Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: jXSJuLYZJMgZ1cuEaT5bCNM9MBx5enI3xBtHdjs9bdg=
Subject key identifier: 0E:DB:A8:29:D6:EF:2D:BF:D8:F2:94:3E:A1:1D:4B:FC:C2:82:63:41
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019A72933BE2614FF0CB7845350B333A6A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:42 +0000
Manifest this update: Tue 11 Nov 2025 11:00:42 +0000
Manifest next update: Wed 12 Nov 2025 11:00:42 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: f5UoDuAKwSkPLFEu1mFxX6OB9rH17bsym3pqAfWkm/s=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3b:e2:61:4f:f0:cb:78:45:35:0b:33:3a:6a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Nov 11 11:00:42 2025 GMT
Not After : Nov 12 11:00:42 2025 GMT
Subject: CN=0edba829d6ef2dbfd8f2943ea11d4bfcc2826341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:0f:9f:ba:b6:f7:0c:df:9b:bc:62:48:eb:
34:9e:3e:a4:8e:ca:6b:ee:2c:ed:bf:af:de:ef:8b:
cc:9d:d4:c3:ce:23:a8:9a:9d:d5:22:5e:e1:8d:b3:
7a:fd:c9:c4:c8:c5:29:d3:8f:fa:84:56:37:46:f2:
e4:11:96:90:4f:78:3f:3d:4d:51:94:1d:52:bd:cb:
d2:4b:32:c3:66:6b:a7:05:fd:ec:70:7f:61:06:6b:
e2:07:a7:af:c4:f6:dc:ff:99:f7:f9:58:29:58:96:
17:3c:cf:85:99:9e:eb:09:f7:1b:ea:a7:f2:a5:b8:
9e:14:21:ea:cc:0c:e8:41:ff:d3:ae:06:21:04:23:
e6:49:bd:16:88:eb:0c:60:69:fa:4c:bc:5c:cc:b4:
e1:b4:6d:f5:87:db:3b:d7:4c:5b:90:91:6e:c6:c8:
7e:41:c0:05:51:6c:62:13:81:74:a4:60:b6:88:ce:
7f:c7:c4:98:af:bb:83:78:8c:57:45:98:a2:06:1a:
5c:34:0a:3e:ea:48:46:09:e9:4f:c1:64:8b:0b:04:
12:c9:b0:a7:07:c5:b1:d4:c0:1c:4e:51:7a:70:23:
bb:68:78:9f:3a:47:a2:0e:2e:76:27:6d:7a:1a:a6:
fa:43:f5:90:3c:fc:77:37:ad:06:dc:30:e9:45:c6:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DB:A8:29:D6:EF:2D:BF:D8:F2:94:3E:A1:1D:4B:FC:C2:82:63:41
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:32:de:c0:29:e3:95:d7:de:c0:1d:d5:ac:09:13:8d:8a:
d5:21:b4:ca:fa:61:ef:c2:d5:88:cc:de:48:86:aa:2a:70:10:
6c:07:41:34:ae:38:d2:e9:0f:4c:20:7a:2f:ee:67:64:9f:8e:
ac:57:10:ca:e2:49:33:fa:81:72:47:bd:ce:47:93:b8:fb:ad:
e6:24:76:10:34:a4:49:9d:e2:ae:a8:f9:18:66:d0:62:bd:3a:
c4:47:f8:03:2d:8e:57:e4:b3:37:ca:06:48:ad:66:8d:1e:a3:
52:64:af:00:65:ed:1a:48:35:64:f7:0b:d6:39:0e:3c:d9:54:
50:c6:d2:c2:72:cb:12:fd:1e:49:58:3a:8a:05:88:f9:f1:e1:
15:43:3f:57:59:49:f4:35:f2:fa:cb:b0:09:b2:87:c2:c1:7c:
a4:c5:ff:84:16:22:7e:2a:f1:c2:c7:46:d8:0b:b3:ae:56:1b:
9c:16:2d:83:3a:17:b3:dd:20:67:8d:8a:87:8d:49:d6:8a:f8:
db:56:91:5e:9e:6d:27:87:e7:f9:63:fa:77:e0:10:f2:5a:59:
9f:a5:67:1e:56:1d:20:5c:35:a4:71:86:3a:50:26:af:f9:de:
da:9c:23:17:a0:6c:c6:96:f6:ff:66:59:0e:96:a6:db:de:aa:
36:7b:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:50 2025 by rpki-client