Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: 9IRyBwnFey02uv6Nvoh/xP+vReNRAGoo53khS01bPTg=
Subject key identifier: 64:F4:A5:57:3B:5E:83:B0:83:3D:23:0D:B9:D9:AB:5F:7A:80:6E:ED
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 019A70A50213291227F99C1F60647058B240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 0889
Signing time: Tue 11 Nov 2025 02:00:53 +0000
Manifest this update: Tue 11 Nov 2025 02:00:53 +0000
Manifest next update: Wed 12 Nov 2025 02:00:53 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: Tci/wT8N+JvPELUDhsZ60T2nUR/UThoZn1n8L8CpEPU=)
2: GXOLHwEFu0p7gKJgkJ5kY6IvzIE.roa (hash: pAl+GrJaPPBbeJpVI3BoizE0NzXiXcJyNH8QYeo2rB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:02:13:29:12:27:f9:9c:1f:60:64:70:58:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Nov 11 02:00:53 2025 GMT
Not After : Nov 12 02:00:53 2025 GMT
Subject: CN=64f4a5573b5e83b0833d230db9d9ab5f7a806eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:35:b1:0d:87:dc:7f:f4:b0:de:61:d8:ca:
47:9a:65:59:1c:7e:ba:ec:99:12:d9:34:2d:d9:4d:
48:ca:38:5f:07:b9:41:f7:52:00:2e:71:66:ed:bc:
fe:d9:34:78:d5:30:d3:3f:a8:71:00:35:a5:a2:31:
7f:ac:bc:25:79:d6:7c:9d:9d:8c:77:a1:e4:14:88:
63:60:34:d6:85:ec:5c:ad:cc:78:cb:de:77:e5:22:
01:b3:db:c0:32:67:48:39:64:38:43:45:e3:ae:1a:
a7:6a:c7:44:b7:bc:d5:6f:b4:ae:0b:02:a1:d2:40:
a5:80:86:f3:69:79:72:13:eb:4d:c3:1a:a8:ce:c1:
5a:cf:27:c1:ab:d2:43:2a:9a:ec:5c:ac:d5:70:c1:
a4:32:15:0b:87:64:2c:ca:07:80:2a:af:21:c3:b2:
f4:e9:f2:98:70:87:fc:b8:47:ef:be:52:f3:6c:67:
38:3f:c6:70:e6:9f:38:ab:3a:6a:16:e0:18:a7:6b:
d2:15:22:47:74:8c:68:b5:c8:04:59:c1:ec:ca:7e:
11:70:96:94:a7:fc:1b:00:62:9b:00:4e:98:c1:48:
11:0f:7d:62:0b:8c:9a:8d:45:8f:5f:e2:96:28:fd:
55:2b:50:23:4d:ef:61:c9:e4:87:ba:4d:92:e9:bd:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F4:A5:57:3B:5E:83:B0:83:3D:23:0D:B9:D9:AB:5F:7A:80:6E:ED
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:73:ea:61:44:d4:1a:79:f6:b0:88:13:13:26:dd:e4:85:35:
3f:77:41:a9:4c:25:55:c1:7b:cf:e4:95:a4:fa:37:b0:3e:3d:
51:db:dd:a3:b4:aa:97:3e:28:bb:5c:68:b5:22:1b:e2:8e:c2:
9e:bf:05:d7:66:d2:75:fb:d7:ec:cd:c5:e0:f1:6c:e2:e3:dd:
11:1e:a8:b2:df:97:d6:ee:0c:b2:eb:4c:6a:d3:16:ec:50:5f:
58:0f:da:97:4d:65:c4:79:a9:bb:14:c7:35:bd:c5:b7:fe:db:
3a:35:86:e7:ed:b4:4c:22:80:a7:61:71:d7:cf:f6:df:9f:59:
63:26:e8:43:99:18:9d:34:c7:f9:9d:67:34:b4:19:0a:5c:9c:
13:66:1a:ed:5b:28:26:93:eb:0e:7d:4c:3a:29:86:59:49:22:
a7:93:f1:a5:a4:7e:c6:e2:18:c9:ce:57:f6:d1:6e:a2:3b:52:
7c:61:3e:bf:83:2e:e6:e0:dc:59:86:68:d4:b2:00:35:a9:aa:
d9:ea:a5:f6:96:db:8b:9e:a3:b5:e6:10:cf:95:89:e0:16:b9:
ce:5e:81:d0:0b:c5:7b:7e:fe:0b:5d:3c:7f:d0:d0:d1:90:9f:
b0:69:db:d1:b5:95:95:7d:4c:6e:85:1c:55:6a:cb:61:06:44:
34:dc:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:32 2025 by rpki-client