Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: Dga6tz217Mh7CPgcV1R8uqbujvuZvhvz3MjOtSYabtk=
Subject key identifier: A3:D1:67:D9:61:4E:82:79:D7:A3:16:F4:12:81:D1:0F:CC:9F:7B:2F
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 019A2EFBD91615F818EEB18FD8265C602917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 0FCF
Signing time: Wed 29 Oct 2025 08:00:48 +0000
Manifest this update: Wed 29 Oct 2025 08:00:48 +0000
Manifest next update: Thu 30 Oct 2025 08:00:48 +0000
Files and hashes: 1: cXNS-jhbDVvMG8hSqbBOLCvMoSQ.roa (hash: ttyMv3492QrBBmeGVtvaGpTbwOtDA0bKvFjMI/PqMtk=)
2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: 5QNodb+Ukye7pdXc/VQNCdCFwzbZ5TpoRUgsq2gn3Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:d9:16:15:f8:18:ee:b1:8f:d8:26:5c:60:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Oct 29 08:00:48 2025 GMT
Not After : Oct 30 08:00:48 2025 GMT
Subject: CN=a3d167d9614e8279d7a316f41281d10fcc9f7b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:2c:59:ec:d8:9d:e6:8e:26:83:00:01:e3:
75:d7:73:bb:e7:bd:95:e2:8c:dd:f3:fa:d2:5b:df:
0e:94:e1:45:c5:05:64:c6:98:93:5b:3b:3c:dc:81:
67:a4:67:cf:69:f5:09:5e:d9:ad:56:87:2e:8f:1c:
38:d1:a9:d9:2d:67:a8:4e:82:d4:2c:41:de:4c:a9:
27:81:b4:1f:fd:79:94:6a:f4:f0:94:65:f1:b1:2a:
39:77:42:73:49:f1:a6:3e:bb:1f:e2:0d:92:46:89:
20:b7:a2:d3:4f:f0:b8:a3:da:5b:88:00:4f:dc:87:
3e:bc:a8:84:42:a9:2f:9c:53:da:17:95:60:c4:92:
9b:60:7d:86:23:3f:08:f3:42:68:9d:75:e9:b0:74:
11:84:40:34:98:77:cb:99:9b:14:6f:9b:58:00:3b:
21:2f:6d:c6:dd:50:87:ea:56:3a:4b:cb:da:c2:34:
6d:8d:b4:7d:9a:fd:5b:cf:cb:00:59:03:3f:36:a0:
13:d8:5e:f9:6f:18:b2:71:25:c8:94:7d:ac:1e:21:
49:69:91:dc:9e:a5:cc:af:14:92:5a:eb:49:18:a3:
55:f2:96:cd:da:72:f1:20:2a:58:17:0f:1c:10:91:
94:30:a8:46:34:aa:bc:37:39:4e:e9:30:76:0d:33:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:67:D9:61:4E:82:79:D7:A3:16:F4:12:81:D1:0F:CC:9F:7B:2F
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:08:26:ab:fb:b7:d8:51:71:bf:dd:20:48:52:5b:22:33:00:
3d:0a:27:66:e5:cc:a5:1d:c2:12:fb:e9:c6:69:5e:0b:c8:57:
a8:64:dc:05:6d:bc:3f:cc:89:3f:e6:c6:be:9c:cd:f0:30:d0:
4a:df:96:29:99:02:11:61:c4:6f:d4:6c:ed:f0:da:0f:0b:de:
90:94:40:0b:30:77:db:ee:82:60:0c:f3:67:83:9d:9a:02:ce:
e0:30:62:71:c2:d5:03:21:9b:8e:8f:d7:85:a3:d3:2a:22:45:
a0:4c:13:86:68:4c:98:bd:ff:f2:17:89:e3:ca:85:71:ed:f0:
f5:8a:88:0e:08:3c:cb:84:1a:f5:5a:ab:4c:f6:40:de:2e:89:
60:b2:56:60:bc:65:0c:c1:6d:ed:02:97:ca:a9:7f:ef:f1:26:
1c:51:23:54:9c:e5:f7:43:87:36:dc:88:bb:b2:19:7e:e0:e7:
c8:b5:a0:d1:f9:ea:76:e1:b3:08:05:5f:d2:df:04:47:e1:ae:
3b:23:20:5d:0d:6e:6d:ef:e4:e9:96:c7:e3:fe:27:04:cb:71:
33:aa:84:51:34:45:0b:5b:0e:05:2e:fd:d5:bd:f6:10:63:13:
ea:ec:fb:07:7b:b1:35:8f:b4:b6:26:32:02:2f:13:ab:ca:75:
18:32:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:05:55 2025 by rpki-client