Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File: DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier: oktw2k15C/dyVaVzRBeTMYP6eRdeg44Ra7CWodEn0P4=
Subject key identifier: 75:3D:C7:32:7F:69:B4:18:95:8D:F1:D7:D4:DF:9D:7A:6E:36:43:45
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial: 019A72262FDE0A90EAFBB0B42605DCABFF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number: 0EFE
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=)
2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: RhNkqOEbARwwiDY2uJhHbIlU4norsmCF2RqLQraLypU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2f:de:0a:90:ea:fb:b0:b4:26:05:dc:ab:ff:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=753dc7327f69b418958df1d7d4df9d7a6e364345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:1b:cf:40:6f:46:39:f3:44:d1:10:23:12:
82:26:c5:b8:21:a6:13:64:4f:dc:18:04:e6:c9:50:
51:25:b0:ef:76:f3:6b:51:79:1a:65:36:56:b0:f4:
f8:39:b6:ea:3e:0b:fa:15:0f:e3:eb:eb:b1:e7:f5:
b8:66:d5:40:cd:4a:d6:c5:0d:b3:c1:e1:3d:83:6a:
f7:21:95:89:2a:f5:03:37:90:86:dc:88:c0:e1:c1:
0b:5e:e4:8a:76:c0:5c:4e:46:98:2f:d2:f4:43:20:
90:3e:9b:3d:0e:2b:30:6d:24:52:6c:b3:3c:23:65:
fe:47:20:df:3e:9f:3b:f5:9b:9f:95:20:df:0d:51:
db:9a:4a:63:4b:56:2b:8a:6d:6b:a3:79:2b:46:fe:
8f:fc:4b:7a:21:12:a8:04:c7:8a:be:95:02:35:a9:
aa:46:8c:99:b1:14:c4:15:a6:56:be:e1:26:36:cb:
91:f5:7c:e5:ad:33:e0:72:78:e2:45:50:a0:2b:16:
d6:d7:8f:f6:e4:3b:c9:f1:f7:2d:e0:f9:2b:f2:62:
0f:84:01:a6:64:04:5d:8c:16:a3:74:38:8e:83:ee:
97:b6:7b:05:cd:28:bb:68:13:dd:f3:a9:e1:48:ab:
61:8a:89:dc:6d:97:b1:31:93:e2:e4:92:af:bb:4c:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:C7:32:7F:69:B4:18:95:8D:F1:D7:D4:DF:9D:7A:6E:36:43:45
X509v3 Authority Key Identifier:
keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9e:ce:44:0f:2b:36:b9:34:c0:70:97:bf:46:d1:a9:bc:6d:
62:02:40:de:6d:6d:84:12:da:82:e1:3c:7a:13:76:70:40:d0:
0f:9c:6a:f9:e9:03:63:04:15:ff:3b:16:bc:eb:db:75:d7:7c:
e7:da:95:0a:25:4f:36:55:6b:d2:8c:80:e0:14:b0:14:be:d1:
ff:82:42:d7:27:8c:3e:9b:c7:92:e8:cc:5f:66:81:c5:5a:7b:
16:d3:db:c0:34:7f:c0:3c:e4:0c:0f:66:a7:62:0f:d8:c0:2e:
85:d8:72:f5:68:6d:7c:65:e4:b9:5a:0f:a7:be:d5:10:0d:b3:
b1:12:f9:5b:ba:61:8c:3c:e5:eb:2e:4f:e7:b3:38:de:84:64:
29:7c:6d:60:f9:51:8e:ad:00:e1:19:b5:6b:38:65:5e:ed:a2:
d3:3a:52:89:e4:df:fb:e0:02:b2:c8:56:ca:53:21:a8:79:27:
c4:19:e0:61:df:d8:2b:4b:13:c8:df:02:e7:c5:25:6c:43:a5:
d5:71:d2:2c:4c:fa:3e:7f:04:f8:d9:d4:35:11:46:aa:41:c4:
3a:1c:1a:ce:e5:b9:42:91:12:5b:df:22:4f:92:df:4c:33:09:
a8:5b:40:8d:22:55:3b:4c:b0:99:4e:7e:a1:8e:58:d7:1f:d4:
87:67:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:13 2025 by rpki-client