Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier: 742FAjwJt8PTtkWq36YtBPUlTPlI1Rhynvg1tHKrLA0=
Subject key identifier: 96:08:8B:BF:51:4F:AD:12:DC:28:3E:6A:E7:D3:2D:52:C1:D2:FF:E8
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 019A522C73657FDF051E285DE6E3A5B225E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number: 0DE3
Signing time: Wed 05 Nov 2025 04:00:35 +0000
Manifest this update: Wed 05 Nov 2025 04:00:35 +0000
Manifest next update: Thu 06 Nov 2025 04:00:35 +0000
Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: BylRXPxnSM0Y+z39JtkKXIrAM8PIBMnRaqWdHpqEErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:73:65:7f:df:05:1e:28:5d:e6:e3:a5:b2:25:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Nov 5 04:00:35 2025 GMT
Not After : Nov 6 04:00:35 2025 GMT
Subject: CN=96088bbf514fad12dc283e6ae7d32d52c1d2ffe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:08:6a:04:7d:37:eb:a4:a5:c1:cf:9e:c9:
1a:d8:19:b4:66:56:ac:a6:4f:84:7b:34:5c:61:9d:
b5:4b:4f:6f:b5:c8:5f:6b:a8:8e:58:14:0f:3e:65:
09:45:41:a6:88:5e:2c:8f:f2:6d:9f:3d:1c:e4:ae:
f1:d5:a7:16:ce:50:eb:8a:c4:6b:ff:76:46:aa:92:
11:99:f7:b3:0c:f7:f5:d0:f4:51:93:21:8d:b8:a7:
f8:1a:0d:38:bc:a2:78:fb:dd:81:54:e9:ca:be:55:
ba:04:d9:95:e0:b3:9b:d5:b4:41:ef:52:27:f1:42:
ac:9c:d0:7c:29:23:70:ba:a9:ed:cf:89:8e:1a:6b:
2b:72:6b:db:21:9d:93:8e:95:b6:96:7f:a3:32:64:
34:95:c2:59:a7:2f:71:15:d6:7a:1c:03:46:4e:a6:
2f:6a:97:da:20:69:d4:1f:08:13:99:78:b7:ed:70:
3a:b5:11:58:dc:73:56:a5:6d:bd:ff:49:8f:2b:92:
27:1f:2e:03:72:70:36:40:10:d7:a4:9e:ca:ba:71:
43:af:9b:72:ff:86:31:b7:a4:12:21:0c:8e:89:13:
f4:53:ed:92:ec:76:57:8d:2c:65:17:1b:09:99:45:
44:ef:a5:68:33:31:f8:bf:a9:b3:cd:3b:ea:86:7d:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:08:8B:BF:51:4F:AD:12:DC:28:3E:6A:E7:D3:2D:52:C1:D2:FF:E8
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:d3:12:16:f9:70:12:c5:40:6f:f2:3c:99:32:70:73:e1:8e:
de:00:9b:73:3a:e6:a8:57:1a:2f:56:77:ce:a8:72:55:ff:ac:
ef:cc:06:b9:58:c1:71:66:db:29:4f:ae:c5:11:19:78:8a:d0:
09:44:01:cb:0f:35:9a:a0:cb:e5:46:a8:2f:cf:19:7f:28:f4:
ff:66:8d:a3:2f:9d:00:f2:d3:ba:a5:f8:97:21:ac:97:4f:78:
f8:df:aa:f6:a8:86:fb:b0:61:24:7f:28:d3:b9:88:22:44:0b:
ce:31:51:75:86:15:71:09:27:88:a5:03:e5:2d:93:a9:86:79:
e7:80:99:9d:32:c1:e0:45:72:28:32:ee:87:67:54:73:00:0b:
30:f2:55:ce:50:dc:c3:17:2c:08:d2:69:09:8d:4d:7f:9d:b6:
83:23:71:77:02:9f:c0:fd:61:54:26:f9:bb:d7:30:a4:f6:87:
e4:e9:ce:74:5f:b9:e1:fc:61:a5:5d:fd:6d:46:05:0c:af:6d:
fc:6a:99:a1:88:d8:77:80:fa:8d:c6:9a:f3:8f:6e:ba:10:df:
0a:bb:43:f6:0c:d3:f6:12:d6:8b:cb:ee:f5:7e:bd:da:22:cd:
c1:b3:9c:a7:7f:47:e5:94:f6:d8:d5:fb:ae:fe:76:ac:b7:f2:
30:c3:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:36 2025 by rpki-client