Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File: DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier: fpiECu021rMSHFfZpbM7qlvcoZ+8XcKwhxszSxt4Nok=
Subject key identifier: E5:AA:9E:9E:AE:EE:B5:A9:8D:06:24:8F:1B:28:E4:6E:50:66:39:C8
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial: 019A4D740A1D02558BAE4C668ACFB04BD85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number: 1106
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: I/KZRnJmZP3pdho5smoiwwklDP5ztqRUCvNVZ+BX/Zc=)
2: RPI004Nflusi7FfUJpmrxTwPQuQ.roa (hash: +Ae0xcW4fJMWdAq7n5EIK34ZCifbX83L0SoWJBas4kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0a:1d:02:55:8b:ae:4c:66:8a:cf:b0:4b:d8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=e5aa9e9eaeeeb5a98d06248f1b28e46e506639c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:29:d2:ef:ee:07:ef:85:a6:43:81:f5:67:
37:aa:cb:22:ea:64:91:fb:6a:7e:4d:bd:f0:79:9a:
85:00:5f:74:4d:19:61:97:6e:91:6e:fd:ef:46:ba:
96:e2:65:bb:ff:30:2b:9f:c2:17:60:a5:f0:81:60:
3d:49:29:4b:71:90:fd:cd:1c:af:2d:09:c8:0e:00:
10:b0:9b:65:96:e2:a7:63:20:d8:ac:2d:11:f5:dc:
f1:3a:8b:6f:e7:21:9a:60:ab:9d:35:30:e4:45:cd:
62:d5:e7:2b:1e:c6:9b:6f:22:97:3a:3e:98:f4:44:
29:64:1f:2d:13:3c:63:7a:ce:ef:e4:c4:b7:c9:0d:
0b:55:90:1b:89:69:e7:72:24:cb:42:ca:c0:43:6c:
84:f1:2e:e8:11:69:0b:25:e0:85:4b:64:63:1e:e5:
65:71:c7:13:7b:55:2a:a2:c7:79:8e:94:ec:99:75:
14:28:30:23:76:b1:d0:26:19:7d:59:cb:ab:4a:00:
ee:e7:c0:99:46:70:6e:77:4e:d3:a6:8b:77:8d:d7:
7f:96:88:75:23:2d:50:cc:8d:ee:76:5d:15:09:d9:
88:b9:ef:ab:0c:e9:14:7d:0e:47:89:60:73:12:00:
00:d1:d8:68:10:36:d7:9e:88:ce:2c:cc:45:8c:02:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AA:9E:9E:AE:EE:B5:A9:8D:06:24:8F:1B:28:E4:6E:50:66:39:C8
X509v3 Authority Key Identifier:
keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b2:f3:df:98:09:64:2e:04:b6:51:7f:2e:7c:1e:8d:1c:14:
a8:ec:96:14:23:42:33:47:9b:f6:d5:ea:dd:50:1f:bc:87:17:
c4:fa:d3:7e:ef:1b:01:d4:02:a4:b0:b2:3d:ae:30:a0:22:f8:
82:88:91:07:ef:fb:6a:cc:50:d7:bc:d6:46:c8:9c:3d:9a:ce:
00:db:71:5a:ec:4f:13:fd:15:9e:7a:03:43:61:93:24:d2:00:
95:a9:b7:ce:ed:c1:4a:aa:d7:c9:58:41:0d:08:61:a2:78:35:
16:24:45:93:0c:0a:56:a2:52:7a:6e:f9:83:23:b8:97:46:81:
62:c9:ae:cd:c8:29:5a:4c:6e:37:7c:a3:cd:eb:e5:0d:c2:e1:
bf:eb:c2:42:96:2b:cc:7c:aa:86:4e:fc:80:50:52:12:43:66:
ea:43:9b:f8:07:f9:19:f9:bf:5a:27:6f:58:d5:76:4b:5a:f8:
07:6f:5e:7b:00:e2:e6:6a:10:12:25:9d:af:ed:76:c6:e3:6d:
1f:a1:fa:24:f3:63:dc:4c:04:ac:02:27:94:41:6a:6d:0d:c5:
0a:ad:13:65:18:a7:2c:f7:50:3e:cf:e1:ec:97:7e:b5:78:a4:
ce:94:a7:67:62:11:e3:7d:40:37:0c:20:e4:fb:4f:96:a6:e5:
38:9f:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:23 2025 by rpki-client