Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: 6zgwhu/KUuUMwXRltTYY4PzRBuAIkPWwJr+2kU3LmKQ=
Subject key identifier: 0D:26:FB:8E:69:18:56:F8:F9:D0:9E:17:61:35:90:B6:54:F0:CC:96
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 019A26D4B3EC0DDA26A0E7143169D13AACDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 0CFF
Signing time: Mon 27 Oct 2025 18:01:05 +0000
Manifest this update: Mon 27 Oct 2025 18:01:05 +0000
Manifest next update: Tue 28 Oct 2025 18:01:05 +0000
Files and hashes: 1: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: P2okniB3o1HUnu0KYVW3j4phJQ6K+7Nk0iBzKgTlqW8=)
2: VCOPnV4kZuweFLb_llPPHRAXNUA.roa (hash: cRLhBmbu/yT6hrLfR7qsKhKnC8knJg7oOO9Ome0I9Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:b3:ec:0d:da:26:a0:e7:14:31:69:d1:3a:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Oct 27 18:01:05 2025 GMT
Not After : Oct 28 18:01:05 2025 GMT
Subject: CN=0d26fb8e691856f8f9d09e17613590b654f0cc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:47:86:dc:6e:1f:79:3a:05:52:e7:74:2d:
2d:47:23:c3:07:48:25:75:7c:16:42:16:b1:9a:23:
c2:69:52:64:b3:4f:c0:41:44:2e:63:b1:a0:fc:04:
8b:2d:92:46:45:62:e8:72:e9:30:3d:b7:85:22:68:
c6:ba:26:74:a6:29:26:41:56:c7:69:1f:9c:52:45:
20:d6:da:d1:d5:bd:d8:ca:b9:30:45:2a:65:08:79:
52:19:54:a1:45:6f:d0:fe:64:36:f3:5f:92:a4:80:
fc:66:c4:0a:81:63:88:5c:ec:45:50:7e:d0:50:0e:
5c:9b:b4:a0:33:19:f6:3e:71:9c:25:1d:0b:f3:d2:
7a:2e:69:ca:c3:d6:65:31:8f:0f:cc:7c:d7:74:63:
90:8d:ad:73:0f:6f:0e:f3:ec:c4:a6:d5:8b:f9:35:
4b:1a:31:ff:22:ec:21:9c:bd:1e:3b:44:85:e4:57:
a5:71:38:b0:46:7f:5e:51:4a:a4:89:49:23:b0:3b:
9b:af:0a:d4:88:49:95:cc:c4:6c:a0:6e:46:1d:7a:
16:e5:09:85:71:fb:4c:a4:ef:5e:c3:1c:e6:eb:37:
c6:1d:c3:0a:e9:a5:74:32:5a:9b:7c:0f:27:dc:a9:
9b:f7:1d:cf:b5:be:cb:cf:94:de:2c:dc:7a:27:cb:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:FB:8E:69:18:56:F8:F9:D0:9E:17:61:35:90:B6:54:F0:CC:96
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:30:84:c2:e8:9c:79:a0:91:7d:cd:5f:80:c8:29:90:7a:15:
8a:0e:e1:d1:2a:f4:2e:8e:f9:3d:f2:c9:54:d9:35:88:40:cd:
35:ad:67:09:5d:b5:32:9c:1d:4f:41:79:51:04:97:3d:2a:d3:
14:1f:3b:76:ed:02:7e:9a:8c:12:b8:2a:50:18:6d:98:43:81:
2d:12:3b:61:d8:b2:63:32:57:0c:9b:23:1c:21:ab:1b:09:98:
28:76:ca:a1:7d:91:ef:4d:71:8b:da:8e:a9:ae:cf:6a:86:2f:
ea:f9:d1:1f:18:fe:9e:55:ca:9b:0a:c9:9a:97:59:25:05:cf:
33:e0:b4:40:2f:63:cb:a4:8b:4f:2a:94:3b:28:bf:22:72:6a:
88:7a:b3:a8:f4:01:3e:9d:da:c0:ef:21:f4:6b:dd:37:55:a4:
52:86:f8:f1:95:0e:74:e1:32:d1:a8:95:79:5b:ee:f5:40:f8:
21:aa:4f:25:f5:4f:72:67:3c:52:7f:7f:5e:9b:94:42:5f:10:
3a:76:52:fc:9f:c7:1e:ca:9c:24:99:a1:da:2a:99:d5:4a:2b:
c5:5a:d8:08:d8:8b:02:c6:45:67:35:5e:5a:08:55:0c:f0:a6:
f2:3b:17:da:21:51:f9:74:76:df:f5:3f:d3:eb:db:88:15:54:
4a:eb:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:45:03 2025 by rpki-client