Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier: okvD8lVcoIFLHDiGrVKlOtoTare2j4zPhU26h7NYy4c=
Subject key identifier: 00:C0:9A:E5:AD:B3:DC:E1:1B:D8:21:18:F3:A8:E1:F3:BC:0C:D1:04
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 019A71B8CB3DFAA80BAD92BCE4563691040E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number: 0A1B
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: oY5DxvtcBpYRU6qIiBfZpVJi6flJS0kLaHIa798bBIo=)
2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cb:3d:fa:a8:0b:ad:92:bc:e4:56:36:91:04:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=00c09ae5adb3dce11bd82118f3a8e1f3bc0cd104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:2d:c9:6c:b6:e6:48:b4:66:27:36:c5:a1:
68:81:c1:e1:8f:c5:d5:ea:aa:85:81:f5:0d:e6:ff:
eb:3c:28:9b:e8:15:e3:25:9b:3d:34:48:a4:dd:96:
f2:31:e0:14:d3:a4:0f:1b:85:f6:b5:6c:93:56:24:
92:94:d6:8e:65:9a:05:0a:7a:4c:ed:4c:f3:c1:30:
e0:f0:5c:b0:54:f3:88:ed:50:c2:2b:3d:a6:3c:b3:
58:9f:b4:fc:9a:81:06:52:3f:7c:76:da:10:c1:3f:
b2:d9:1c:bb:fd:4e:5e:fe:d6:95:8b:2c:12:49:1a:
11:67:d6:c7:51:94:05:f9:cb:b3:b5:a9:d3:b2:7e:
e6:a1:70:91:b6:89:b8:3f:57:61:34:be:b5:98:b4:
27:14:43:0b:54:c1:c5:94:77:ab:db:e5:aa:af:da:
08:63:05:89:e4:4b:a4:74:c5:41:12:50:d3:a4:76:
79:e1:8b:53:80:9b:92:e8:46:4a:8e:fe:a3:b0:7f:
5f:67:21:1c:89:1d:62:22:84:8a:9b:39:12:5d:45:
07:f4:fd:a1:cf:7b:07:19:05:cd:80:97:47:4a:29:
a9:b3:81:0c:2b:79:21:dd:5f:a5:78:ba:14:cd:53:
f9:6f:f0:70:aa:45:c7:8e:6e:7d:d9:8a:c3:2e:15:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C0:9A:E5:AD:B3:DC:E1:1B:D8:21:18:F3:A8:E1:F3:BC:0C:D1:04
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8a:65:66:88:34:a0:44:f1:25:43:a7:89:10:74:9a:2b:27:
74:d3:5b:62:c6:5f:83:17:8f:99:35:01:5e:6e:06:7f:1a:2e:
86:1b:56:bb:dd:9c:44:62:2b:5b:5c:ba:24:0c:8f:6a:44:62:
1d:62:40:c8:4d:b0:01:12:fc:ea:94:06:72:81:6f:2f:97:7f:
15:5a:a2:66:13:76:fd:bc:0b:a7:56:5a:c2:1b:fc:9d:48:88:
7b:d1:f1:4f:03:40:66:8f:04:6b:48:a5:ab:4d:e3:bb:51:2b:
ef:27:bd:ba:52:2f:a4:a4:8d:8d:e7:de:c8:69:46:82:73:e2:
f3:f5:22:37:a6:94:da:2b:de:07:3a:ca:9a:eb:9a:13:81:12:
5d:6d:f5:f7:71:50:66:22:9b:e9:cc:70:de:c9:15:a0:eb:f7:
96:71:2a:f2:86:57:1e:79:fd:b6:3c:58:65:f9:3c:58:5a:72:
49:34:e2:2d:5d:57:cc:5d:27:d4:e4:ad:7f:28:5e:ed:a4:d9:
ca:f5:b0:7f:0b:ab:bd:ca:02:12:46:14:62:50:14:61:fe:e5:
73:13:7a:ec:be:c0:ee:ce:a2:9f:9a:63:c2:20:2c:df:cf:1d:
98:ed:62:9f:b6:3b:76:22:84:e4:04:0f:e8:60:74:0e:75:55:
e7:6e:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:07 2025 by rpki-client