Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
File: _dpVEEhBC7XEfr24O_WBiMSjBrI.mft (raw, json)
Hash identifier: GFQLeQ3RPspSootH4IV6oxr3A+uqmigHH+s10GH96os=
Subject key identifier: 65:0F:C7:F9:8E:9B:1B:2D:DD:D8:AD:C2:53:C6:BB:59:33:F4:37:23
Authority key identifier: FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2
Certificate issuer: /CN=fdda551048410bb5c47ebdb83bf58188c4a306b2
Certificate serial: 019A72266B3B28DEB0752D1D4AEF6E8FE67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
Manifest number: D2
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: BBKJGvg1eMQWu4Dn8KcuHomKhy4.roa (hash: ZhbL/bOWkEXevzCvZ62AQyku+99vuUelC20ZFee2QwU=)
2: _dpVEEhBC7XEfr24O_WBiMSjBrI.crl (hash: eQUIZRk+2I3yL22Y0Mqlxm79fuPd8U+ULNg3InUJz3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6b:3b:28:de:b0:75:2d:1d:4a:ef:6e:8f:e6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdda551048410bb5c47ebdb83bf58188c4a306b2
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=650fc7f98e9b1b2dddd8adc253c6bb5933f43723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:f4:ea:79:95:19:5a:7e:a9:9f:bc:13:69:
69:de:54:cb:03:96:e1:c2:bd:1f:de:4a:66:5d:8c:
97:3d:f4:c4:ca:c4:a1:58:45:40:9d:64:af:d3:d3:
44:ff:83:fd:c2:57:4d:f5:ae:25:d8:d8:d1:46:e8:
a4:a4:57:03:48:53:14:68:57:89:40:9b:c9:88:d6:
5b:cc:c8:ce:ab:7e:a6:b1:05:e3:98:bd:ae:69:70:
eb:b2:0b:f4:c1:5b:1e:84:82:7d:90:2a:b5:d8:5b:
c5:1f:a1:b7:e2:78:34:2f:13:aa:cf:37:23:b4:14:
63:9e:9f:c8:0c:40:95:21:09:e4:b9:a2:ec:14:fd:
e0:ea:be:fe:f7:dc:c6:78:98:dc:e2:fc:07:75:cc:
04:82:cc:ba:ca:57:4a:fa:02:b5:fc:b3:2f:4f:98:
cb:7c:e7:cb:b1:27:49:42:7a:1f:cd:cf:1c:fd:20:
06:af:a6:7f:8f:50:e5:f4:29:4f:11:07:b5:df:57:
6e:6c:f2:87:4e:8f:86:f0:c8:c1:d9:00:de:3c:0d:
ad:27:87:59:b6:a6:d4:7d:98:61:5d:a7:9d:e2:71:
54:1a:00:af:23:21:ba:ce:94:6f:95:8a:1a:e4:58:
30:d8:a3:36:ac:03:9e:92:0e:f0:dd:4a:87:07:8b:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0F:C7:F9:8E:9B:1B:2D:DD:D8:AD:C2:53:C6:BB:59:33:F4:37:23
X509v3 Authority Key Identifier:
keyid:FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:13:b4:fe:e2:ba:21:e7:41:48:5d:9b:70:58:07:06:8a:5c:
61:d8:89:a7:b5:ab:6f:aa:67:40:ea:44:94:39:83:62:a4:88:
67:bf:e3:d1:48:8e:1f:38:c3:95:08:11:ca:42:13:9c:6a:b6:
ed:ad:ec:4e:ba:e9:ff:cd:20:be:21:b0:d6:29:e8:1a:c4:0b:
af:f8:d6:85:d1:95:b3:f9:4d:74:55:63:88:b2:b9:ef:09:b9:
ae:2e:f4:52:75:ab:c9:d0:23:03:0d:2a:18:e1:f9:45:ad:bc:
53:9c:81:24:6a:fb:95:7f:8c:ed:43:35:3c:77:44:5f:6b:21:
24:99:12:39:ff:e0:6c:d1:f0:14:4c:a4:e5:a7:da:d6:43:34:
da:65:e6:cc:75:27:13:7d:e9:2d:96:fa:99:b7:32:dd:6b:5a:
a4:c8:a1:ea:dd:ed:b2:7e:c5:d9:cf:c6:2a:96:c6:cd:47:82:
6d:86:f5:37:43:98:a7:60:10:54:30:99:68:12:64:3e:5b:ab:
ac:1b:39:b7:93:27:72:7c:80:6e:64:d8:77:39:b1:f7:a9:ef:
c4:e3:1b:cc:e8:2a:48:97:53:cd:b5:21:d9:48:63:88:ac:4e:
5a:a3:b8:63:84:ab:ff:a6:88:88:71:f3:57:3a:5c:d7:e5:c1:
84:45:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:10 2025 by rpki-client