Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: 73vH8b6x8XOXHKCaVp3DEhA/3LYDMAATjbhts51GJqA=
Subject key identifier: 3E:A9:B7:66:FA:28:D3:CC:6D:0C:4E:F0:DB:EB:7C:EF:9E:D8:E8:98
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019A71EE7568640ABACB064F1E96BCFAB08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 0535
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=)
2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: SrwRzqy7p8CqmEOsrA/ffB/2I2SHC9X0GggbNHtWEkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:75:68:64:0a:ba:cb:06:4f:1e:96:bc:fa:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=3ea9b766fa28d3cc6d0c4ef0dbeb7cef9ed8e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:80:16:6b:29:7f:20:0c:cf:11:19:72:92:
ce:3d:bb:93:af:aa:af:2f:48:82:f5:f2:ea:5f:51:
6c:20:99:3b:8b:d5:dd:b2:5d:1f:8d:55:b3:f0:0a:
2e:0b:f8:9b:03:7c:47:8c:6f:80:77:5f:cc:3c:9d:
00:4f:e8:fc:33:89:7e:aa:68:4c:13:0a:4a:23:cd:
1f:26:c4:b6:d5:5f:13:72:7d:a4:bb:56:dc:00:63:
f5:67:30:bd:e7:44:19:e5:5b:1a:65:7f:11:a8:0d:
81:cb:d6:02:1d:2b:a5:ef:4d:81:4a:33:f1:da:42:
f2:83:02:e3:b1:c8:de:df:e0:eb:47:e6:5b:3b:04:
51:81:92:2a:bd:ad:40:af:2e:2b:65:ce:68:c2:cb:
dc:83:fb:7a:67:65:6c:6a:b8:ae:04:8b:6c:da:df:
f8:84:80:4a:20:cb:f4:d3:db:8c:0f:c5:77:a2:8d:
4d:f5:3c:de:e3:2d:4e:21:de:98:fb:75:14:9d:c1:
de:cb:cf:42:f3:62:f4:c5:c4:d9:01:30:38:71:6f:
5e:31:63:89:98:e3:56:a6:03:f9:98:1f:b6:ad:a4:
d7:a1:0f:72:96:f9:13:d5:90:28:3a:56:f1:3c:27:
a1:49:f8:23:ae:ad:22:70:15:de:dc:28:3e:41:8f:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A9:B7:66:FA:28:D3:CC:6D:0C:4E:F0:DB:EB:7C:EF:9E:D8:E8:98
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2e:e1:9c:f8:8f:b3:96:f1:2f:29:8a:9d:82:57:fb:a8:be:
86:2d:93:f4:ff:6e:b1:6f:b4:f0:83:66:08:3f:04:00:a6:f6:
ae:fb:92:ef:8a:f1:a3:f6:23:e0:74:fc:e6:1d:43:f0:cd:f5:
ac:95:67:b4:3a:f4:07:9f:95:f4:67:c5:c7:5d:9d:be:2f:9a:
08:77:9b:69:04:f9:45:47:ae:6f:81:37:d7:3e:97:f8:e1:43:
cf:65:3a:27:6f:78:9c:14:6a:bf:93:67:49:f1:59:ee:d2:bc:
57:03:4f:cd:4f:ed:93:ad:9c:bb:eb:f2:53:79:a8:e5:40:73:
ac:06:04:af:97:11:be:09:2d:ab:af:ed:44:1d:f8:bc:bb:e9:
b8:3a:11:25:de:59:07:63:43:45:47:f5:a7:b9:3b:2c:74:25:
df:2e:5f:39:fb:0b:7c:59:33:7d:e1:4c:8f:40:c0:73:c5:bf:
c7:9d:40:82:cf:27:69:10:f7:8d:bc:11:f4:93:72:ea:d5:d3:
6e:16:68:82:99:13:62:5c:d6:ac:38:39:5c:db:c8:a9:38:2f:
70:6e:68:9d:46:c4:80:bb:52:ce:3c:e5:31:16:89:11:2f:b0:
00:24:34:47:ea:2d:32:90:1f:c9:34:53:99:77:90:41:6e:5d:
e0:7f:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:38 2025 by rpki-client