Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: Vm8du8P6JuaxjJUbsMpLSaELY4uA97Iqvldb5zA1uP4=
Subject key identifier: A7:29:4B:3C:51:00:4E:A4:4C:64:99:0F:1D:51:A8:4C:60:9D:B9:64
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 019A71B8B86599DA410F0856FC7D43634EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0E50
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: +skkyg8gwD2Ldow0e2I9VLIbNPGma3U5gqZ5A2FP9dk=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b8:65:99:da:41:0f:08:56:fc:7d:43:63:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=a7294b3c51004ea44c64990f1d51a84c609db964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:ac:5a:69:33:d3:f0:b4:4a:9e:68:0f:f9:
d8:ca:37:f8:36:5b:a8:54:34:63:3c:b1:9f:c3:96:
aa:1b:3c:ba:5f:0e:0b:3a:98:c0:1c:9e:80:07:9c:
cf:70:d7:83:14:52:74:e4:b0:69:a2:c2:05:f2:8e:
58:5e:52:5d:d5:3e:c9:5a:15:00:2e:f7:33:d9:64:
9e:75:ef:12:03:1b:93:b9:cc:03:44:24:8a:47:8d:
9f:65:c3:f5:04:a9:48:fc:c8:89:31:38:a7:06:37:
85:d3:8c:c5:66:64:9c:c7:78:ef:28:39:36:57:b8:
e0:b4:a0:6a:d9:95:af:b8:2b:27:52:67:a3:7e:bf:
29:f2:60:62:64:4e:a7:d2:c4:c5:43:cd:39:2d:16:
21:81:1f:c6:e1:f1:60:f0:cf:95:bc:18:38:4c:6d:
9a:c8:43:24:f9:82:88:f6:bf:04:77:1c:96:69:f0:
d1:66:92:77:a0:31:d6:30:8d:ac:43:34:c0:59:be:
48:73:23:26:53:76:0b:74:e9:33:b1:1f:18:5c:5b:
97:55:f0:90:5c:f1:91:60:ac:86:58:b2:38:b2:d9:
63:87:fb:a1:38:84:8a:69:d1:a7:df:f5:0f:ab:0d:
89:88:35:b2:4c:8c:8b:94:35:f3:0c:ee:ac:a0:cf:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:4B:3C:51:00:4E:A4:4C:64:99:0F:1D:51:A8:4C:60:9D:B9:64
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:f2:bc:4e:40:a1:d3:68:3d:f8:a4:27:f5:db:2c:47:b0:ad:
e0:20:fd:db:04:98:6f:aa:18:b5:6c:6b:94:08:97:d1:fb:a4:
d3:c4:3d:44:19:eb:e0:f9:c2:65:d6:6a:8b:f5:b5:38:1f:07:
83:eb:b7:d0:75:61:17:8a:b6:70:f5:c8:8f:61:64:24:6b:9e:
1b:11:13:f6:fa:4b:37:cf:cb:c0:22:a8:95:11:47:8a:40:7e:
38:18:d8:9c:21:df:6d:23:08:dd:87:bb:2d:30:46:05:a3:97:
9d:33:ba:1f:5c:c0:4e:92:71:03:45:c2:21:26:08:d1:78:81:
b8:1a:9c:eb:bd:b8:ec:f5:d6:51:bd:86:64:b5:67:51:fc:32:
9a:d0:a7:97:c3:59:26:af:ff:ab:c6:66:ce:8b:a4:29:da:f9:
8a:30:6c:cd:b4:30:3f:b4:79:5d:c0:12:79:8a:1b:77:d1:b9:
df:c5:ce:57:fb:c3:79:75:f7:a4:c5:e8:80:6e:69:68:b2:a3:
da:73:43:23:78:7a:dc:8a:c9:46:c9:cf:09:e1:7d:d2:37:c9:
fc:c6:52:ae:ca:1e:14:f9:38:d7:40:33:40:0f:f9:7a:f1:37:
d6:c2:02:de:7b:ef:fe:b6:c4:5a:27:37:e1:21:67:b9:92:3b:
12:ab:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:34 2025 by rpki-client