Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: vrlakywcN7H3V187NWY54aKu+nGZxCE5srgwLBmWwhk=
Subject key identifier: E7:04:4D:E0:69:2A:7E:1B:52:E2:AE:29:AC:08:9C:E7:8F:04:60:C7
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019A17981DBAC84038E4D9197192CDD23925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1684
Signing time: Fri 24 Oct 2025 19:00:36 +0000
Manifest this update: Fri 24 Oct 2025 19:00:36 +0000
Manifest next update: Sat 25 Oct 2025 19:00:36 +0000
Files and hashes: 1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: RGAL3yupuA8P/6fAaJxzZsXVr4IFExKa5hmorcwP2V8=)
2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:98:1d:ba:c8:40:38:e4:d9:19:71:92:cd:d2:39:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Oct 24 19:00:36 2025 GMT
Not After : Oct 25 19:00:36 2025 GMT
Subject: CN=e7044de0692a7e1b52e2ae29ac089ce78f0460c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:01:10:31:82:92:6f:0e:1e:e6:95:52:76:
69:11:0d:2a:88:b6:1b:d4:c3:db:dd:88:50:ed:dd:
55:92:dc:66:2b:39:39:b8:6f:c2:0c:5c:2b:31:46:
12:7d:90:a1:32:ff:c6:fd:db:40:3b:e3:ac:53:40:
6b:d9:d5:3d:84:0d:b7:e6:6e:9f:ce:76:82:b0:5a:
77:3d:b8:30:55:97:11:02:97:5b:3c:90:b9:99:ea:
b8:c4:8a:d4:2f:3b:12:0f:84:7b:df:ae:8b:80:10:
19:63:55:2d:c3:e2:d8:7c:9e:08:a8:b3:4e:6d:a8:
bc:0a:96:9d:30:22:45:ba:88:d0:d6:c7:67:73:f5:
96:91:99:78:fa:c9:7a:50:75:cf:64:5e:68:73:00:
a9:1a:07:f5:20:f9:06:96:30:49:2f:44:a9:59:4b:
0a:ff:ee:a2:c6:48:c0:d9:87:59:b0:4b:eb:82:bf:
c2:a8:7e:42:39:86:83:c9:f4:ca:d7:da:2d:6d:d6:
e7:c6:59:0f:64:17:42:5a:00:ce:74:e3:55:ed:fa:
84:62:cf:37:eb:ee:5b:a9:8b:50:e5:d1:14:42:21:
87:b6:17:e1:48:3c:e3:87:f8:22:9e:c2:2e:9c:42:
70:fa:5d:5a:a2:eb:cc:3d:78:35:52:fe:a1:18:2c:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:04:4D:E0:69:2A:7E:1B:52:E2:AE:29:AC:08:9C:E7:8F:04:60:C7
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ac:72:a1:47:b1:2d:52:74:27:2b:b9:e5:e8:0c:b2:63:68:
06:1c:25:65:f1:27:8f:84:af:a2:af:cc:aa:b5:dc:77:92:0c:
9f:60:84:67:4a:6b:77:4e:48:38:71:22:8d:fa:7f:44:91:2e:
29:45:3f:48:bb:89:a8:96:4b:48:71:4c:2d:35:36:1d:bb:fc:
d1:0b:25:6f:c5:ef:b6:31:d6:3c:f0:e4:41:cb:9f:4f:c0:60:
5f:2a:56:77:35:75:8a:32:28:ed:dd:62:a5:79:d5:c6:6f:f6:
5d:4d:52:a7:67:2e:68:0f:ae:74:d2:ce:17:63:d6:e7:92:39:
ce:b3:71:9e:06:a1:cb:8f:0f:96:f1:07:68:fe:a8:af:d8:91:
b0:e6:b3:12:f5:49:42:7e:88:a2:f0:94:51:c8:e3:a1:ec:ce:
85:40:6f:28:3c:2c:09:cd:19:4d:b8:c5:52:d1:0f:49:e8:e8:
89:dd:a6:56:68:c4:cf:7a:7d:9d:95:8a:01:4c:4b:d8:80:4b:
61:db:3c:80:59:87:30:f8:a9:20:25:c7:9b:ff:3f:6b:37:97:
36:95:c4:00:03:23:fa:5d:f5:3a:2e:e3:a6:a4:f7:f7:e7:d4:
59:d2:2c:f7:a3:8e:9e:46:72:12:71:aa:1d:70:63:ed:08:4c:
e8:c5:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 23:15:53 2025 by rpki-client