Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: OyBOUL06ars4G3VUD3RWnc55ob2LW0JHOiCOupwpVKE=
Subject key identifier: 36:95:FA:F3:FB:8B:92:C4:9D:B5:CE:04:E5:43:48:20:A3:B5:F5:FE
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 019A71B932AB9B0702A974E3D5C13152D573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 08E3
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: Abi5pH7cUtL8rs9zrgavPjQRxnI.roa (hash: 7ApJuHPbwwQ8ZW2QLt3m10DbTaxlvMl9pvX3Esbaw0s=)
2: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: /hPajzxeXwfAfEk6ISsx8/2rVmrKu6yR97/UX9vyETE=)
3: rub7QgF_m8ViZ2zh8TifmWsv33k.roa (hash: D3MkLEEj8OyFp5olxebWk6+e8+j7slJr87cSCNkpbeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:32:ab:9b:07:02:a9:74:e3:d5:c1:31:52:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=3695faf3fb8b92c49db5ce04e5434820a3b5f5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:f3:d8:90:ac:de:8a:04:f2:12:bf:3e:b6:
7f:47:49:e8:c5:a7:cc:35:77:a9:71:e2:9c:e6:13:
6a:5b:41:64:fd:bf:14:43:8b:3c:29:bf:be:ba:20:
b9:59:a4:cc:00:45:36:e3:c4:5d:ef:f1:42:0b:31:
70:8e:bc:b5:d2:59:6e:ae:7a:16:3d:2e:b1:13:e0:
1e:73:29:d1:bb:c6:5d:4f:90:59:69:87:48:43:64:
5e:0a:cb:59:91:88:5e:5e:98:33:cc:8f:91:34:37:
80:97:97:ce:0f:e5:d4:8d:9b:59:67:b1:aa:1e:27:
31:e4:18:ce:04:c5:0d:e5:72:86:4c:8e:44:53:12:
d0:03:6b:4f:31:9f:c7:d0:06:00:bc:f5:bb:2a:6a:
cd:0e:fb:70:2d:89:ab:47:11:0b:58:d0:8c:f2:1f:
20:06:bc:d3:e6:24:15:b7:50:a6:67:d2:18:d1:b5:
6b:23:89:ec:46:e3:9b:65:e6:e4:86:db:ef:fe:93:
a0:c5:bc:e9:d7:84:0b:14:25:48:f9:72:a2:4e:ac:
ec:d8:b3:5a:9d:8a:b1:a7:8b:85:42:0d:a4:85:00:
06:57:e0:8f:ab:e1:11:40:c4:0c:76:53:82:51:ae:
18:ac:59:09:ce:cc:d7:6f:53:f2:b2:fd:34:aa:34:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:FA:F3:FB:8B:92:C4:9D:B5:CE:04:E5:43:48:20:A3:B5:F5:FE
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2c:c9:cf:d7:f9:01:87:b3:81:62:f7:13:07:57:c5:2e:ff:
c4:f2:32:70:94:aa:94:a9:12:08:5e:34:84:c8:3c:c4:da:4b:
9a:dd:7c:67:71:f9:9e:4c:35:44:48:33:f0:28:d3:8b:ff:ec:
3e:5d:38:3d:ea:c2:66:52:0b:5f:ec:4a:5a:6f:09:07:08:8c:
cd:8e:c0:48:63:a9:13:e8:03:3d:12:d5:69:26:e6:9f:0c:5e:
2d:e5:e6:90:72:99:8f:62:b5:56:46:19:d5:9d:f5:11:51:17:
62:0b:dd:84:d0:e7:53:d7:2a:0d:bd:4e:a1:96:56:f9:cc:15:
9d:6f:2b:e1:fc:e1:dd:6f:43:fe:61:57:98:c4:75:73:ad:0f:
9e:46:94:a9:7d:41:2f:d7:76:c1:8f:51:e6:b3:22:1c:79:20:
5b:77:15:0b:6c:f9:68:21:6a:19:13:2d:ac:dc:6b:66:4a:52:
f4:d3:90:97:3d:ed:d5:c4:16:2a:b1:26:27:fa:3b:f5:1f:73:
53:81:98:78:e6:d5:a1:22:68:6c:b7:00:82:35:05:c0:59:37:
e0:fe:cc:cd:fd:f8:de:20:b1:e2:c0:ef:0f:28:14:bf:99:83:
6e:46:e3:61:9c:b6:c3:01:82:65:31:e2:00:25:41:05:3f:42:
4c:cc:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:17 2025 by rpki-client