Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: pS72f2kFPP1JDWtyoI/mFMfvczW7JvEWqdaDUhr7XGY=
Subject key identifier: A7:D3:C8:EF:0D:D3:31:DF:40:48:6A:AD:C9:72:26:5C:6D:D6:98:10
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 019A7225F37FCCE10485FD3D5D90A04E2103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 056A
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: q45BrWX2wU3Vk60KLEMHdDQwD56+4YSurio87ersxvc=)
2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f3:7f:cc:e1:04:85:fd:3d:5d:90:a0:4e:21:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=a7d3c8ef0dd331df40486aadc972265c6dd69810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:1b:38:ee:ef:d2:3f:2b:a9:0a:ff:81:2a:
32:87:a0:96:0e:2c:26:e4:1c:04:d9:53:ba:72:ec:
7c:c8:2f:b0:19:e9:1a:14:d0:c4:0f:a0:64:6b:39:
cc:49:2a:4b:fc:0d:fd:8c:ed:9c:b6:29:bf:21:31:
a2:c0:d7:c6:0a:ca:d1:3e:31:96:91:52:d7:bf:9b:
a2:25:8e:5e:aa:6e:0f:1f:3e:70:f6:2e:26:92:b3:
fd:13:46:de:68:5e:b0:f1:3b:32:de:78:74:e9:bf:
c4:b3:2f:fe:5c:ce:8d:8c:9a:8a:a6:5a:88:7d:41:
53:9a:21:7b:1b:06:a8:10:d1:bb:b4:a3:6d:97:4b:
3c:a9:7c:bc:4e:05:78:e1:65:02:f7:e5:6b:29:6c:
f4:bc:03:1b:fd:e0:12:c8:69:97:b5:bd:b4:93:d2:
c4:dc:41:03:16:da:0f:bf:bf:96:a1:f5:da:13:c4:
7f:97:e2:4f:8c:4f:a6:97:6a:63:a5:42:c2:8f:25:
99:f6:bd:f8:4c:ef:47:c8:87:ce:54:41:61:b1:a3:
9b:d5:ec:dd:85:94:bf:82:52:3e:9d:7b:1d:ec:fc:
22:c6:19:7b:f9:0f:12:8b:a8:ab:2b:04:f1:4d:65:
89:06:0c:c5:e8:5f:a3:2b:88:30:29:ab:ca:bc:1b:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:C8:EF:0D:D3:31:DF:40:48:6A:AD:C9:72:26:5C:6D:D6:98:10
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:de:e6:da:07:ba:f3:10:cb:81:f9:68:1b:94:80:f4:ac:b9:
3a:b2:5d:0b:04:8d:af:f2:ff:04:61:ff:0c:fd:66:98:1a:bd:
b2:1e:a3:ae:06:7c:1f:1d:9c:1e:8a:f9:22:5f:22:d5:0b:be:
21:d4:84:dd:d6:09:44:8f:a1:36:92:a1:51:0b:9b:98:31:0a:
6b:01:4a:fe:cf:68:45:44:a8:1b:44:3b:8a:23:c9:0a:59:57:
5c:ec:4a:a0:71:b8:59:ae:6e:78:cb:57:4c:d2:08:15:7c:13:
64:2e:df:b4:59:82:4c:7e:d6:24:e6:75:09:71:02:ec:7b:20:
5c:d0:ff:c2:6a:ea:0e:41:b8:f2:a3:8a:b0:d4:13:c3:d9:2a:
22:7f:53:c1:f9:0c:ff:d1:9c:d6:ff:74:28:4a:d2:c7:cd:53:
15:73:80:49:fe:98:e0:23:16:24:1f:6d:e6:02:92:a5:d6:05:
55:87:13:75:56:20:c5:7c:57:42:37:99:23:84:d4:ee:5f:ab:
df:b3:7b:73:20:22:f8:e9:cd:d7:ac:db:43:78:f6:b8:6b:2c:
06:63:f8:07:9a:e8:5e:6b:f9:f2:b4:db:5b:a7:b8:9f:b0:35:
0c:96:92:47:b3:eb:f3:cd:a7:1a:47:5c:ef:e3:7c:18:8b:2d:
a4:65:b8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:42 2025 by rpki-client