Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: 8q5wh8hTC42ym9tsw51ORvlwYlAu4RNtT1r9c/kxV9c=
Subject key identifier: EE:43:96:16:39:AC:D7:D9:0A:2F:CE:41:73:0E:AA:C7:6F:38:53:A8
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019A711350C1947C75659CEC3CB0FAE4024A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: FwVpxZmYpKQlAFbmkbEE35i7M9kgo1sFZDnFBSJgjj8=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:50:c1:94:7c:75:65:9c:ec:3c:b0:fa:e4:02:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=ee43961639acd7d90a2fce41730eaac76f3853a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ab:78:00:5a:99:31:68:6f:4d:b9:5d:89:2b:
1f:db:31:e3:ae:cb:62:8a:00:0c:50:b1:1c:79:da:
9a:2c:8e:81:2e:dc:b2:c4:bd:29:58:bd:be:da:bd:
d6:4e:ec:02:3f:97:48:ec:d7:62:99:d2:4a:60:e2:
b2:50:ae:a4:e9:7a:cb:79:9a:a6:62:d1:2c:da:c4:
1b:d9:a8:79:77:4e:7f:a2:c8:da:92:ad:a0:2d:a5:
94:66:4f:8e:59:88:6b:b0:e6:22:83:f9:c6:a1:8e:
b7:c6:8a:4f:3d:86:13:25:98:2a:16:68:fb:0d:a2:
4c:da:15:c7:24:e2:b5:37:d0:96:d9:13:e5:60:19:
41:72:1b:64:37:55:3d:f7:43:90:8d:be:5a:e8:cd:
37:4d:6a:2e:7e:c0:8b:d8:6d:ac:a4:6f:c1:c1:c1:
63:ec:8f:aa:c7:25:c9:d1:3a:dc:b9:86:b2:7a:12:
2d:6a:f5:be:e1:1e:40:30:f8:d0:21:c7:f6:31:c6:
04:9e:b3:b0:de:48:3d:64:88:01:de:1d:69:72:19:
12:50:4b:ea:24:80:c2:07:c5:84:db:4d:15:40:27:
79:f6:78:c3:b3:c8:96:a6:13:0f:6e:df:1a:96:40:
ad:0c:b8:b3:be:eb:d1:ff:37:af:64:69:2a:99:96:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:96:16:39:AC:D7:D9:0A:2F:CE:41:73:0E:AA:C7:6F:38:53:A8
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8a:37:69:87:78:6e:79:23:51:ec:a2:8f:17:57:83:5a:1b:
4b:53:a3:b4:f9:94:9d:86:56:78:3e:fd:49:3b:c0:e7:9c:2d:
59:75:2c:50:60:43:cd:8d:01:9c:ec:70:92:1b:2b:69:f9:22:
a2:ca:13:f3:f6:4a:2d:2f:38:88:e5:10:f7:bf:bd:8e:09:58:
5b:04:69:d0:14:36:b3:9b:9d:48:25:48:be:79:37:2c:0b:4e:
37:ae:6c:87:f3:7d:ca:66:07:a3:4a:20:54:af:a9:a2:58:d5:
d6:aa:d7:b9:9a:8e:a2:98:92:24:52:af:e9:af:8a:85:64:02:
9f:f6:fb:b4:c4:64:1e:4a:27:96:45:07:98:2f:e1:08:69:a5:
ba:d6:24:39:9b:ba:09:c4:fd:de:3a:c2:04:4e:e5:b3:2b:46:
a2:9b:fa:0f:78:b8:50:0b:52:8f:58:6f:e1:4c:b2:e2:ca:5d:
64:34:a5:c6:de:a1:6b:67:65:15:0e:1d:3b:bf:0d:ba:fc:af:
09:c7:c5:25:75:52:6d:b4:78:2c:ca:b6:e5:15:09:45:53:c8:
5b:b4:e8:87:27:31:70:03:b6:fd:64:1c:74:02:57:1a:98:f9:
b0:b8:7b:4f:0c:e7:93:cf:57:f6:e2:a3:c5:31:fa:c8:15:a0:
1f:96:cc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:09 2025 by rpki-client