Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: jmPfhRJ1CH0HHQ7Y3y+T33l7Fxmjld53b8AI9yegQdY=
Subject key identifier: B5:91:B5:16:3C:4A:5B:EF:19:6C:92:4F:32:9F:86:92:E7:FD:2E:14
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019A72CA2ACFE033BC60ACBEBB2374C3E00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:43 +0000
Manifest this update: Tue 11 Nov 2025 12:00:43 +0000
Manifest next update: Wed 12 Nov 2025 12:00:43 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: tlsCiHFFtt0U4/lB1uLR8ZHv3CUu7zOb/PdRTFVTTHI=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2a:cf:e0:33:bc:60:ac:be:bb:23:74:c3:e0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Nov 11 12:00:43 2025 GMT
Not After : Nov 12 12:00:43 2025 GMT
Subject: CN=b591b5163c4a5bef196c924f329f8692e7fd2e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:06:5e:21:93:56:a8:41:1a:f6:a6:36:e2:
87:05:a5:0b:ec:5e:eb:33:8e:23:37:a5:e7:f8:1c:
36:98:82:a0:95:04:59:18:5e:06:20:83:55:ad:8d:
3d:ea:3c:63:d3:2e:ee:c0:5e:2f:34:33:e5:d0:b7:
69:51:e4:f5:20:8d:aa:0c:1d:87:d6:90:28:0b:f4:
39:5d:ce:7f:56:d2:18:d0:2f:60:e0:7e:ba:57:66:
f2:5f:88:d4:3f:43:da:12:bc:82:e1:c0:2c:fa:61:
f1:3a:76:11:42:80:cf:93:0b:db:7c:77:f8:56:3c:
e6:ab:e5:f7:93:d5:f8:c5:b1:88:1d:d6:b2:77:73:
60:20:1f:be:c4:60:d0:d9:5e:44:0b:0d:8e:e4:bb:
af:b1:e2:7b:ca:4a:9f:2f:42:3c:7d:6f:5c:41:8e:
2e:32:72:70:d7:d2:06:13:19:ba:00:b7:87:11:23:
8e:d0:2e:e9:90:3d:94:8f:92:a2:22:f3:c0:41:f6:
dc:1d:82:14:33:e3:ce:c0:4f:c9:85:3b:1f:43:1b:
59:49:33:d2:7c:11:83:d5:05:a1:be:c5:7b:3e:5c:
0c:ed:db:ae:0e:d5:97:bc:ca:56:c7:7c:b9:f6:2f:
51:f5:cf:2c:2c:e0:14:54:d0:3a:be:99:54:be:a5:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:91:B5:16:3C:4A:5B:EF:19:6C:92:4F:32:9F:86:92:E7:FD:2E:14
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d4:8c:9a:fc:97:89:14:ff:59:9d:49:23:be:64:64:da:3b:
a6:c1:f0:12:e2:fb:91:11:0e:fa:46:6b:82:4c:ff:d6:2b:9c:
f7:a0:29:da:3a:bf:c4:57:62:b5:6a:08:7c:38:94:62:2f:d9:
a4:4a:6f:42:d4:d1:4e:fa:ce:a5:68:4b:c2:d4:49:a6:75:a3:
f1:b3:2b:c0:02:20:59:de:12:9b:50:98:e3:36:72:83:1e:95:
dd:9b:11:38:55:bf:f4:5b:ad:a3:38:af:28:58:c3:e1:46:4c:
51:8c:28:69:af:1a:7e:6c:02:9e:4f:5d:e9:0c:b2:c8:14:0f:
90:72:9b:1b:71:bb:ee:b9:f4:dd:ad:78:6d:64:a1:b1:88:3a:
f3:c7:be:9d:1d:61:37:6f:27:e6:28:b8:bd:d2:bb:2a:85:3a:
ea:2f:45:56:54:b7:6d:4c:02:23:0b:45:90:9c:36:c4:d8:db:
9d:99:6f:d3:83:21:72:2c:b9:05:8b:0c:f0:a3:34:37:34:b4:
cb:27:1f:7e:d5:af:c4:3d:f6:5a:c2:d9:c9:74:f2:6c:ad:48:
7a:ef:18:a5:75:36:32:20:3c:12:6a:74:38:1c:4c:09:62:d0:
a7:be:9c:13:66:46:97:17:5e:5a:2d:e1:7e:17:3a:54:2b:49:
e9:fa:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:13 2025 by rpki-client