Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: 4Mg9Rutkxm3NuddRuydtW/XUEGrLOT0pa643A0o28qg=
Subject key identifier: E3:0E:D5:17:ED:3C:0C:D0:69:BF:E3:8F:0A:F3:65:91:A1:15:F8:EA
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019A2B1ECE01A1C7908EB690A1AA47627E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0ED9
Signing time: Tue 28 Oct 2025 14:00:30 +0000
Manifest this update: Tue 28 Oct 2025 14:00:30 +0000
Manifest next update: Wed 29 Oct 2025 14:00:30 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: YQYRPPWcUkdWaYudg5PxpUcJflJqYS9p855edEA0AGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:ce:01:a1:c7:90:8e:b6:90:a1:aa:47:62:7e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Oct 28 14:00:30 2025 GMT
Not After : Oct 29 14:00:30 2025 GMT
Subject: CN=e30ed517ed3c0cd069bfe38f0af36591a115f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:52:e2:16:cf:a9:23:58:bc:f0:43:bc:1f:
a5:5a:0c:64:ca:42:05:8b:33:13:ea:fc:df:2c:1b:
9c:79:dc:85:3e:74:77:98:87:d1:8b:de:c4:b5:d1:
b5:10:f0:00:2d:0a:85:73:18:32:3e:b9:48:78:3b:
ef:24:12:ad:e6:dc:ec:1d:a1:94:31:b1:d5:2f:77:
7a:19:73:09:78:73:2a:87:21:40:32:f2:c1:9f:bc:
81:a3:3c:21:c5:ed:ca:38:6b:cc:60:23:e7:55:31:
96:ea:76:0d:77:3b:62:41:9c:b8:36:42:81:1a:21:
40:cf:2c:d9:e3:c5:96:fa:b7:d2:35:55:c3:13:2d:
e8:c3:a0:8c:77:e5:a9:9e:8d:e7:5b:a8:4c:b7:32:
b8:f6:9d:01:f3:0a:9b:1f:8e:f8:b1:34:c1:38:56:
48:54:37:4c:68:98:95:34:bf:90:f2:e0:5d:ef:55:
1c:87:68:51:62:16:f1:ed:8c:27:96:bb:5c:06:9d:
9f:9c:17:d2:ff:05:53:13:c2:48:d9:c4:e2:c3:ef:
d2:d1:c8:bf:66:db:81:3f:67:a5:12:76:91:2d:24:
b3:e9:a6:e7:b0:53:cb:09:a3:e1:10:3b:0d:78:49:
45:35:d8:de:a8:86:ee:d6:7e:e6:69:82:3c:56:cf:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:D5:17:ED:3C:0C:D0:69:BF:E3:8F:0A:F3:65:91:A1:15:F8:EA
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ef:e3:da:66:27:61:1a:67:3b:8b:db:a5:47:fa:63:11:ea:
34:a6:38:d8:09:96:8b:a9:c3:ca:f7:7f:cb:33:35:ed:d8:f7:
16:d8:4b:39:0d:82:e1:8c:bf:4c:d2:18:4f:58:c3:5f:08:b9:
91:3f:c2:0d:b0:1e:f8:11:46:b6:61:79:7c:fe:2b:57:9a:d6:
de:d5:5f:92:ed:4a:e7:62:de:c5:fd:f5:49:71:29:f0:98:68:
09:4f:b1:ab:2b:ad:3b:1e:2d:67:68:6a:1d:00:b4:ae:47:25:
4b:6e:85:32:33:eb:77:7a:db:e2:86:d8:eb:48:db:f4:ba:99:
b4:c2:74:61:fe:d4:37:90:ac:ba:60:1d:66:3c:2d:71:45:57:
d6:47:00:32:0d:77:98:f2:03:69:27:00:19:25:99:e3:6e:50:
6f:fa:52:67:fa:c6:6e:12:3d:9b:04:b2:4c:db:47:23:2e:85:
75:1d:85:aa:c3:86:0b:12:22:12:75:0a:45:4b:cb:78:fe:51:
89:f0:2d:0d:02:79:da:07:3c:1b:ee:c1:84:6f:6c:4c:86:a9:
dd:25:26:ec:af:e1:33:5e:ef:1f:e4:fc:0e:47:6d:01:2c:60:
8e:3a:8d:f8:79:f2:a2:9c:21:d6:4f:b9:13:00:be:af:21:b5:
21:26:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:27:25 2025 by rpki-client