Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: D36mGm8TKpBF/jXl/ZMQVfCF7bJokw6Yn7bb2bbDcQ4=
Subject key identifier: 1D:EF:FD:90:87:25:E3:42:30:6C:15:56:B8:4A:72:C2:DB:10:0A:1A
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019A5074B8D178AF3A950101E95FB17C81CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 1188
Signing time: Tue 04 Nov 2025 20:00:18 +0000
Manifest this update: Tue 04 Nov 2025 20:00:18 +0000
Manifest next update: Wed 05 Nov 2025 20:00:18 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: yITN+vjXKYJwFeVtAs8FURqeCSt0AMHsbuhnfrcLVvs=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b8:d1:78:af:3a:95:01:01:e9:5f:b1:7c:81:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Nov 4 20:00:18 2025 GMT
Not After : Nov 5 20:00:18 2025 GMT
Subject: CN=1deffd908725e342306c1556b84a72c2db100a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:64:c6:ca:07:c7:dc:2a:2c:55:b7:8a:d8:
8c:61:00:ae:51:d4:8f:1c:70:5b:67:30:37:90:51:
31:b5:f9:ab:bc:fc:62:e2:23:b5:6b:34:62:ab:74:
b7:bd:b8:45:50:7d:e8:a0:5c:b8:51:ff:66:56:96:
b1:eb:eb:44:99:bb:e8:34:7c:3e:1b:1f:ca:e4:15:
71:93:0b:6d:b9:7f:04:b7:e1:d1:35:e4:12:92:79:
55:e6:7b:e4:0d:7c:8f:49:6f:08:1e:a4:cd:5f:ea:
dc:d9:f6:bd:c9:42:dd:a9:d0:55:24:0b:10:2c:de:
dc:e6:da:7e:10:4c:4f:4f:f4:65:32:08:42:3d:6b:
b6:1d:42:9e:02:85:74:c4:e6:ba:29:eb:a6:56:18:
d3:56:a2:fd:b3:d9:fa:64:a7:b2:50:0f:25:08:a0:
24:1d:0f:d4:fd:d4:30:00:f0:65:2a:92:0e:e3:09:
0d:a1:1a:84:a5:6d:f0:75:7f:4a:4b:08:ef:52:ab:
2f:e3:17:dd:60:4d:fa:43:7b:34:c8:8f:63:bc:5e:
31:27:b2:ac:72:df:77:44:06:51:d8:be:d8:54:58:
f1:ff:91:56:37:43:e1:89:5d:d1:1a:53:a5:d0:16:
cc:1a:1e:da:49:9c:10:8b:41:e3:b8:5e:20:0e:af:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:FD:90:87:25:E3:42:30:6C:15:56:B8:4A:72:C2:DB:10:0A:1A
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7b:71:8c:c0:64:08:9a:46:ad:6e:90:74:2b:fd:ac:22:16:
c2:35:e2:f8:5c:50:76:34:b4:3a:93:8a:04:7d:32:82:a9:af:
f4:f6:c3:27:b3:92:c8:c7:24:10:1e:08:4c:8b:87:fa:f6:3f:
26:de:bc:98:98:dd:1c:ce:49:e3:db:a0:39:61:18:75:99:09:
93:47:7c:82:db:c3:4d:50:db:33:66:82:f7:16:af:d6:5a:67:
77:d7:09:6a:61:ed:c8:a2:cb:7f:30:ca:58:f0:81:b9:fc:74:
f7:73:04:17:98:4f:a1:3d:1b:b7:fb:13:70:65:a9:8e:8e:13:
df:d9:1f:cd:f1:74:f9:1c:fd:23:51:fa:22:0f:5b:ce:43:aa:
c8:7c:b2:e4:cf:26:74:84:f5:9d:b0:5b:5e:37:e0:0f:39:e4:
4b:a0:ca:01:a3:05:ad:9d:eb:9f:68:ea:49:68:93:16:58:e5:
50:e1:c0:f8:a3:93:0e:8c:e2:b3:8e:e9:69:c1:87:5e:4a:59:
ad:cf:94:02:17:3d:14:c1:5d:e1:1e:ae:90:fa:25:c4:06:6b:
e8:c1:11:18:66:80:38:df:88:e7:87:83:e4:e0:61:45:8f:a7:
d4:c1:25:63:ed:a7:3d:85:a3:53:e9:25:87:2b:25:4b:38:7e:
f3:12:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:08 2025 by rpki-client