Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier: kEow7yS8QGCn3Q/kFGZEV7b3PjXZjNBnCnRZbNU+3sQ=
Subject key identifier: 0E:BD:35:ED:1F:2C:5C:BD:AF:4A:4A:11:0F:7B:A4:68:0F:F2:58:3E
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial: 019A209C878C06C9FBF0A1383126A3DE2750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number: 0435
Signing time: Sun 26 Oct 2025 13:02:00 +0000
Manifest this update: Sun 26 Oct 2025 13:02:00 +0000
Manifest next update: Mon 27 Oct 2025 13:02:00 +0000
Files and hashes: 1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: mG2SHNKW7Fo2exc8O8+Z7DbGp7FIm7CN4NhEEuCI/iU=)
2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:87:8c:06:c9:fb:f0:a1:38:31:26:a3:de:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Validity
Not Before: Oct 26 13:02:00 2025 GMT
Not After : Oct 27 13:02:00 2025 GMT
Subject: CN=0ebd35ed1f2c5cbdaf4a4a110f7ba4680ff2583e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:99:c1:9c:24:96:2b:26:03:8e:c3:c0:3c:04:
99:14:b3:2a:64:5b:59:3a:b5:c3:30:92:a1:51:90:
c1:94:65:9a:5d:93:fc:cf:b3:cf:3d:16:b2:b5:27:
47:39:38:3b:0a:9f:6a:4f:b9:a6:88:a5:45:e7:eb:
4d:8b:19:d4:3c:0c:fd:0d:25:4a:06:b7:91:06:db:
0d:f9:60:11:64:71:e0:5d:74:b3:6f:e8:67:89:5a:
08:f6:87:15:1b:7e:ef:bf:6e:22:6e:c3:5f:42:45:
d5:e2:cd:63:bb:c1:e8:22:8a:fc:9e:64:16:f3:07:
f7:a8:e6:91:29:3a:d2:7f:79:af:ba:42:0b:d3:66:
ff:14:b5:90:98:4f:f0:65:89:3b:5d:62:3c:b2:b2:
56:88:a8:86:ce:ad:d0:d2:ec:d7:97:b6:25:e0:fe:
09:1f:eb:fb:05:78:50:5c:5b:77:67:7c:fe:be:7c:
76:c7:7e:1c:07:a9:01:d5:90:8a:0a:f3:82:eb:09:
e3:9f:65:56:bb:ee:3c:2a:6a:d8:2a:01:ce:ad:63:
33:3b:9f:9d:f6:01:e3:29:76:2c:29:0e:6a:10:8d:
7c:4f:90:eb:00:ee:88:37:1c:11:59:73:3b:6d:bd:
c8:4f:24:90:53:30:fa:a7:50:a9:23:22:3e:83:f8:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BD:35:ED:1F:2C:5C:BD:AF:4A:4A:11:0F:7B:A4:68:0F:F2:58:3E
X509v3 Authority Key Identifier:
keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:aa:73:28:b2:cb:dd:fa:ae:c7:59:45:61:43:8e:32:b8:41:
ed:95:fc:40:46:e7:c3:38:b7:b8:43:31:27:8e:72:fb:84:aa:
6d:54:a9:85:3f:b7:3b:04:bb:e7:a0:93:2c:b8:f5:fb:ad:e1:
80:bb:07:04:ab:21:52:bf:9f:45:6f:9c:0e:71:e3:d4:65:a6:
fb:c9:25:84:8f:12:43:db:11:5c:00:07:5f:3e:54:53:dc:46:
cb:43:90:ee:d5:0c:53:a3:be:fc:c4:e7:6f:ff:e7:86:9b:ed:
89:1a:3b:3b:f6:e5:c1:de:b8:43:f9:95:4e:2d:eb:a3:69:d9:
2f:b8:c8:b8:63:70:91:13:27:d0:86:7d:08:9f:22:35:7e:65:
2e:f8:b6:9f:af:d5:8a:d8:e6:87:73:31:d3:0e:f4:12:26:91:
b7:2e:ec:19:c6:42:02:2a:c7:90:e7:13:2b:e3:15:75:bb:e8:
f6:ea:55:5b:d7:6c:44:17:42:e9:7f:ff:32:90:1a:2c:7e:9d:
01:a9:3c:bc:ac:09:5d:d1:bf:b9:62:e0:b2:14:ce:3b:41:3f:
13:ac:83:f0:f4:15:2b:92:6d:f0:83:91:e7:25:c8:8e:bd:c7:
0b:7b:e0:bc:ea:53:b5:5e:6d:7c:3d:b5:9c:c2:34:10:1c:8e:
43:a8:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:50:22 2025 by rpki-client