Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: oy/eWjvkb4kiev0TqPnPuyI6Ri9/HvBVejoQOBSKYV4=
Subject key identifier: 68:45:95:DB:82:55:F3:11:B3:90:65:C6:24:63:EE:C7:C0:D9:E9:04
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019A50072C696DC5ED857F91F434B104874F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 07BF
Signing time: Tue 04 Nov 2025 18:00:38 +0000
Manifest this update: Tue 04 Nov 2025 18:00:38 +0000
Manifest next update: Wed 05 Nov 2025 18:00:38 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: N/vd3oRVpdCcM1i8hbxbbwnlKVH08HTCq/3p+WKomyk=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:2c:69:6d:c5:ed:85:7f:91:f4:34:b1:04:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Nov 4 18:00:38 2025 GMT
Not After : Nov 5 18:00:38 2025 GMT
Subject: CN=684595db8255f311b39065c62463eec7c0d9e904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:93:7c:8d:b7:90:fb:d4:4c:3d:30:a0:49:
a1:58:a6:08:8a:ee:93:ae:16:83:ee:a2:68:f9:32:
4a:bc:8c:ec:85:80:1f:6b:bf:e7:c8:e8:c4:e2:36:
62:7d:c1:05:71:c5:10:ac:31:bb:4d:3e:e4:ae:79:
8b:64:8c:5a:84:ea:8f:57:04:a9:70:0e:bd:c3:62:
0c:d0:cb:9c:d8:b3:02:24:76:9d:31:73:5c:8f:40:
c6:6c:97:1c:85:e4:1e:20:07:74:bd:b8:45:8e:a9:
23:06:db:00:bc:be:d7:83:4b:9b:1c:1a:02:02:d7:
4a:be:8d:92:f4:a8:38:30:f6:4a:05:8c:1d:ea:5d:
1a:9e:24:43:ad:8f:b2:cc:ca:c5:48:73:3c:b2:8b:
5b:c9:ba:09:58:a2:5a:92:4a:f6:27:a8:04:d5:a1:
22:06:97:95:66:71:8f:65:16:8f:90:90:0c:46:04:
d8:21:69:75:67:28:fd:75:ec:85:b7:7e:9c:f4:4f:
fa:11:96:90:b3:3e:2e:56:64:ad:67:35:00:b8:59:
14:98:6d:81:da:d9:38:54:8b:1d:20:ba:65:79:81:
d2:c4:6c:65:2d:9b:48:70:81:d7:63:15:2e:51:55:
7a:f7:17:bf:c8:5f:3e:d2:51:07:0c:49:b8:47:80:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:95:DB:82:55:F3:11:B3:90:65:C6:24:63:EE:C7:C0:D9:E9:04
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c6:70:9e:ee:93:fa:d9:3f:f3:75:53:b5:08:51:39:a9:b3:
b8:33:58:c3:70:ba:9a:bf:94:09:95:59:8f:ec:0f:a9:ab:63:
7e:4d:e3:5c:0e:58:94:91:af:03:6c:cd:08:32:50:6b:83:d9:
b6:ec:73:f3:80:a5:a5:38:8c:d7:7a:a7:bb:db:2c:12:54:34:
19:6d:d9:7f:5c:8e:ca:af:4a:e3:a5:a7:84:f8:a5:cc:76:4b:
66:fd:76:0f:cf:e4:d8:53:f0:0d:40:d7:44:b0:47:2f:b2:bb:
03:a8:36:ac:1a:3d:03:54:31:65:f4:e7:af:e3:4f:6d:db:03:
26:27:3a:ec:e0:8e:ef:80:f9:75:59:f1:6c:86:61:48:1f:29:
2c:c4:57:df:e2:4f:c9:22:04:ab:44:77:21:a0:15:a0:ce:8d:
71:6d:70:51:4e:98:b7:d2:53:e8:50:65:8b:ef:2e:1b:93:6f:
9e:9d:bf:34:74:1c:47:1f:49:d4:17:88:23:43:31:cf:12:94:
bf:ae:4d:33:99:4b:c6:c5:43:5c:b1:f4:ff:8c:a7:a1:c6:d1:
df:9f:68:60:36:15:58:29:db:bf:43:83:42:10:62:66:15:0a:
1a:33:ca:32:58:e5:f9:b8:b5:60:50:26:3d:2b:b0:93:e0:d7:
db:31:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:28 2025 by rpki-client