Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: e4GgGLqMFfRtzDSVV4QPgaUVNAOplo86Ugge6P4tDyQ=
Subject key identifier: 5D:C9:7B:F5:20:18:54:69:3D:36:35:F7:7E:61:6D:ED:65:3C:07:A8
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019A71B9275F7370E922FAE4EB9D626D657F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0BDA
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: 7VS8PyISjtz49GrpMhd94qY1FrZhnPcT1RKkad8/ENU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:27:5f:73:70:e9:22:fa:e4:eb:9d:62:6d:65:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=5dc97bf5201854693d3635f77e616ded653c07a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:0b:e3:5a:fd:9c:92:39:a4:b5:86:fe:49:
48:e0:3b:dd:22:12:fa:2a:37:da:b5:69:7a:40:57:
97:52:39:24:17:33:62:15:e7:87:ff:3d:83:61:b4:
e0:e8:3c:34:7b:d7:dd:40:ef:3b:dc:33:d5:2a:27:
9f:ab:6c:9a:4a:c1:e7:ad:ca:3f:a9:12:6c:81:47:
c2:32:13:6d:5d:ff:3e:6a:de:c8:df:e8:52:6e:fc:
11:2b:44:98:23:c6:7e:c9:98:36:51:0c:7e:23:aa:
63:51:b9:26:e8:5d:32:73:11:95:3f:28:c7:48:ca:
5b:81:e9:c1:fe:5a:51:43:99:dd:91:53:cd:30:25:
16:17:a2:36:79:cb:f6:c2:e4:61:83:72:4d:20:0c:
25:ce:ab:c8:30:cf:8d:d1:ed:f3:b1:d6:f3:5d:c0:
4e:68:54:72:37:26:32:7f:a9:99:8d:5d:c7:c4:86:
14:e4:75:44:32:5c:90:df:2a:5b:51:2f:f7:11:a2:
0e:b5:14:21:e0:e6:d1:ef:fd:5a:4b:5c:dd:4c:74:
f1:c6:25:71:87:30:b2:b8:bf:94:92:b0:fc:a0:ef:
09:4b:04:ec:06:48:67:c0:a7:67:c3:dd:2c:8b:f1:
05:95:23:f7:a7:7a:5b:29:29:6d:13:b2:50:5e:ac:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C9:7B:F5:20:18:54:69:3D:36:35:F7:7E:61:6D:ED:65:3C:07:A8
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4b:eb:88:47:01:30:ad:45:b2:26:e5:2a:2f:5a:d3:8e:db:
13:69:b8:90:2e:3f:2a:8b:18:12:7c:40:bc:00:80:ae:65:fd:
38:7a:f0:e2:91:61:3b:a2:65:78:be:28:f0:7d:6b:60:a3:81:
dd:5b:5e:a5:f7:6c:8b:07:6e:84:50:1e:0c:56:88:5d:bf:53:
45:39:ba:1e:35:83:c1:99:83:90:28:1a:fd:d6:14:6f:dd:0d:
b3:75:84:61:5e:19:eb:b5:b2:d5:b8:60:b0:97:f4:74:10:f5:
9a:a1:5a:0b:53:83:2c:48:36:a0:5e:c0:c2:b9:dc:45:65:01:
9f:d3:cf:62:4d:e8:c6:59:86:29:c3:e0:4c:47:61:ce:72:f6:
14:a7:67:89:7f:97:25:e7:39:6e:09:d4:d1:71:ad:d0:ae:0e:
ec:af:27:7b:c1:a0:a7:dc:ee:01:9b:80:98:51:d6:51:de:71:
2c:41:f5:2a:cd:7e:70:5f:2e:fc:4a:7f:dd:64:42:28:27:86:
b3:16:35:4b:2e:97:2a:71:00:65:6a:f0:4b:ac:69:33:70:ba:
5c:29:10:de:b3:7c:53:25:5b:e4:82:8f:65:56:01:cc:e5:05:
0f:38:59:96:8a:e8:f1:7d:f6:6a:2a:26:09:96:8c:6a:36:29:
08:77:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:54 2025 by rpki-client