Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: +IOgnDqXwxLHkOwXtYewfSo5AUp/j6KlaGwQWFX6u/A=
Subject key identifier: FB:D5:35:97:0E:2A:74:29:82:52:BB:BD:1E:57:92:6E:20:DC:F3:EA
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019A247788487DF1169172FE507E97A83D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 03D1
Signing time: Mon 27 Oct 2025 07:00:04 +0000
Manifest this update: Mon 27 Oct 2025 07:00:04 +0000
Manifest next update: Tue 28 Oct 2025 07:00:04 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: TC9wMS/Xi72JCLebJ1vTZh1dBJDoNmhQvIjnd2/ADSw=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:88:48:7d:f1:16:91:72:fe:50:7e:97:a8:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Oct 27 07:00:04 2025 GMT
Not After : Oct 28 07:00:04 2025 GMT
Subject: CN=fbd535970e2a74298252bbbd1e57926e20dcf3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:55:57:be:08:ed:68:35:8f:24:1f:e4:3f:
16:a0:8e:5f:f0:f7:24:62:9c:3b:50:13:a5:4e:a7:
6c:be:8a:21:7f:ff:c5:1a:2c:0f:26:d4:41:ff:c3:
92:8e:3f:95:e0:09:e8:1a:7c:5b:5d:7a:ed:fe:3e:
44:39:8f:07:a6:72:41:71:29:9f:b3:b1:67:7d:b9:
7c:46:f6:97:24:9a:b8:21:cd:6f:2a:ce:34:94:ab:
6c:47:9c:8c:33:17:80:28:49:1c:54:fe:f4:0d:c1:
5f:eb:11:da:9a:81:8a:bb:72:23:de:f5:89:de:8b:
f8:74:f3:91:a9:49:0a:8d:2b:bd:d5:0d:3b:4e:d4:
40:85:95:f8:70:5e:14:cf:4a:27:a3:d0:08:9b:d6:
9f:60:c7:80:ff:44:23:f4:bf:2d:b0:45:20:bc:8b:
b8:85:2a:1a:a3:83:b2:cc:69:f7:f9:40:97:58:f4:
1f:50:d8:fe:ff:a2:26:cc:f9:86:8f:82:42:a5:d3:
d3:d1:cd:d2:82:11:67:26:58:18:c5:7e:d1:e3:13:
ee:23:9d:77:99:a0:b9:a9:c3:b3:4c:9e:a3:3a:62:
a7:9f:c1:c2:d3:c8:bf:3e:47:be:c9:cd:35:38:aa:
c1:50:23:0b:36:c1:b7:f0:fe:52:a2:f0:cf:61:04:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:35:97:0E:2A:74:29:82:52:BB:BD:1E:57:92:6E:20:DC:F3:EA
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4e:28:87:0f:44:6f:12:91:37:6d:54:b9:e0:c8:f9:54:c4:
91:7b:3c:ea:31:7d:e1:59:5a:a5:ac:81:c9:f5:b0:76:11:b0:
2c:2a:a2:d9:24:68:2f:30:03:cb:67:94:02:86:e2:b8:62:b3:
a5:f3:88:28:3c:1e:e3:e8:76:e2:ed:88:15:19:33:1d:5d:77:
72:c3:8a:f1:60:30:01:ae:dd:1f:88:77:d1:79:62:12:88:9d:
eb:d9:32:75:f0:82:08:ff:51:31:12:44:38:93:92:c1:78:ff:
9b:63:82:cd:c6:cd:66:9f:cd:e3:67:68:5c:10:f3:4f:08:29:
e2:7b:75:ed:c5:58:ca:bf:95:24:3f:24:57:c8:6c:0e:c9:be:
68:d7:6b:62:16:2e:88:e2:a3:89:a1:1a:62:f7:3b:ef:3a:f8:
02:f1:d2:2a:26:37:6d:cb:0f:f7:91:82:d2:bf:80:a9:db:22:
b1:3c:5e:1f:fd:ca:62:b5:0f:df:91:80:2d:8c:8b:c3:f7:8c:
93:d2:fa:fd:c7:e2:8c:25:74:9f:e8:58:b8:db:ae:bc:2c:b8:
1b:5d:76:13:2d:12:81:5d:f5:33:2d:93:17:ee:38:b0:46:5b:
55:1b:04:65:8d:5d:fa:c5:21:2c:f9:45:7b:d4:8e:06:b4:43:
d9:e7:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:02:37 2025 by rpki-client