Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: pyGICQWbUVMSHr/o/mBk30sSyZgRN6Lrxr5eSbSPh2c=
Subject key identifier: 08:34:9C:85:E8:E9:E9:2D:FC:28:29:64:E4:00:DD:91:1A:80:85:4C
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019A0DB95C1642D8E5AD9D0D6D6E8DEACDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 1363
Signing time: Wed 22 Oct 2025 21:00:42 +0000
Manifest this update: Wed 22 Oct 2025 21:00:42 +0000
Manifest next update: Thu 23 Oct 2025 21:00:42 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: i8Rw9QRhsYS8ci1iep8Jun+o9L3JJXLmA2i79n6WHik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b9:5c:16:42:d8:e5:ad:9d:0d:6d:6e:8d:ea:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Oct 22 21:00:42 2025 GMT
Not After : Oct 23 21:00:42 2025 GMT
Subject: CN=08349c85e8e9e92dfc282964e400dd911a80854c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:a9:d3:c0:5a:1d:4e:e7:29:c1:9d:f6:20:
e6:24:ec:0a:2c:ae:f4:59:2b:9f:6f:a9:4c:de:43:
d9:9b:e6:63:94:cb:e5:ad:21:00:7f:36:19:13:35:
0c:98:d6:b1:4c:c7:2c:cd:81:f3:0f:e9:97:a9:30:
2b:81:be:e5:13:76:25:f5:4c:97:ea:b9:f1:2a:d9:
89:69:5b:0f:14:4c:f3:6d:eb:72:cb:8b:f8:b5:f0:
33:1f:70:77:43:23:28:dc:5f:71:92:77:79:96:f7:
53:0f:d7:e0:08:60:56:da:44:20:72:c8:bc:36:51:
6e:2b:4a:67:d9:cf:e8:2d:f3:b7:34:3e:a2:25:87:
99:e1:c0:9a:91:79:f1:68:9e:a7:3d:25:d4:9d:9e:
1a:9f:ac:22:2d:84:9e:c5:a3:da:fc:21:8c:44:20:
3b:83:16:23:3d:2c:12:e5:24:4f:c6:6d:03:d7:b4:
43:ce:ba:ff:37:b7:5f:19:9a:0f:63:48:d9:1f:18:
7e:3b:a6:81:1d:be:f8:5c:95:5d:91:35:e0:c0:a3:
f0:13:56:d8:29:19:43:07:69:eb:a5:69:1d:39:7e:
b1:c9:48:d5:74:3b:f5:1f:cb:eb:cf:77:d4:38:44:
32:d5:54:95:5b:50:9b:1a:bd:06:8a:db:24:b3:3b:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:9C:85:E8:E9:E9:2D:FC:28:29:64:E4:00:DD:91:1A:80:85:4C
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:a0:c3:15:18:26:7e:82:c0:76:4d:d4:61:9b:a3:ed:a0:
44:15:ff:cd:9f:39:50:49:c9:dc:e4:42:35:35:d5:29:e0:be:
fd:d6:2c:7d:df:a8:eb:fa:94:1d:8d:bd:a0:60:86:25:34:7f:
6c:18:aa:6c:d6:c8:24:bd:6d:a3:ed:2d:dc:10:8e:14:59:13:
a8:02:8d:2e:1b:3e:e5:c0:4a:f0:b1:a6:97:e9:4e:92:53:91:
72:bc:02:27:40:b8:d5:92:c6:fb:e2:a9:b1:4b:b0:95:33:d5:
48:25:a7:cd:f6:44:ca:73:72:72:d8:8d:7d:53:8f:98:79:b3:
58:91:93:e8:bb:88:f2:ab:d3:ff:fb:da:1b:d2:f9:3e:60:19:
a4:9d:5d:d7:0a:15:82:b6:74:5e:bf:37:36:5f:a6:bd:c8:02:
15:b4:45:b6:71:1d:ff:61:c6:32:fc:78:1c:48:35:30:60:c1:
81:77:b2:e1:f9:bf:5d:d3:0d:15:8a:2b:77:d3:24:c5:b9:0d:
34:74:5e:7c:12:2f:8f:1f:0a:ff:02:ed:d9:4e:3f:c9:3b:18:
05:d8:12:dd:ac:89:cc:db:b0:b6:b4:72:b5:5c:03:1b:b1:76:
ae:45:7e:c0:64:cd:52:a0:3b:dd:73:6c:b1:a9:e5:dc:ef:28:
b4:ac:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:23:23 2025 by rpki-client