Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: DBctxDR1bl6PkHhhX/Idf9TF8Q7NUWE85jtCBmxTP3g=
Subject key identifier: B0:FD:AF:59:3D:F4:75:E5:0B:A3:97:99:C6:AF:AE:5B:4E:32:E8:9F
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019A3D24D22FBA9E52D4799C7C270B33EA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 14C9
Signing time: Sat 01 Nov 2025 02:00:14 +0000
Manifest this update: Sat 01 Nov 2025 02:00:14 +0000
Manifest next update: Sun 02 Nov 2025 02:00:14 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: EqIXze8cyUY2iewM+0NDVu1MT8OWEEFi/PffF58dHfU=)
2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3d:24:d2:2f:ba:9e:52:d4:79:9c:7c:27:0b:33:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Nov 1 02:00:14 2025 GMT
Not After : Nov 2 02:00:14 2025 GMT
Subject: CN=b0fdaf593df475e50ba39799c6afae5b4e32e89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:44:a5:ed:bc:30:a4:9c:9c:c7:e0:39:a7:
07:3b:e9:5c:cf:42:52:26:71:72:87:70:b1:70:2a:
67:d2:97:c3:8c:6a:e5:71:fe:c1:fb:5a:94:f4:17:
a9:e7:8f:72:c3:e3:3f:08:ed:fb:05:d2:13:14:fc:
a4:f7:e8:a6:fb:d0:84:78:c1:f9:44:a8:28:8d:f3:
0d:13:00:ea:95:7a:9d:f5:0c:80:8b:67:79:6f:fa:
2f:a3:51:12:fd:9e:af:d8:40:7c:51:ca:a4:61:bb:
c9:d9:7d:eb:56:7a:c8:71:85:5c:74:fc:09:70:04:
9b:f8:d5:6f:31:15:69:43:c9:a5:ca:44:9a:42:dd:
44:ba:3f:b8:f0:9b:bb:b9:bd:81:4a:0a:80:06:5b:
ca:cc:eb:56:37:47:f7:51:6a:18:f3:09:f5:96:e4:
ef:b6:db:96:8a:de:f7:0e:72:de:cc:e3:59:91:fc:
d9:df:12:cf:02:b9:6c:55:36:7f:a0:59:6e:d7:93:
67:62:13:8f:1b:fe:c4:cc:77:d3:db:39:97:5c:1f:
b5:7b:b1:83:9b:12:19:15:bd:f0:88:44:58:e5:d5:
06:96:42:ce:f4:9c:22:e1:d4:e9:64:52:c4:2c:72:
2b:a2:c1:0e:f3:a9:fb:1f:c7:38:82:dc:20:3b:13:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:AF:59:3D:F4:75:E5:0B:A3:97:99:C6:AF:AE:5B:4E:32:E8:9F
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:e5:3f:6f:4a:e9:9a:00:0e:c4:df:5f:7e:6e:dd:e1:76:
92:92:d3:86:59:63:32:7c:50:c6:2a:2d:a8:4d:e6:6f:75:33:
6f:ab:fd:92:ca:41:77:6f:b6:a9:5f:f6:5c:e8:55:bd:9e:36:
a4:51:84:a3:e8:49:4d:82:a0:e3:a2:24:33:c1:67:b0:51:1d:
10:37:0a:47:bd:be:74:09:e3:22:9a:28:34:5e:ae:c4:f1:d5:
21:70:d5:bb:ea:5d:3b:f4:7e:ce:9a:1f:ca:a3:d6:e0:2e:34:
14:cb:0e:af:d0:8e:9a:f3:07:da:3f:ef:28:76:e1:fe:c0:a5:
1a:48:e0:d1:31:3b:68:ac:cd:fe:15:e4:ec:fa:7f:c1:36:2c:
b6:88:cb:e0:51:91:9c:27:b6:42:b0:4f:b3:b4:3d:04:fc:41:
fa:53:ec:99:57:0a:4e:e6:cf:e7:67:3b:b8:90:c1:d6:1b:78:
c1:fc:21:2f:69:35:9e:0e:90:74:35:12:87:d1:9c:d8:ff:b0:
3e:95:69:df:3a:93:3d:73:2d:75:71:04:bb:a5:79:ca:db:3b:
20:94:bb:5b:ae:83:54:c7:5f:d8:52:d1:27:3a:c6:96:b5:ce:
18:03:4d:af:c8:89:30:d2:f9:f2:a4:19:d0:b4:a6:67:ff:57:
50:00:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 07:22:12 2025 by rpki-client