Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: xHnHlV4nfuW38nU5GRgavN9UrSLK8xZ/GGHmXp3D7L4=
Subject key identifier: 67:16:E8:A9:7E:F5:2D:36:A7:34:12:87:7D:0C:A5:CB:F5:EA:A4:79
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 019A714A31B33B01C2F061070E9E53D310E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:18 +0000
Manifest this update: Tue 11 Nov 2025 05:01:18 +0000
Manifest next update: Wed 12 Nov 2025 05:01:18 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: DmrHic4e4ZlaKinW60uD72HAnu5Ldh8rcBei5P/f1Us=)
2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:31:b3:3b:01:c2:f0:61:07:0e:9e:53:d3:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Nov 11 05:01:18 2025 GMT
Not After : Nov 12 05:01:18 2025 GMT
Subject: CN=6716e8a97ef52d36a73412877d0ca5cbf5eaa479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:b0:28:a5:3c:42:61:4d:cb:8e:cf:11:87:
87:1d:43:d8:30:1c:07:0a:8d:de:c0:53:32:b1:bb:
69:e8:67:05:6a:f1:34:c5:39:3d:15:2c:2a:3a:ad:
23:e5:eb:27:83:46:d9:3f:3c:1f:fb:7e:cc:3e:17:
74:79:9b:b4:e2:5f:bb:c9:3f:6a:cc:ee:0b:5c:9d:
2a:45:10:b8:50:92:57:22:bc:c5:64:a9:d3:83:f1:
a9:14:75:8e:c9:5f:7d:96:da:a8:6b:fb:4f:59:2e:
73:2e:22:c2:e6:72:1b:e9:f6:53:e2:46:12:aa:39:
63:ba:bc:c9:1c:1d:21:51:02:1e:a4:93:6e:9d:ff:
64:a4:03:13:cf:71:89:21:e5:aa:8c:c9:29:23:03:
4d:bc:13:e8:75:93:0f:1a:2d:3f:42:3b:76:8e:cd:
ce:b6:d9:11:7e:82:96:7d:6a:3a:9e:31:ce:50:3e:
c6:13:ef:f7:5f:c0:93:7d:69:a3:b2:8f:9f:07:f3:
a3:5a:f4:d2:6c:04:c7:7c:3b:93:b4:79:b9:28:79:
3b:26:30:49:92:1e:01:08:c9:80:5c:fa:a8:0c:5e:
b6:34:77:f8:fd:de:f3:d9:22:3d:11:c7:fb:29:09:
ff:07:33:5a:60:89:4c:e8:4a:97:9b:69:e4:54:99:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:16:E8:A9:7E:F5:2D:36:A7:34:12:87:7D:0C:A5:CB:F5:EA:A4:79
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a9:01:e4:8d:c4:8f:d7:73:33:63:07:90:0d:98:29:6c:d4:
82:ec:6e:76:32:e7:dd:d8:ab:bb:bb:37:23:19:a4:86:17:be:
50:e3:11:e0:55:e4:4f:30:c6:b1:6e:ba:de:e6:51:f1:f4:2a:
c0:72:6a:4b:cb:ea:b2:33:ea:15:d9:db:65:0a:47:55:f3:86:
10:60:d8:87:82:47:9e:36:9f:ee:a7:43:2f:20:98:34:54:b9:
d6:4a:c2:6a:9d:97:2a:03:55:aa:f5:59:69:f8:65:7e:b3:31:
68:b2:ba:c5:61:b2:27:f4:11:f0:f6:4e:6b:94:eb:ba:87:45:
5b:cc:2f:15:b5:35:2d:c7:3d:00:d5:d3:ed:ee:a5:bd:2e:fc:
12:d6:02:1e:bd:4f:0e:98:1f:2f:ab:25:d3:74:d6:9a:4f:b0:
7e:2f:4d:38:cf:1f:76:e1:9f:bd:0c:51:c4:df:fa:bb:ca:45:
cc:d7:36:81:10:b9:44:61:a9:55:0c:bb:ee:07:e1:a1:61:c7:
6e:8d:38:3c:63:e1:f0:86:d5:63:50:a3:21:65:42:b6:a9:77:
a4:27:27:4b:ea:e5:05:5e:ae:11:06:71:8d:b8:4e:58:8a:7e:
cc:3e:3b:ac:95:a5:ea:9b:95:55:2f:2e:a5:36:ac:e8:fe:7d:
9b:45:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:23 2025 by rpki-client