Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier: H3QvW1jtdFno82PQIa1QRhxM5shJTl0Vhu14QFvkwdk=
Subject key identifier: 18:4E:BF:22:D2:D5:95:5E:1F:48:16:C9:01:0B:57:2A:5B:6F:19:C9
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019A0B5C85F30D67C57B236DEB157B37CA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number: 0B3A
Signing time: Wed 22 Oct 2025 10:00:04 +0000
Manifest this update: Wed 22 Oct 2025 10:00:04 +0000
Manifest next update: Thu 23 Oct 2025 10:00:04 +0000
Files and hashes: 1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=)
2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: F7jlv5fcTfephw3KbGp1K0wwtlEUbCiF25nj/K8MXOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5c:85:f3:0d:67:c5:7b:23:6d:eb:15:7b:37:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Oct 22 10:00:04 2025 GMT
Not After : Oct 23 10:00:04 2025 GMT
Subject: CN=184ebf22d2d5955e1f4816c9010b572a5b6f19c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:7d:94:34:70:77:e2:aa:a8:ac:33:36:e6:
23:39:1a:05:5b:cf:d8:4a:fa:48:29:9b:07:d3:9c:
ca:5f:7f:10:96:d9:a3:8b:03:24:6f:26:62:3b:96:
db:b3:3e:4f:6e:26:21:35:96:51:a8:17:d7:a4:39:
ee:c2:85:24:71:03:db:97:c0:cc:51:a6:25:79:50:
9a:19:de:79:96:f3:d6:44:83:76:ad:17:9c:b6:60:
ae:bf:9d:dc:11:b1:c6:70:bf:86:1b:dd:85:42:80:
59:1c:e3:a6:28:5c:10:2b:57:16:2d:44:5a:34:6d:
3d:bc:40:e2:cd:38:16:2a:6e:80:38:c9:62:2d:36:
96:1f:91:79:5d:6f:e5:fc:6f:21:a5:a7:a7:f8:8e:
cc:e7:86:46:86:e8:12:9f:92:ac:17:bf:f2:ea:91:
e0:5f:eb:cb:23:92:c5:b2:b8:12:b5:d8:87:7f:7b:
71:3b:d7:66:3d:63:4d:83:86:65:a2:2e:f3:bb:f0:
cd:a9:e1:df:6b:5b:03:ce:91:11:2f:eb:19:ab:fd:
1a:ca:c8:58:ee:57:a6:7e:3d:51:2e:c7:d2:b9:7f:
37:44:c7:1a:f0:9b:c2:18:79:ea:1f:0c:40:60:f0:
4d:21:30:a1:a7:b1:e0:78:9a:05:cd:09:d6:80:46:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4E:BF:22:D2:D5:95:5E:1F:48:16:C9:01:0B:57:2A:5B:6F:19:C9
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:78:9c:a9:93:79:ea:b4:f6:cf:2f:48:df:b8:87:ee:4f:
39:4f:eb:c9:07:fd:5e:87:50:29:93:f6:c9:49:3b:60:f3:a4:
c4:16:b8:93:e8:d6:74:64:bd:d9:e3:7c:45:af:29:a5:78:2e:
e8:61:88:f2:9c:58:57:25:bd:87:8d:b8:eb:3c:5c:a7:b9:4e:
15:61:5d:32:52:77:c3:d2:3d:af:fc:ee:94:63:f2:44:2b:c9:
ef:37:22:45:dd:a0:6f:c3:a1:13:f1:d6:76:1b:61:5e:00:83:
e3:7e:3c:a3:7f:49:58:de:88:cb:2b:33:fb:f4:da:d1:dd:5f:
82:a2:ef:54:f7:25:0e:69:7e:06:3d:9e:31:53:25:44:8d:19:
c1:90:4b:8e:94:0f:6f:dc:b6:be:56:87:25:53:fb:a0:ef:a4:
d7:d8:dd:b0:3d:53:96:f8:45:b9:b8:50:22:51:14:71:b1:32:
86:c5:ba:b3:ff:19:e6:42:d3:1d:9d:22:16:bd:c7:54:92:70:
66:a8:df:fb:81:4a:ce:be:45:c0:58:8e:ef:d7:b6:e6:9b:ed:
4d:00:a0:b3:fb:ce:f4:89:be:df:fa:79:63:67:88:fc:99:6c:
b6:b5:64:76:4c:6c:ae:e3:73:97:a1:2c:64:1c:7c:84:97:fd:
6a:be:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:46:40 2025 by rpki-client