Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: XMd9U3+odkwFJfn/ut9B/R+v86JsopQtWtqEk8HSVM4=
Subject key identifier: 7F:44:C8:F8:CF:76:AB:9D:19:BE:BD:9E:84:50:84:ED:58:BC:16:52
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 019A4F2B4738A97F191995650CE4AC878EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:27 +0000
Manifest this update: Tue 04 Nov 2025 14:00:27 +0000
Manifest next update: Wed 05 Nov 2025 14:00:27 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: J/kcj0E0sRzLie06zlEKkHBmxgsUe3KGcANrTFRoyU4=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:47:38:a9:7f:19:19:95:65:0c:e4:ac:87:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Nov 4 14:00:27 2025 GMT
Not After : Nov 5 14:00:27 2025 GMT
Subject: CN=7f44c8f8cf76ab9d19bebd9e845084ed58bc1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:ca:ab:b1:45:11:43:04:66:88:0d:0d:ff:
65:cb:2b:f2:67:d6:e3:ff:f1:58:ed:6e:d3:e1:f9:
eb:05:16:8f:6a:30:fa:6a:24:6c:6a:58:2d:32:c1:
df:3a:08:05:3a:9a:e7:93:e2:ec:1d:f1:ba:a9:8d:
83:16:15:3e:ef:e6:6d:d0:05:cc:04:5b:b3:c1:af:
47:46:94:21:c2:49:45:22:ac:37:01:5e:39:f9:48:
4f:f8:4f:e5:1e:ec:f1:91:0d:1d:03:20:8d:b4:ba:
0b:d0:6b:98:fb:6c:bb:40:57:35:86:e0:85:31:38:
b1:ef:9f:26:a1:45:f9:27:32:3e:80:66:51:af:0c:
00:73:e6:a7:0d:63:81:d7:79:ad:0f:60:a0:bc:55:
69:e5:db:59:d0:e0:04:41:16:5c:3d:2d:06:30:fa:
a9:4d:ac:c1:75:cd:09:4c:25:99:21:79:0d:af:1f:
90:7b:c2:d4:e1:bf:76:2f:ca:9f:9b:83:60:0c:b1:
e0:69:be:8a:aa:ff:fe:11:c8:50:6b:a8:97:23:8f:
c2:bd:2f:53:41:2a:d7:7d:22:02:aa:02:8e:7f:a2:
8e:f9:a3:db:18:78:e7:02:13:db:6e:43:57:29:fc:
ed:2b:74:ce:48:03:ff:e8:c6:f2:cd:9a:00:ae:19:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:44:C8:F8:CF:76:AB:9D:19:BE:BD:9E:84:50:84:ED:58:BC:16:52
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:27:14:8c:fa:29:bf:df:9c:f6:eb:ec:a2:e9:35:27:95:58:
31:0a:e0:82:c5:e6:69:9b:44:ff:89:e7:31:21:d2:e0:14:40:
d4:06:25:37:e3:06:94:d3:f9:c8:52:2d:6f:0f:69:95:55:b7:
91:c9:07:86:f6:27:e6:fa:e4:eb:38:b5:ee:bd:53:5b:06:49:
ba:b4:e9:94:3a:a1:4c:d4:3a:67:fc:f9:19:7a:f6:0b:52:a7:
ea:81:c2:70:0f:dc:1c:a5:9a:a8:fd:a3:7e:d3:4b:92:ba:2d:
ed:d6:67:90:b6:ea:61:dc:65:04:c2:fe:2e:59:cc:57:4d:af:
50:eb:63:31:04:4f:cb:b1:1f:a8:07:2c:ca:98:65:34:1d:a4:
1d:8a:14:ef:30:ed:44:28:dc:09:bf:47:d1:53:82:4d:1a:3b:
c4:b6:c2:6d:4e:8f:84:1d:7b:4a:85:6c:cf:af:00:3b:ec:a1:
1e:4c:9f:0a:2a:d6:1d:3f:1d:2b:1a:f2:a4:6b:0c:ab:8d:9d:
19:4a:94:a0:5d:37:cb:8c:54:a3:b7:56:9e:07:32:3c:d8:3e:
82:2d:38:db:7f:cb:4f:3b:72:f8:34:68:6f:53:55:5e:1c:ad:
5c:eb:ae:f5:51:b0:13:25:5d:24:88:ae:46:c8:e3:9a:41:86:
3c:71:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:05 2025 by rpki-client