Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: MhF2xMna/AGMF/SkCASFq1KxS+SoU2qPK5+Dr8SfWBI=
Subject key identifier: 59:30:FC:DB:D8:7E:BB:28:85:CC:3A:87:92:5C:76:8C:B6:5F:D2:8D
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 019A72260CA32B9C87F96186A6F969C3B065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 0247
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: DEjIMrq1SBGoNA8gk6a/7vXW2uPYdQs8wtqZDcwE6EU=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0c:a3:2b:9c:87:f9:61:86:a6:f9:69:c3:b0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=5930fcdbd87ebb2885cc3a87925c768cb65fd28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:aa:11:e3:28:6d:c5:ad:bf:c2:82:2a:8c:
90:7b:02:0d:d7:18:bc:d7:4a:ba:6c:fa:7e:9f:fc:
02:ca:59:eb:8d:42:8a:e0:55:5d:36:97:13:68:12:
71:e3:67:d5:47:d9:f3:47:3e:47:03:12:c4:54:3c:
01:b7:62:22:35:81:38:0b:d6:c4:c4:3f:4f:33:33:
cc:4a:e3:d5:b5:7f:35:5b:53:d9:60:ed:d7:f5:1c:
4a:45:6d:55:73:50:c4:c8:70:67:b2:71:0c:4b:e6:
82:0e:58:62:a7:40:17:4b:d7:11:63:94:b1:bb:7f:
13:1e:1b:ef:2e:e6:64:71:ec:ae:85:eb:3b:f3:4a:
0f:49:21:de:da:a0:72:b1:cd:1b:78:50:9d:db:a7:
29:23:a9:e7:8f:5e:ed:f6:a9:6b:af:72:38:8c:a3:
f5:a5:88:d0:6a:ea:0d:ef:51:ce:6e:d2:1d:35:dc:
a0:b6:61:81:70:17:07:92:cc:68:f3:d3:e8:4b:e0:
ea:06:82:8a:6b:b9:93:90:34:ee:cb:a0:38:4d:9b:
d7:f0:f9:05:73:70:99:79:24:71:93:92:51:92:17:
3b:85:6a:ca:4d:13:8a:c1:fa:2f:6d:65:c2:02:2b:
be:02:97:c7:99:d6:1b:36:31:4a:d1:b6:36:54:14:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:30:FC:DB:D8:7E:BB:28:85:CC:3A:87:92:5C:76:8C:B6:5F:D2:8D
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e9:65:37:c3:79:7b:e5:70:ec:48:32:52:51:0e:6f:e0:65:
2a:d7:04:c7:4e:c7:ec:93:0d:81:30:8f:83:8a:c2:08:85:4b:
50:89:46:d1:d3:35:bb:83:cf:d8:66:77:e9:da:6c:6c:9e:6d:
fc:8d:ad:74:1f:5c:04:40:41:23:8e:b9:d4:33:6d:08:f8:66:
3d:85:ee:e7:2f:f7:69:51:50:31:ac:b9:4f:94:75:0b:72:b5:
fd:b8:23:0d:4e:4a:66:a5:62:b3:84:a3:fa:80:63:fb:d3:7c:
49:90:70:bd:52:b5:fc:0b:6d:71:bc:ea:29:41:c0:14:48:f7:
f5:7c:6e:44:e1:db:e7:85:21:32:70:4e:ac:76:fd:c7:23:58:
ae:d9:fe:1e:ac:52:0a:6a:99:41:87:2f:76:54:9e:21:11:b4:
8c:f4:d2:ba:37:67:90:11:0f:73:30:88:31:c6:bd:8a:05:fb:
0d:14:a4:17:f8:53:17:26:18:f3:ea:65:8f:e8:b7:04:18:50:
f9:63:6a:c1:d7:7a:58:ba:0d:13:aa:26:16:bf:75:aa:60:7b:
cd:16:11:cb:d1:47:b3:41:f7:23:0c:c2:f8:55:f0:5e:69:97:
6c:cd:9d:7f:0b:e3:d9:b7:0d:48:8c:2a:87:3e:db:f2:df:59:
03:94:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:05 2025 by rpki-client