Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: OoJHIDWTPFgSoo+VKhdL+K0qHkDnsx5/E9OmUCKqVGQ=
Subject key identifier: C5:17:62:49:44:13:A4:C9:E7:46:30:F3:47:C1:C4:77:A8:83:5D:F4
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 019A714A0C01B6D88EC02B195F93B72859E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 0A39
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: ZsJKFxXmo7OPgqm-sYXIzxvA6qU.roa (hash: IBfv0VOpf12GHCCld3i7ENCZlrb/HEkRLIfqN7c44Ds=)
2: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: 5ePRPWrQCnzd9BM0FXQ1yP5tkm4cLRzSOCzh7eKTxow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0c:01:b6:d8:8e:c0:2b:19:5f:93:b7:28:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=c51762494413a4c9e74630f347c1c477a8835df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:79:d2:fb:69:3d:6e:6b:3d:60:24:e7:b3:
a3:f3:17:75:02:22:ca:b5:16:89:3b:a5:24:b1:d6:
0c:c0:a6:7e:96:1f:94:bb:66:12:fd:d8:d5:e8:86:
68:75:1b:7a:91:64:75:62:4f:f4:65:d8:4f:f5:82:
c5:0c:13:a7:cf:ff:05:d2:9b:0c:45:dd:2d:5c:c6:
3d:6d:96:90:a1:87:3f:b9:69:b3:c8:96:f3:bc:bc:
b0:9c:6e:aa:a3:f4:cb:8c:55:5f:ad:d4:5c:47:34:
c9:8c:93:18:15:c8:7a:63:ca:37:a5:12:68:5e:6e:
f5:66:e6:62:8f:da:9b:1d:55:95:69:a5:25:e9:d1:
bb:a3:2d:f1:eb:6f:1c:a3:84:61:d6:08:7e:27:f2:
0b:e1:e7:92:88:a0:b0:49:1f:63:d0:22:a9:37:61:
e0:ba:4c:84:4d:2c:0d:3b:9f:7a:fd:89:d3:80:1c:
51:a6:47:63:4d:90:ce:6b:1a:6b:61:c6:7d:e5:fb:
c6:14:e6:66:db:ba:1f:a4:e4:8a:85:7c:e2:60:71:
4c:8d:c8:ed:d6:b5:08:f9:9b:6b:22:7d:a9:0c:0e:
d0:d2:bc:75:20:d6:fc:95:00:67:8f:ee:be:01:ea:
02:ee:60:b6:dc:81:c7:4d:cb:ff:17:7a:fb:60:99:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:62:49:44:13:A4:C9:E7:46:30:F3:47:C1:C4:77:A8:83:5D:F4
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:37:46:ed:bd:ae:a3:bb:e2:40:9e:99:c8:e8:e5:40:cf:
41:77:53:ff:aa:48:31:44:30:8b:5c:b3:e3:54:43:39:e0:86:
d9:b1:40:ca:be:16:ec:5d:8e:65:33:80:25:3c:97:e5:ba:82:
2d:30:ce:27:1d:20:b0:62:ae:38:23:f2:8f:08:a2:0f:74:cc:
af:54:95:82:19:1d:f1:2e:7f:8d:36:27:be:c2:04:3f:17:06:
12:b0:9f:4d:fd:72:f9:df:81:44:3c:39:d9:6f:14:a7:b0:26:
ca:42:e2:e6:e1:e8:d1:9c:6a:b1:e0:e2:8e:7f:6b:c0:da:b6:
80:9a:61:b8:62:66:28:b3:d6:b6:77:eb:a3:49:4c:42:76:7e:
6d:08:7c:f5:1e:df:28:38:41:16:38:94:1d:04:1b:33:c7:8d:
5d:ea:be:6a:30:dc:ff:7e:81:a8:4d:4b:58:c8:08:42:b1:d6:
32:a4:c2:8a:7a:47:be:2d:29:16:f2:be:ef:a8:43:e1:96:3c:
42:a7:19:00:6b:0d:42:6f:77:95:52:1e:76:61:39:c4:d1:f8:
54:5e:d3:41:8a:61:4f:8a:d1:99:18:b1:b9:bf:5e:23:4c:7b:
71:0b:db:e9:ed:c9:87:69:ab:5a:63:33:66:9b:47:31:8f:7d:
c3:da:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:47 2025 by rpki-client