Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: RWrxIq42q9k9E1YnnAhVnfMNSCpzy22yi3XraEx3LjY=
Subject key identifier: 5D:10:30:C0:16:90:9D:95:A2:57:5B:01:58:0A:82:42:4B:4F:E4:CE
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 019A27B03ED4A42D286600084A99DDE8EAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0A1E
Signing time: Mon 27 Oct 2025 22:00:53 +0000
Manifest this update: Mon 27 Oct 2025 22:00:53 +0000
Manifest next update: Tue 28 Oct 2025 22:00:53 +0000
Files and hashes: 1: 9kQSFx9NBgdYOUE_u_QQ1xrVHjM.roa (hash: nF34ztaCx4lsDpWaNHXR5tZ2u4WJ9TVd0nOUtCtY/2Y=)
2: d2kR6d3TC7hLx-LY_yPrSHmZEqk.roa (hash: bktunr76fWYhMzD/+mLyc6QoNibWe0J9osON7R46Nkk=)
3: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: jGuw47p5DevuZFwixubY9aYOb4DtVgYJKVIjDm211X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:b0:3e:d4:a4:2d:28:66:00:08:4a:99:dd:e8:ea:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Oct 27 22:00:53 2025 GMT
Not After : Oct 28 22:00:53 2025 GMT
Subject: CN=5d1030c016909d95a2575b01580a82424b4fe4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:46:8f:e8:76:79:db:a3:51:3c:2b:01:b7:
af:1d:a6:21:53:e9:04:f8:74:84:82:2a:b1:c0:42:
7b:ce:ca:0a:c4:2f:d2:ea:c2:cd:16:a8:fb:52:0f:
a5:76:07:bd:29:eb:e0:f8:0f:e7:b0:82:97:61:0a:
6c:8f:84:45:91:ba:48:78:2c:f0:ef:4f:1a:ed:e5:
da:c2:2b:35:90:75:a5:cc:45:84:b3:e2:bc:4a:96:
e1:c4:37:a1:09:07:cb:4c:12:a4:72:73:62:0d:96:
41:6b:14:c8:20:aa:c8:74:90:7a:aa:8a:8b:c9:f8:
c1:aa:92:40:18:9c:b8:73:8c:8d:2a:c8:f4:68:b5:
02:55:a4:30:30:c5:33:ec:cd:72:9c:75:26:cb:95:
d6:cd:69:03:a6:2d:f4:66:b8:d8:62:2d:7a:33:8c:
1d:98:06:31:81:18:ff:b5:b2:8e:74:7c:d0:a7:0d:
b0:65:4f:5a:ea:a0:8e:2d:55:76:2b:d7:b8:07:c8:
7a:fe:61:e0:40:28:16:92:5a:d3:58:a6:0c:d1:d8:
1e:d8:0a:19:5f:ee:07:ff:29:ba:89:9b:cc:01:b5:
49:96:95:9d:5e:d9:90:20:98:d8:98:64:f2:68:48:
5d:3c:ef:f3:ec:8f:a4:3d:2a:92:92:31:1c:48:09:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:10:30:C0:16:90:9D:95:A2:57:5B:01:58:0A:82:42:4B:4F:E4:CE
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:b6:25:4e:08:36:32:f4:b3:68:47:0b:db:e7:c2:a1:fc:
e6:a6:ad:36:2b:3c:87:a7:cb:71:66:9b:b2:73:3a:ad:36:40:
ae:21:14:c4:33:96:c4:6a:b2:f0:16:a6:0d:a6:92:20:91:2f:
d9:de:61:ea:20:71:f5:fd:ab:a5:a1:00:06:6f:75:85:9b:b8:
b6:68:08:b3:3d:e7:ec:4f:05:b9:c4:93:cc:1b:d9:36:78:c8:
bb:13:53:c1:16:8e:28:4a:76:4d:5c:7e:a2:f1:67:ed:19:3a:
fb:c1:71:47:53:51:1c:61:cf:b8:bb:35:0f:fc:49:db:cb:af:
4d:89:7c:4d:0a:40:bf:15:7b:fe:1a:d5:ac:0d:ff:37:72:fb:
71:bb:07:9e:9d:96:df:45:84:06:12:4b:9b:91:e5:ba:1e:6f:
fb:b9:9c:4a:39:d4:aa:48:09:fc:0e:f9:a7:b3:c5:3c:87:8a:
59:a7:83:2d:1b:2f:63:31:30:8e:1d:c9:ff:9b:1f:4e:00:ea:
e7:ca:81:19:73:be:9d:b3:dc:db:fa:b4:30:da:cd:d3:5b:83:
3a:0c:6a:f5:3d:29:ab:61:8a:03:90:af:c6:8d:cf:b6:8a:7d:
3e:8d:ba:40:8e:f2:2f:5e:35:c8:ae:c2:82:e2:f4:e6:38:f3:
0b:2b:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:16:28 2025 by rpki-client