Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
File: 386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json)
Hash identifier: 76zAYkKO9KaYfLj9QxEG3vwfLcV89pWJZDOEn+Fv/g8=
Subject key identifier: EB:29:46:66:27:BF:EC:85:D5:5F:9E:9C:7C:00:FE:08:33:91:29:66
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Certificate issuer: /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial: 019A71B9387FCA67939C3B8DA5D9B3F9EC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
Manifest number: 0658
Signing time: Tue 11 Nov 2025 07:02:35 +0000
Manifest this update: Tue 11 Nov 2025 07:02:35 +0000
Manifest next update: Wed 12 Nov 2025 07:02:35 +0000
Files and hashes: 1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: us+ht8yXkHTnoZdUNAko89khEvn5zJvVaaww0tbd/A0=)
2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:38:7f:ca:67:93:9c:3b:8d:a5:d9:b3:f9:ec:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Validity
Not Before: Nov 11 07:02:35 2025 GMT
Not After : Nov 12 07:02:35 2025 GMT
Subject: CN=eb29466627bfec85d55f9e9c7c00fe0833912966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:ee:5d:22:39:c6:74:1f:28:44:42:40:0e:
44:66:54:b4:58:83:02:03:c5:ec:80:58:ca:8c:50:
b2:77:d9:cb:4a:3a:e8:82:da:1d:d8:59:7f:97:16:
b9:7d:4e:06:9b:44:63:c7:3b:72:17:1d:bd:3b:c2:
0f:0b:d0:31:c8:49:5d:d6:26:c0:2a:ef:b5:8b:fe:
49:18:c4:4b:a9:8f:bd:66:6a:64:4c:e9:db:81:c3:
dd:c6:b8:2f:3c:33:c2:bc:20:47:66:27:b3:13:4f:
63:b3:73:ee:a2:80:ee:0d:23:01:32:aa:de:a0:c5:
c3:53:34:14:1b:dc:c2:ff:82:dc:20:f0:e3:5c:03:
ce:c1:51:cc:ed:26:96:82:ff:4f:27:89:ab:fb:7d:
0a:d4:19:c0:7c:b8:0d:ac:49:6c:a9:29:6d:70:ae:
97:50:d5:b8:ab:f2:97:a4:91:e4:94:0c:fd:af:2f:
82:c5:05:4f:d8:01:58:45:6f:ab:b3:7d:b5:92:65:
2d:7a:19:5f:ae:2e:1e:34:b8:b3:ba:aa:48:b1:27:
89:08:73:16:e8:21:5b:a9:00:7e:02:aa:3b:cb:b9:
e5:95:f1:b6:b5:d4:c4:05:f7:48:7b:54:32:88:89:
61:5d:2b:24:04:c1:50:09:19:9c:44:c1:9b:d4:5d:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:29:46:66:27:BF:EC:85:D5:5F:9E:9C:7C:00:FE:08:33:91:29:66
X509v3 Authority Key Identifier:
keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:e8:86:aa:61:c9:ab:7e:93:9c:41:0e:a9:38:8b:cd:e3:
48:d2:58:ca:fe:d4:77:f1:cf:98:67:92:76:72:b4:4e:43:5d:
fc:90:dc:d0:9e:ff:33:97:3f:97:b4:4f:f1:fa:3a:d2:33:e7:
f6:0c:04:ab:49:9c:4b:ff:7e:c5:8f:08:e2:f5:42:e8:84:a6:
3d:8b:f3:3f:f8:4e:95:6c:e5:68:f4:3e:7e:88:9a:b6:03:c8:
74:f4:53:6b:09:d7:3d:0d:f6:aa:43:ca:f6:2d:ef:8e:81:40:
8f:7f:04:90:16:fc:53:87:fc:68:5d:1e:7b:f3:98:39:a8:f6:
b1:b3:cb:7c:ba:80:1e:43:71:09:85:05:26:0a:88:0b:a7:ad:
21:4d:da:43:e1:7e:db:ee:a4:4a:bc:07:72:cc:57:1c:24:5c:
4f:97:ba:e2:6d:18:c4:6d:f2:0b:ca:ff:5c:e4:95:31:a3:86:
84:38:8b:22:5e:92:e7:9e:51:b0:4d:48:6d:48:7c:a2:44:90:
54:78:f9:31:0f:3e:54:8a:08:33:ff:cd:3b:43:2b:93:76:cb:
0f:dc:b5:1a:8d:6d:7f:91:25:36:5f:4f:bb:74:2f:bc:4e:e1:
16:c2:07:2d:32:b6:03:27:0d:ae:2a:56:f2:2d:35:c9:59:27:
02:e0:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:08 2025 by rpki-client