Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: Ra3MtMtsTYiStMgd3kp+m5v2M4mwaMrxjImHbirlv5M=
Subject key identifier: 73:2F:54:B3:17:F8:7A:A4:03:5B:6E:A0:33:6C:D4:E6:11:E2:78:22
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 019A511985CDC9DAFAD2FF8452D01822418F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 23:00:18 +0000
Manifest this update: Tue 04 Nov 2025 23:00:18 +0000
Manifest next update: Wed 05 Nov 2025 23:00:18 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: LvggYNzPUt3BtHZQIm2DX9KR5gS+lL6JjPvRLYVXdFE=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:85:cd:c9:da:fa:d2:ff:84:52:d0:18:22:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Nov 4 23:00:18 2025 GMT
Not After : Nov 5 23:00:18 2025 GMT
Subject: CN=732f54b317f87aa4035b6ea0336cd4e611e27822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bc:60:78:e9:3b:01:d5:55:e7:12:af:92:29:
db:88:da:9e:08:9c:a0:a0:48:da:5c:b7:32:bb:ea:
52:cf:93:ad:87:18:ca:d8:3e:bc:0f:22:78:2d:b6:
dc:80:2f:dd:94:e4:5d:e8:39:9b:1c:4b:78:fe:c5:
18:bd:b4:a0:17:30:6c:62:7f:aa:a5:29:b1:05:bb:
f7:8b:ff:9c:ef:f9:ac:71:2c:3d:e5:9b:93:c5:97:
4c:ab:d0:c3:e9:da:e8:01:d4:1c:0f:1d:b0:90:c5:
10:43:a1:6a:a4:33:84:7a:11:10:fe:99:ea:21:cd:
4e:36:e4:87:8d:dd:48:f5:49:37:38:bb:cd:03:ab:
77:c1:50:c4:87:97:3a:b9:6a:0f:39:6c:98:5a:57:
8d:da:a5:03:78:c8:32:7f:24:00:93:b5:7e:c6:6e:
76:d9:ec:ea:e9:ad:6d:4f:89:ee:c7:15:e0:73:20:
da:07:f1:97:da:51:f5:6c:ff:7d:00:25:95:4c:64:
01:23:90:cc:f8:96:89:fc:0c:58:97:0f:21:8c:93:
3c:f9:9d:b9:48:3a:42:59:75:2b:6d:4d:41:4e:fd:
d8:9b:df:05:3c:87:3e:f7:5f:57:ab:61:46:2d:58:
97:97:e7:ed:21:9e:50:8d:59:e9:7f:e4:33:05:f6:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2F:54:B3:17:F8:7A:A4:03:5B:6E:A0:33:6C:D4:E6:11:E2:78:22
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9c:a8:ed:4f:7f:73:47:ab:6b:1b:2a:6b:cd:9f:69:27:a6:
c0:aa:aa:0e:0c:e4:34:29:a9:f5:c7:4b:dc:1e:87:c8:7a:14:
71:c2:bd:f2:63:79:d1:a4:b8:b6:42:59:25:47:a0:7c:22:80:
b8:91:2b:90:a8:5b:dc:9a:6b:d2:de:ce:ad:7b:46:b4:fd:7a:
fa:78:e5:7d:0f:3c:f0:57:f9:59:c6:51:62:f3:7e:9c:7c:39:
e2:94:88:9d:01:4d:e7:14:ad:88:a0:e6:0e:95:b7:02:5b:60:
6c:7f:a2:d9:9f:22:e1:a8:62:63:4c:cf:19:72:61:ac:b4:d3:
dd:31:2c:30:25:01:ac:50:a7:a7:88:93:bc:3c:3e:87:2d:dc:
92:24:e2:ca:a5:63:3c:d8:c2:fa:82:15:0a:65:9c:f1:c2:f8:
22:26:b2:b3:ee:a5:5b:d3:44:e8:e2:84:4b:20:08:75:b3:64:
56:46:36:e3:db:39:55:61:6d:ba:44:c3:20:46:ff:7d:da:c4:
f9:9e:fc:46:90:21:af:9e:4b:c9:d6:07:39:5d:5e:94:98:83:
03:01:b8:44:f6:55:02:f6:60:0b:e3:a3:4f:b6:68:cd:78:91:
1a:bb:d8:ce:58:64:fe:46:1b:ea:67:ba:b5:63:6c:ff:c5:91:
0c:77:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:58 2025 by rpki-client