Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: TS9hAiYYxgYtxPDll7T7GBe8RHIO5rHNyYh7xOnvNvc=
Subject key identifier: 63:34:E4:AD:38:9C:1B:37:CD:A6:BB:20:FC:14:E0:10:0E:59:36:7E
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019A714A0113B9AC395360CFBC94221E88E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: TLQWlgZyBGngatvkhORB10Y6A59rf2QPO15r4vjbTiM=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:01:13:b9:ac:39:53:60:cf:bc:94:22:1e:88:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=6334e4ad389c1b37cda6bb20fc14e0100e59367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:2c:69:30:0b:d9:69:e9:81:9e:bf:8b:26:
f8:70:cf:78:de:df:6b:a0:0c:aa:b2:49:e7:ab:5d:
40:c4:f9:b8:73:bc:06:da:6a:30:47:3b:0c:b1:5f:
94:d3:33:0f:7b:c4:67:4b:84:d3:3e:7f:c3:f0:d9:
02:b2:ea:8e:a6:05:6e:2a:ee:79:b3:3c:05:e4:52:
7e:f6:cb:4b:25:c3:6c:0b:a1:c7:5c:33:01:83:2b:
91:b2:a9:3b:25:09:c5:c7:56:49:13:6f:cd:97:17:
eb:78:cf:91:9f:0f:34:52:19:f9:7a:e8:8e:b0:8b:
e1:81:24:ed:bf:a1:e8:e4:cc:07:6c:4a:c9:a6:44:
08:c7:10:9c:4c:c7:69:5d:1c:a0:4c:89:bd:fe:af:
46:17:06:39:91:c0:a4:6e:e1:8d:9a:45:a6:f6:b3:
55:37:17:a1:20:ad:f1:a2:a9:85:49:db:99:58:7b:
f1:de:ff:32:48:7f:59:c7:0d:3a:8d:cb:49:d2:aa:
ea:2d:a9:fe:11:4b:ec:fa:52:67:9a:05:4e:00:74:
11:ad:13:be:96:1f:9c:51:6b:a1:58:09:03:2e:10:
88:98:ee:ad:16:46:92:fa:1a:14:7a:2c:b2:81:55:
3f:ee:15:1d:79:30:8e:c7:61:57:8c:04:b0:f4:ed:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:E4:AD:38:9C:1B:37:CD:A6:BB:20:FC:14:E0:10:0E:59:36:7E
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:84:11:6b:ef:69:30:b0:06:b6:4c:de:59:ad:25:62:0b:
42:79:6f:91:29:10:3d:b6:6a:dc:72:6c:4b:68:45:14:b8:56:
c0:6f:b3:7a:f8:6c:c3:13:3b:b5:bc:2b:f5:95:e6:21:29:58:
17:74:92:5d:47:4f:c8:41:98:67:7c:71:01:57:21:2c:c6:d0:
0f:e5:54:ad:24:30:23:c0:41:43:aa:0a:cf:63:53:51:d8:3e:
35:57:78:e8:43:82:2b:8d:25:5c:40:ad:b2:0a:9b:9a:65:85:
ff:50:a5:e8:22:a6:d9:60:1f:c9:a9:91:a7:c4:a5:22:d0:93:
52:5f:46:8e:e5:b5:ea:0d:aa:f7:24:2e:a6:cf:86:bb:b6:fd:
d8:4e:20:ec:d7:c7:8b:0b:02:60:61:60:23:2d:01:4b:65:43:
00:d1:6a:8e:d5:68:36:33:57:a3:a1:07:c0:10:53:96:42:a9:
11:57:96:f3:08:9c:26:7f:b6:be:4d:cd:35:c5:4e:e8:44:b0:
92:f4:5a:76:7d:05:dc:c4:e3:fc:09:64:52:e7:35:21:f4:14:
25:8d:a7:c1:d0:32:c7:82:e2:eb:8d:fd:48:6b:f9:d0:03:bd:
9e:d1:5e:c6:8b:99:90:51:61:25:31:e5:99:4b:72:9e:e1:ba:
85:3d:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:40 2025 by rpki-client