Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: FeJRjvqCgOYAX9tqODpr75Dohp5XhMpDilWrN/9+cnA=
Subject key identifier: 67:38:8A:C1:CB:80:7E:3B:4C:E9:E8:B7:33:F9:20:6A:06:6F:86:1A
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019A71B914ECD4F173FD272744442AD45CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: PQ0xpdoDXO4gR4NYLcaopTZYegydAsfV6+BC+zzdp4A=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:ec:d4:f1:73:fd:27:27:44:44:2a:d4:5c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=67388ac1cb807e3b4ce9e8b733f9206a066f861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:ab:a6:88:a3:3f:9b:85:34:fa:05:7e:3b:
4b:cd:ea:dd:ec:f8:90:6d:40:31:68:f6:11:60:47:
28:e3:7c:02:28:63:46:6f:bf:a0:de:40:4e:97:b4:
db:4f:73:24:a8:60:a8:55:98:b7:e2:3b:a9:1b:35:
ee:37:fb:2e:73:bb:12:26:12:65:8b:72:cc:57:54:
75:39:17:2e:62:89:d5:9c:13:a9:ac:d7:23:45:4f:
b1:9f:39:35:ac:77:f9:43:66:b7:34:a8:63:3d:2b:
6e:01:f2:2e:8e:aa:ba:11:33:3f:b8:b5:3b:30:60:
14:10:c5:e0:f1:ea:0f:e3:fe:3d:8a:4d:71:ea:d2:
bd:a1:a8:e0:42:c7:43:ff:8c:2e:81:65:ae:e8:15:
f1:ee:3d:f3:8e:31:c6:c4:13:4d:5e:cc:ca:fd:77:
73:84:0a:b8:da:1f:c4:d3:af:61:32:75:c3:44:ab:
7b:32:c3:b2:89:41:66:74:07:82:6a:83:3b:0a:e4:
c4:29:fd:3b:05:b0:5a:e6:35:68:92:7e:96:71:7e:
fe:42:5e:86:1f:5f:c9:1e:34:23:16:97:8a:f2:aa:
7f:08:23:f7:0c:93:70:56:f2:ad:cb:01:50:3a:7a:
77:a0:33:dc:42:f0:26:0d:d3:1a:6c:f2:2c:b2:d9:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:8A:C1:CB:80:7E:3B:4C:E9:E8:B7:33:F9:20:6A:06:6F:86:1A
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:44:7a:b6:4c:39:a5:85:8e:95:ab:1e:be:2c:9c:11:e7:c5:
f2:6c:f9:0d:d3:07:15:1d:86:89:f2:b5:94:38:21:ca:7a:85:
ea:95:b8:93:4a:c2:18:e1:b6:e7:5e:d2:a2:66:f6:09:f0:a5:
c9:15:f1:4d:fb:ed:4c:3b:c3:d8:48:2a:0e:52:51:b6:69:0f:
1e:c2:44:c3:0d:47:0f:f6:75:aa:68:7b:2e:fa:ae:b5:59:b8:
61:5d:63:62:d8:37:19:c4:0f:cb:e1:e2:43:7b:00:35:84:74:
15:5f:4e:28:f9:91:bb:c1:96:3a:22:b7:66:8c:67:71:5a:6b:
9c:8c:d4:f2:56:9d:43:92:ed:23:68:f5:47:32:84:24:f7:f9:
f6:23:01:f9:bf:e5:84:2b:77:e1:3d:7c:e3:d4:c2:aa:91:d2:
63:d7:de:4d:7b:b9:d9:be:ec:39:b6:73:53:7e:42:57:66:bd:
30:ce:7a:a1:3a:76:40:2f:d1:30:91:a8:21:98:ad:e5:85:b6:
08:96:d9:e6:74:d1:f4:b6:fd:04:dd:07:53:bc:4d:fa:9f:f9:
a6:b7:e2:e8:6a:bd:7d:63:5b:88:02:a2:44:13:ed:18:d5:8b:
76:49:76:dc:af:e8:ef:c3:d9:0c:47:c6:d4:fc:71:42:0a:20:
fb:0d:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:18 2025 by rpki-client