Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: qvs2C+BLfl5qINbaE1G2H0H2fHKR3225SxuRdT7Yfs8=
Subject key identifier: AC:41:77:69:B1:05:96:BF:A7:E6:B0:A8:40:C9:33:ED:75:D5:F5:0F
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 019A7293422EB11F936ABF12221F0B1BF054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 0667
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: io7VDSzVIVPR5/Jc7stzVIkir1Dm5N79j37lRSJ3fuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:42:2e:b1:1f:93:6a:bf:12:22:1f:0b:1b:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=ac417769b10596bfa7e6b0a840c933ed75d5f50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:a6:38:99:d4:77:8a:7e:dd:51:92:cf:26:
5b:c0:29:2e:fe:ea:dd:f7:7b:9d:fb:8b:00:19:3c:
15:0a:39:e5:71:3b:83:3a:7f:f6:43:95:b6:ec:33:
9d:4e:df:31:c6:ea:46:c3:be:3d:0b:db:e8:94:a1:
62:35:d5:64:a6:72:20:2c:41:37:8b:6f:da:9e:79:
1f:62:25:65:df:85:4f:97:5b:00:cb:2b:6e:22:2c:
4d:86:35:51:38:da:e6:96:5e:67:87:23:16:6f:a5:
0b:a4:30:f4:fc:75:a4:d9:93:bf:73:1b:cd:3c:86:
ee:38:d8:11:15:01:42:ef:5e:1b:16:8a:c4:e8:98:
5b:3b:0d:f6:7d:83:6f:37:d7:a2:85:4e:8d:a5:ff:
dd:d3:cd:6b:44:d3:8a:ff:c4:0f:dd:9e:86:70:ef:
b5:7a:4b:ad:6d:63:f2:57:b4:b7:3a:57:a8:a7:d7:
51:2a:e5:16:97:e6:5d:9f:0b:ee:d1:86:46:35:af:
61:96:a6:22:3e:d7:9b:d2:88:df:69:35:69:e3:8e:
0f:b8:0a:88:64:4f:13:cf:49:69:02:05:f6:be:37:
7c:ec:99:2b:9e:46:3c:f5:26:75:2a:6f:e0:93:9c:
29:c7:46:1f:ae:ce:cb:b0:c1:33:da:6c:68:44:fb:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:77:69:B1:05:96:BF:A7:E6:B0:A8:40:C9:33:ED:75:D5:F5:0F
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:2a:dd:97:8f:92:cf:b3:5a:2b:66:97:9f:72:91:b3:2a:
67:5a:62:e0:63:db:b1:1b:d0:ee:45:e4:ea:c3:e4:9b:08:f8:
cb:de:95:27:d5:cf:de:12:43:7f:91:15:3c:c9:ca:0e:10:87:
ac:fa:e5:b8:ae:4b:8e:5a:3e:3f:9c:10:6f:d4:c7:e7:d1:11:
f1:40:32:e5:e2:24:d9:f8:0a:24:87:36:f4:09:19:52:be:6f:
50:d4:43:a4:11:fc:89:a2:59:07:e8:5f:4c:ee:32:f3:f1:6a:
1c:2c:40:3f:29:12:f6:59:ea:12:c5:b4:df:34:0b:97:5f:eb:
f4:64:46:17:12:93:d7:95:2e:51:1c:c3:83:60:64:40:bb:71:
0f:e0:36:ab:78:90:60:4d:d9:35:61:21:ce:e2:77:99:04:8d:
fc:a7:79:0a:6d:e1:14:60:f2:d8:85:1b:ec:4e:c9:3d:de:65:
f9:e9:ba:5d:8c:76:99:b5:fa:d1:e3:74:7a:a8:38:a3:86:f9:
57:f2:d5:f6:89:ad:fe:ce:6c:2a:06:d0:d5:a9:c3:40:46:9e:
72:e8:cf:22:ed:db:47:2f:be:3f:be:00:dc:c2:97:99:bc:7f:
59:da:92:dd:bf:51:da:87:f5:77:e3:a4:c3:9b:c9:28:86:b5:
91:c2:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:42 2025 by rpki-client