Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: FkS8NSu/Ub5j7xdVSdfcbtnDF9O/ALwr9U9rZaNLLPA=
Subject key identifier: 13:1A:46:77:36:B6:A5:BB:D8:AC:B3:51:2D:03:67:CA:8C:51:82:2E
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 019A71B8286873D2D03163290197E14E4578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 0B77
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: 1ILl-_jBl8vTjilNwWyLb_6kN84.roa (hash: ecF4kJW8L9z29VWA5l2Xp4iuCOJ3lYvBbDFUMxXyKfo=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: 7749b/v4KdVB/IOLfqKTzavhmLCjYB6A3RujH/LmJ7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:28:68:73:d2:d0:31:63:29:01:97:e1:4e:45:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=131a467736b6a5bbd8acb3512d0367ca8c51822e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:9e:b4:27:04:ee:02:f0:cb:b0:e1:86:22:
c7:ad:66:25:bd:31:5d:06:bd:f5:13:55:7f:02:b6:
3c:02:53:a9:49:35:b6:21:87:e5:ae:85:28:e6:54:
0a:ca:d2:0a:b9:7c:cd:8e:57:3b:aa:02:00:db:14:
f3:eb:7a:54:64:1c:55:a3:5f:7c:58:c8:2d:7f:d5:
68:40:5d:37:e0:ab:7b:fb:2b:5b:cd:32:09:ff:7f:
11:63:73:ed:91:20:76:e7:cd:dd:27:39:c4:44:62:
95:33:47:49:e0:79:21:1d:72:4b:ad:16:74:08:8d:
cc:67:d8:8c:be:00:89:9f:f9:e2:0e:b6:a7:be:9d:
07:fc:01:f6:43:29:92:7b:2d:4c:68:d9:72:b7:61:
c0:94:eb:0c:28:5d:6d:2c:49:fb:44:c4:28:4d:a7:
34:21:65:a2:e8:6e:3b:81:8a:12:ea:01:2f:d3:33:
23:26:ae:f3:73:f9:64:0b:44:46:fa:b0:3d:72:7a:
e5:81:17:d5:81:20:47:8b:15:20:8c:70:ac:06:c3:
25:c0:89:95:c5:d9:9f:79:fe:ee:ec:68:d0:50:f5:
5c:3d:cd:ff:07:18:fd:0d:f2:59:f1:72:47:33:3b:
9f:1d:37:dd:f2:c1:97:f0:31:ca:35:c5:87:a1:4b:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:46:77:36:B6:A5:BB:D8:AC:B3:51:2D:03:67:CA:8C:51:82:2E
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:50:7e:4c:c8:33:4b:0e:e9:8a:77:93:cd:5b:a7:00:b2:c9:
44:ce:a4:b7:fd:2e:0d:ce:a1:cc:6f:d9:4c:18:01:96:3e:b8:
ea:1d:18:11:a5:a2:12:1a:f1:f9:6a:cb:56:19:ef:63:83:bd:
c1:0e:c6:73:de:88:88:49:ef:82:4e:12:7a:fd:30:2f:a3:b7:
1e:0e:e7:08:43:3f:03:46:cf:58:e6:03:9b:95:5b:1a:04:85:
1b:e9:5a:3a:b5:ed:2d:94:b8:f0:5f:fa:88:34:03:2c:ee:55:
6e:5f:2a:10:92:04:1f:92:22:e3:ad:f5:a1:6e:26:eb:ed:59:
ce:0a:c1:1d:3a:07:37:d2:3f:d3:07:da:ae:40:b9:b4:d5:db:
0e:fd:2d:a3:05:fe:0d:95:ac:0a:9c:5b:e2:26:ae:0f:ac:e8:
25:1d:05:fa:91:39:6b:18:59:6c:e5:34:0b:00:3f:98:71:3f:
0e:5e:38:47:4a:ea:ad:7e:f8:c8:ca:e4:0a:e4:98:24:9d:a2:
db:df:d2:eb:1f:8c:73:f2:d7:29:95:57:b6:fe:6e:7f:5e:19:
ed:8b:78:30:0d:3b:f3:c9:02:91:c1:7e:32:79:0b:22:db:ad:
09:1f:95:50:c2:df:d6:e0:b0:79:78:31:62:47:20:a0:65:41:
b8:62:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:20 2025 by rpki-client