Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: XpqlCw/yqrXOMcGFmeY5gwY0huSSAPrQmsdqRDBKvAY=
Subject key identifier: EA:63:05:F8:9A:AF:34:CE:26:24:E0:79:8F:DE:9B:1E:04:DF:1D:02
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019A2DB1EE4171C0C0D77239F0277B961BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 0E5F
Signing time: Wed 29 Oct 2025 02:00:26 +0000
Manifest this update: Wed 29 Oct 2025 02:00:26 +0000
Manifest next update: Thu 30 Oct 2025 02:00:26 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: cYBCGGg0xheqIKDepGAsnA23ipKSHylZUziIjJ4jLFw=)
2: zo9Y2aPXtg0v5rw18Mi_WOQc36Y.roa (hash: v9STSvD6P0pmUA0gxCp1HPZofea00hykboqUh1BCCCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b1:ee:41:71:c0:c0:d7:72:39:f0:27:7b:96:1b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Oct 29 02:00:26 2025 GMT
Not After : Oct 30 02:00:26 2025 GMT
Subject: CN=ea6305f89aaf34ce2624e0798fde9b1e04df1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:e3:6a:1e:68:cd:fa:1b:32:e6:fe:07:21:
8f:12:c8:d7:d9:9a:0e:7d:b7:1f:59:a4:91:d6:b6:
83:aa:b9:72:cc:95:c6:9f:84:64:1f:17:27:75:15:
82:35:e2:d6:2d:1c:de:7c:f0:63:82:2a:e8:18:a9:
b2:52:2d:10:cc:03:25:08:17:64:af:58:91:32:c2:
40:98:df:47:bd:96:9d:d3:7b:d4:e5:a7:c6:fe:7c:
19:c8:ca:2a:37:c0:f1:57:cf:19:79:ca:d5:61:d6:
ff:62:f2:8b:8f:c7:4e:d1:53:21:0f:f9:7a:f9:11:
d9:c6:8b:65:78:6b:9a:e6:6f:6d:46:cb:a1:4e:7d:
a8:2c:43:44:30:7c:c8:e2:35:b2:7d:10:55:59:d2:
30:95:bd:6d:55:32:f6:24:ee:90:b2:11:2a:1a:00:
89:39:98:9d:ca:f4:41:bb:c9:0f:f9:a1:71:ea:6e:
86:6f:06:29:0c:6c:4a:4a:af:d6:8d:ce:9b:d4:a9:
87:82:78:35:5c:c4:08:4a:7d:01:32:de:04:f1:b5:
db:ce:5c:2d:4a:ec:83:36:94:4d:cf:cc:9b:d8:b7:
e4:49:f9:7a:3c:35:e7:dd:8c:d1:1c:20:a7:11:8e:
4f:0a:a1:68:08:74:a7:8c:da:0d:12:ef:21:2c:a6:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:63:05:F8:9A:AF:34:CE:26:24:E0:79:8F:DE:9B:1E:04:DF:1D:02
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:59:9b:93:40:29:42:99:13:d8:55:69:d8:58:56:4b:2a:5f:
dc:18:1e:7d:28:b5:cc:57:97:0a:cc:80:3d:d7:d9:5d:6e:d5:
3d:3e:cd:6e:ac:fc:2a:b5:2b:2a:32:b8:9a:54:ce:19:4e:50:
de:94:8a:23:e0:3e:20:b6:b8:33:1a:40:71:fd:3c:5e:db:e3:
b8:c5:84:31:5b:a8:de:ce:a2:0c:90:4f:e6:6b:f4:f0:f6:e5:
70:ce:ae:74:0a:a7:d7:59:20:37:5e:85:b0:4b:ad:6b:9e:96:
04:30:4b:9d:b5:af:8d:86:3e:34:b9:f8:33:87:57:79:59:e2:
38:8e:82:09:4c:51:75:17:d0:fb:43:73:cb:69:59:d3:c7:e3:
f1:11:20:6a:e2:94:67:0a:72:87:43:62:4f:b1:57:1b:44:73:
49:65:23:f4:c3:92:5c:65:59:f5:02:d7:b6:bc:89:e8:d0:97:
26:03:38:66:40:59:87:d1:7f:ed:0a:38:e4:ca:69:5f:b3:80:
dd:08:61:35:03:90:10:ad:ba:bb:3e:75:74:2c:af:a6:e2:da:
54:b8:ff:ee:e2:7b:b9:cc:f3:35:6e:9c:2e:61:9e:70:55:17:
d3:fc:9d:52:05:a0:51:0e:e2:d5:dc:ba:f3:e7:cc:cd:43:52:
24:f0:8c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:35:41 2025 by rpki-client