Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
File: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft (raw, json)
Hash identifier: lpK012Mu54x7fdLLAWHANH+Ykm6n3lwmqA/pGoOYpdU=
Subject key identifier: 20:B0:AD:8B:91:DC:C8:8A:57:E4:15:C6:96:33:8E:EE:05:DF:EF:BA
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Certificate issuer: /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial: 019A722606AD6761D6D38A3705179623ECB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
Manifest number: 1082
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: Bo8-3iT2LkDa18jomlUWH5mw_LE.roa (hash: 5nJAx1GIzC2LXbuEQ6FRmtjlYW8D/Ir6+ALBKS3Ky+A=)
2: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl (hash: G0YuRxrTeaOdvqr27O97P9Lx3wKlRQa7CSyYMYHb5N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:06:ad:67:61:d6:d3:8a:37:05:17:96:23:ec:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=20b0ad8b91dcc88a57e415c696338eee05dfefba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:7b:71:de:f7:81:15:0a:22:61:e4:4e:e2:
63:a5:a2:5f:71:c8:d8:4e:88:7d:d5:66:fa:85:84:
6b:7a:ae:78:f3:2b:94:92:bc:71:79:71:dd:a2:bf:
22:e3:90:39:60:73:f0:a9:2c:e2:f9:7a:a4:7d:03:
cf:97:8b:88:9e:48:7e:63:f0:3f:ae:32:ab:08:0d:
6c:3c:78:1c:32:45:d0:eb:23:00:8a:a4:0e:92:a1:
61:07:71:48:7b:7d:36:90:99:9f:c8:b3:f6:68:ca:
64:ff:12:c2:44:bf:6d:0b:de:a6:96:75:65:26:1b:
d4:9d:0d:e7:ab:73:7e:0e:02:12:fe:63:e5:74:e9:
76:1f:fc:3c:13:5c:39:fa:23:95:90:fb:cc:2c:0c:
37:65:72:82:02:16:c0:65:a2:17:df:5e:dc:49:08:
a5:79:e3:31:fb:66:89:f9:39:0a:64:a2:ae:ea:58:
94:87:5e:87:cb:be:fa:05:0c:8f:11:54:5c:7e:5b:
f4:73:87:fa:25:89:06:bf:ee:e6:61:b0:29:ee:10:
80:55:53:82:fe:fa:59:7a:4e:25:a1:8e:5d:fb:5c:
0e:e9:39:14:61:07:c2:6b:bf:1e:a7:e4:4c:c8:af:
96:d1:84:05:78:9e:10:95:ef:33:4d:c1:69:14:9f:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:AD:8B:91:DC:C8:8A:57:E4:15:C6:96:33:8E:EE:05:DF:EF:BA
X509v3 Authority Key Identifier:
keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:19:d5:48:14:f5:1c:6d:2c:e9:5a:5d:a2:27:93:bc:a8:1f:
72:54:3f:cd:8e:49:72:60:71:49:aa:fa:f5:bf:2e:d5:93:f9:
4e:79:51:f4:a7:ea:49:cf:02:2f:0e:f6:7b:83:2e:a9:6b:94:
0b:98:99:29:8e:9c:bd:cb:62:6d:14:01:17:ab:10:70:d1:72:
d5:fe:9a:e5:44:74:fd:aa:e3:2c:2f:cf:a6:a8:c2:9f:4b:45:
29:e6:ee:19:0e:44:d4:d4:41:c0:6f:57:70:12:00:1d:39:6f:
21:54:41:75:49:52:e6:1e:55:47:1f:3b:6f:20:13:e7:2c:7f:
d0:ba:e9:a0:de:6d:ae:e0:7a:05:a0:74:3d:a5:2b:69:08:1c:
61:80:ec:17:01:a9:5a:8a:75:7f:04:0f:21:c0:fa:fd:bb:bf:
19:4e:91:5a:62:1f:b7:2f:4d:02:02:94:50:4a:cc:67:68:02:
0a:c1:25:3b:84:21:48:96:68:fe:0b:b4:5a:c5:d3:00:05:b4:
01:43:07:3e:f1:61:7b:15:83:93:ab:4b:fd:a0:f9:79:f7:bf:
f7:0b:2d:f9:5c:10:a3:7e:d9:29:37:4e:6d:c4:19:d8:1e:fd:
0f:60:53:42:d3:96:9a:9a:76:c4:2c:3e:a3:d7:d6:b4:47:50:
3d:49:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:58 2025 by rpki-client