a8:c9:99:07:89:73:5a:f9:b6:e9:0f:8e:98:
d0:50:ae:fb:f6:98:98:e5:9b:a4:ee:61:f1:0c:7e:ca:af:d0:
48:ee:65:f5:e1:17:55:2f:c3:0b:04:eb:89:92:a8:b0:d2:f7:
0c:f9:a7:0c:cb:b3:d0:60:70:34:f0:7a:d5:9e:09:e2:6a:ca:
0f:b1:d4:46:2c:b6:9c:0a:11:d8:7e:c2:1f:8a:49:bf:9e:20:
33:ee:07:0b:ea:7c:a7:41:85:fe:f3:f9:f6:64:3d:05:33:04:
ca:7e:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:47 2025 by rpki-client