Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: 1QYhmEWB1IZz0wj0OVm9RgjEtIGO8CgWvVCMu+wMybU=
Subject key identifier: 70:BD:49:67:6C:1F:35:9D:2A:B9:D7:85:18:C3:21:F6:B1:63:B2:7C
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019A725CCF48586BF03C54BAA90B9D2BA697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 1024
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: X6ru78IbiGvnMG7lhhsZeOOLe2IbWyoZEZCschrj+dI=)
2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=)
3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cf:48:58:6b:f0:3c:54:ba:a9:0b:9d:2b:a6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=70bd49676c1f359d2ab9d78518c321f6b163b27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:98:7c:24:21:6d:57:93:41:9c:e7:ea:6f:
bf:16:65:10:d4:cf:39:9f:1e:8f:91:66:b7:ac:8d:
f4:55:8f:3a:3b:42:71:8f:1b:b5:ae:9e:0b:46:67:
92:bc:1e:2b:96:76:ef:0c:4f:7e:db:b1:dd:e0:ca:
8e:1e:b7:6e:ca:cb:7b:66:07:70:d5:b6:db:c5:d7:
36:e8:a4:b9:8c:a0:aa:d8:eb:f5:81:ad:c7:d3:0b:
86:c5:1e:e2:b8:be:b1:52:83:2d:06:9a:ab:aa:10:
95:ca:22:ce:b0:88:2e:ad:0d:7a:b2:e0:63:1d:76:
16:20:fb:69:29:9e:4a:b9:57:d3:e1:9c:a6:83:f2:
6b:dd:8c:6f:1f:50:1f:5f:c9:25:ca:ca:57:1a:3d:
ac:25:5a:ad:3c:28:99:bc:8b:22:68:55:d4:90:4b:
51:2d:26:6d:d0:8c:43:3e:2f:df:ee:82:6a:22:66:
04:1a:ed:3e:6a:89:09:84:17:2b:89:fb:df:1c:71:
da:d7:d0:09:07:ef:da:04:b6:29:05:49:7b:fe:8c:
86:f7:98:0f:48:58:e2:dc:c1:e1:78:65:2d:48:eb:
e3:fc:0d:4e:37:08:c8:3b:00:7a:c5:46:c6:02:c2:
05:7f:f0:4d:e2:76:ca:69:ff:e7:8d:38:cb:5b:08:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BD:49:67:6C:1F:35:9D:2A:B9:D7:85:18:C3:21:F6:B1:63:B2:7C
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7a:f7:bb:bf:fb:c2:6c:f6:f4:67:95:fc:fb:83:1f:d4:75:
95:b6:d8:49:30:75:36:7d:ad:bd:4c:fe:5a:2d:2d:e1:62:63:
0e:41:54:28:97:db:a1:85:52:c9:5b:bf:cf:29:be:d2:0d:5c:
83:83:48:f7:c2:f9:8c:3c:74:f4:42:91:0d:26:77:69:7c:c6:
dd:bc:7d:49:f2:b8:fd:6f:02:f6:28:70:a8:a8:66:eb:e4:be:
2f:27:87:d5:64:dc:76:8e:61:7e:2a:67:5c:ef:ed:de:34:d0:
60:df:12:2c:19:7d:c7:28:25:55:61:7a:f4:08:a2:62:b1:18:
5b:df:1e:20:80:06:42:93:e6:2d:db:a1:77:70:3b:99:44:57:
df:bc:6f:f6:7e:69:f0:0d:38:32:3d:a4:d1:87:f6:ad:15:62:
3a:bb:2c:92:f7:51:aa:b9:f6:9a:5d:15:ef:4d:72:73:45:d1:
c2:9a:d0:f4:57:81:39:e0:55:79:5f:0f:21:26:ac:7f:7d:34:
30:04:d5:07:49:3b:d8:9c:86:8e:57:56:88:7e:ec:e8:ec:dd:
15:39:9b:a0:c1:b4:81:df:4a:6e:b0:ed:a1:71:44:0e:b5:03:
98:17:64:f4:af:01:e8:47:d0:7f:3b:e7:61:88:c2:ad:92:d1:
ac:3f:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client