Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: 8zs4OFkv6rnzHDcaTeQB6XFJgstOQcsr9kmMX2YIQIM=
Subject key identifier: 4F:A2:90:43:D6:62:D8:64:68:AC:EB:E2:AD:3A:5E:7B:2E:D5:E5:C2
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019A1F887198FFDC1FBD9D75FCD2D6332164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0E12
Signing time: Sun 26 Oct 2025 08:00:26 +0000
Manifest this update: Sun 26 Oct 2025 08:00:26 +0000
Manifest next update: Mon 27 Oct 2025 08:00:26 +0000
Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: D5cud4tqmBBKrICbgMeXqWm0305gee/JpJW6Swe6rcM=)
3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:71:98:ff:dc:1f:bd:9d:75:fc:d2:d6:33:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Oct 26 08:00:26 2025 GMT
Not After : Oct 27 08:00:26 2025 GMT
Subject: CN=4fa29043d662d86468acebe2ad3a5e7b2ed5e5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:f7:bc:e1:4b:16:e9:83:c2:34:51:80:e5:
04:97:77:d7:0b:67:e8:e5:98:f7:d1:e4:bb:ec:e6:
35:44:54:c5:b7:39:d2:a9:b1:54:39:4e:fc:fb:33:
e2:55:11:06:14:e2:1c:6b:26:48:20:88:81:5a:a4:
33:16:47:3a:ec:46:71:1c:24:a6:96:eb:db:a7:7b:
aa:10:8d:b2:32:a0:81:11:51:a1:74:85:fd:7f:b2:
f9:00:c1:5a:de:1c:ad:94:76:b7:f7:27:ad:4b:6b:
e6:2a:45:32:64:7d:75:a9:1b:59:e2:7a:70:b9:cf:
e9:b6:c2:ad:af:b1:99:0a:49:19:60:77:8b:0d:ec:
2a:3d:ff:90:6f:80:e4:b3:d0:63:43:6e:43:10:03:
c3:cb:3a:91:85:ab:be:27:40:63:b1:10:b1:01:1a:
0b:b7:cd:b3:24:27:e6:b4:f1:1e:fc:5c:3c:04:3a:
2a:89:9a:24:3b:bc:94:7a:bc:be:d2:a3:67:e7:b0:
7d:c7:a4:aa:70:58:17:c5:05:fd:0e:14:62:8c:1d:
10:20:25:c1:f3:7c:a6:7b:df:fc:14:2a:a5:9e:e6:
41:94:39:2b:86:f2:27:83:52:0b:87:07:d9:1b:7f:
a0:8a:76:0a:65:f4:9e:96:b3:78:79:45:81:70:83:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:90:43:D6:62:D8:64:68:AC:EB:E2:AD:3A:5E:7B:2E:D5:E5:C2
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c6:a0:b6:7c:1d:a0:2d:26:36:b7:28:c0:12:0d:69:df:ba:
54:b3:b9:cf:05:c9:54:82:a7:26:ed:c4:e4:27:57:d8:69:ec:
bd:dd:07:20:61:38:b4:1c:dc:de:6b:2a:42:f3:27:63:4d:21:
dd:43:96:b0:b9:2d:8f:de:8a:3c:c4:de:9f:c5:be:d3:70:4d:
b2:a2:1c:0a:2b:06:e3:d1:1f:32:a1:63:4a:4b:fd:62:25:f6:
3a:a1:1e:4b:3d:02:1f:76:c3:90:cd:55:35:f1:dd:d6:1b:8d:
f0:57:68:84:1c:cb:52:aa:1a:e8:21:21:87:97:f2:a9:c7:99:
c0:b1:7e:72:69:cf:d9:87:3b:05:7b:f9:23:7e:78:d7:b9:33:
16:72:fb:37:55:40:a3:24:7d:07:36:8a:a5:d2:3d:ce:be:bc:
4f:df:36:87:07:20:cb:44:1e:11:0f:99:58:ab:28:e5:f1:bd:
ed:af:fc:ae:df:6b:04:4c:ed:7e:9d:c8:46:a8:7e:70:41:ba:
4d:03:1d:7a:0b:54:46:44:27:cb:5f:2d:f9:68:c5:86:bb:95:
fe:79:32:6b:7a:0b:fb:f6:63:8f:43:32:9f:94:bf:4c:e4:93:
6c:be:4b:21:59:90:59:c5:3f:f4:f3:0a:20:7c:81:1b:c1:d3:
40:38:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:59:20 2025 by rpki-client