Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: vFQ4hZ9U9jl29PYuK4US9V2uqt3ZJufl1J0Lt+XJWUs=
Subject key identifier: E9:87:D7:4C:B5:1E:B0:8C:43:7B:61:5F:FB:22:B3:2C:4F:1E:2C:66
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 019A71EEA99242B47BD7D85A5953508F62B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: M5ssVYqdVNxLz78ej0cx/HjiFlLQXHcQOdthd6i90bU=)
2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a9:92:42:b4:7b:d7:d8:5a:59:53:50:8f:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=e987d74cb51eb08c437b615ffb22b32c4f1e2c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:87:89:51:35:a1:e1:5a:76:b9:c0:fb:9c:6e:
62:d0:63:0b:2a:80:45:84:7f:18:26:c0:9b:b4:d7:
e6:02:5e:6e:66:c9:bf:4b:63:8a:25:42:62:b5:f1:
3a:34:87:50:3e:6e:27:d0:aa:19:18:4f:31:06:5d:
ba:da:94:ea:1a:6c:83:2d:fe:03:f0:95:64:79:a3:
00:92:6b:a0:51:7a:4d:04:8d:a0:36:aa:40:61:6c:
1d:b7:54:26:d6:2f:31:ad:db:80:db:ad:44:90:8f:
51:08:70:8e:43:39:a4:58:17:84:81:30:4c:93:4f:
2b:b3:28:bf:7a:52:9c:62:30:b2:2a:58:33:93:9c:
80:00:a8:95:b8:0c:6e:bb:ba:6e:f4:49:29:70:cb:
c9:77:2f:8a:b2:a4:a2:3a:1a:63:fc:f8:e6:bd:eb:
57:ef:8d:55:5e:a9:4b:fa:49:09:e2:9c:75:95:28:
91:b5:de:26:2f:eb:16:6d:ce:fa:53:29:60:5b:c6:
ac:90:d9:c7:91:d7:06:57:ac:83:16:01:d9:70:be:
eb:4f:13:09:db:da:07:8e:84:ca:26:e9:9d:f3:ab:
4b:d7:86:60:cb:61:83:a9:0b:2e:73:07:af:ce:ff:
68:88:b5:25:00:46:48:5e:a7:ed:44:c4:7b:49:ec:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:D7:4C:B5:1E:B0:8C:43:7B:61:5F:FB:22:B3:2C:4F:1E:2C:66
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9a:cf:a6:69:a6:ac:40:22:ff:63:78:6d:8e:fe:c5:0d:5f:
13:d7:ff:ab:5f:03:19:2e:b4:34:1b:03:5f:48:3b:3f:85:c0:
02:bd:8e:ea:b6:02:05:98:09:48:18:b1:86:f5:2e:11:7a:cc:
d9:1d:6e:8f:2b:b5:81:36:07:20:0a:56:99:a0:be:51:57:14:
b5:58:04:87:70:ed:f7:72:cf:c4:bf:3e:61:43:18:70:11:01:
18:55:fa:1b:a7:26:7c:80:a1:74:e4:6d:63:ce:d9:c9:ef:47:
75:51:ea:b8:58:1a:bc:f7:bb:a5:3d:7f:0a:6f:0e:80:bb:01:
04:ef:b8:e2:f9:a2:bf:da:c7:6b:13:c0:da:cc:a7:c9:d0:a9:
6c:51:bc:8c:e7:37:9e:1a:57:33:5e:b3:6c:24:35:c7:10:e2:
04:b7:47:92:16:90:2b:45:53:12:70:0e:e2:a9:f5:60:0a:75:
a6:ea:7a:7f:e8:8d:8c:83:34:5f:d1:a4:ed:22:e8:e6:ce:1a:
ae:20:91:a0:c7:05:56:5c:9e:51:26:11:96:18:cc:8d:f4:66:
78:5c:1c:d4:44:c1:fe:c8:86:85:32:e1:59:b8:f3:00:26:8c:
b0:80:ca:0c:1f:79:93:40:ea:52:76:f2:f5:e4:ba:62:a8:ee:
b9:6b:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:20 2025 by rpki-client