Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
File: DhEMl9XysftNNYKIwOpir18gxBo.mft (raw, json)
Hash identifier: JOX4YhJxebWkyMTKDQWz4naAdgABv1mMfvtnnOrL7MA=
Subject key identifier: D7:FD:DF:E5:76:0F:EE:B4:33:A4:67:B6:D8:94:55:E3:11:F5:87:96
Authority key identifier: 0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A
Certificate issuer: /CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a
Certificate serial: 019A733855B228B02DBFED482CE414B6D968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
Manifest number: 28
Signing time: Tue 11 Nov 2025 14:01:03 +0000
Manifest this update: Tue 11 Nov 2025 14:01:03 +0000
Manifest next update: Wed 12 Nov 2025 14:01:03 +0000
Files and hashes: 1: DhEMl9XysftNNYKIwOpir18gxBo.crl (hash: yq5OlsakwZZjhGZ+irb+xqMHyyBLv0gdFxAPq6nqOy0=)
2: LZOyP8r3x8zItBlCJiR2Oe2hLRw.roa (hash: ptlWNHRcQBtj91KkmUUskyC0BtqyIo6TBBD+R2rdU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:55:b2:28:b0:2d:bf:ed:48:2c:e4:14:b6:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a
Validity
Not Before: Nov 11 14:01:03 2025 GMT
Not After : Nov 12 14:01:03 2025 GMT
Subject: CN=d7fddfe5760feeb433a467b6d89455e311f58796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:b8:1c:c5:0f:40:b3:c9:a7:9e:a4:6f:9a:
c9:bd:d8:8e:ad:69:03:cb:48:84:c8:78:d5:b1:ef:
7e:56:a7:e9:99:96:ef:b2:84:1f:5b:b9:b7:28:62:
06:45:0a:07:aa:11:9c:02:65:26:ad:00:3e:1b:64:
8b:75:83:63:93:9a:7c:de:c1:5c:b6:f5:33:0f:27:
ec:f9:f8:8a:b9:89:c1:f2:da:f0:ff:a5:c9:d0:c4:
89:70:59:d5:96:71:3d:31:01:e7:cd:cc:88:56:d4:
33:8d:c8:e4:b1:99:36:d3:51:ef:b6:e8:2c:83:7f:
ab:00:ed:14:8a:e4:2d:02:d2:34:d9:61:ce:49:93:
97:f0:90:81:88:a3:fc:f8:80:8d:cd:07:f6:10:8a:
47:c8:68:d7:fe:2e:18:9e:9f:d4:2c:2a:35:f4:e8:
c0:56:9e:6f:54:0f:3d:ad:4a:dd:fa:9f:8b:ff:e1:
26:7d:17:84:1f:7d:3f:4f:5e:36:c7:ed:33:6a:5e:
29:51:97:1e:45:74:5a:cf:d1:05:f2:ce:21:44:8f:
ea:f8:11:db:fd:75:ea:76:32:05:df:d3:d6:0b:0f:
73:27:bf:4a:17:85:22:0f:e4:1b:5e:f5:15:32:2e:
18:66:e1:a7:fa:19:77:35:b0:a7:96:1d:6c:49:2f:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FD:DF:E5:76:0F:EE:B4:33:A4:67:B6:D8:94:55:E3:11:F5:87:96
X509v3 Authority Key Identifier:
keyid:0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d6:ee:45:ce:ea:21:ac:9e:73:6f:28:f6:7e:af:dd:4f:77:
a1:f6:06:63:09:13:d4:67:92:b7:c6:f6:ad:e0:37:99:fb:e2:
69:6d:3d:0c:7e:bf:c1:d8:2a:89:d5:dd:22:46:cc:ca:7b:f5:
2a:5c:b5:20:21:71:27:b7:d3:bd:f3:72:aa:14:24:78:d4:c7:
b0:36:1b:6c:51:2c:d0:53:10:48:4b:a2:22:f2:e3:8e:e0:73:
0c:2c:59:0e:db:f1:a6:d5:b6:c2:5f:61:74:6e:19:f9:22:d9:
9a:64:4b:a4:b5:11:87:fb:0c:e7:c6:39:4c:e6:bb:61:d6:99:
22:f8:77:94:91:74:a5:f6:a9:e6:64:ef:3a:dd:d2:64:83:5f:
32:8e:1b:d4:27:ca:99:3d:ed:42:e2:5f:a9:76:06:a5:91:49:
9b:f3:8a:65:c9:06:73:84:d4:27:9c:9e:41:67:9c:99:00:6c:
db:8f:1e:30:db:c1:cf:cd:95:b7:d7:0f:cc:1e:36:5e:d1:d2:
94:aa:40:5a:ef:d4:3f:68:ff:af:7b:a8:ba:43:44:9d:7b:7b:
3d:51:1e:2b:13:ec:02:f0:7d:4e:e5:fe:20:ef:2e:3f:53:ec:
b0:55:f5:a6:73:97:01:eb:ed:34:16:b4:40:35:5c:c9:93:d2:
18:e5:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:34 2025 by rpki-client