Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
File: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json)
Hash identifier: OoNd759JUIpSc/YVVFHfxkhlcf2xrvG936h8sdg/xRU=
Subject key identifier: 90:94:C5:04:05:ED:E7:6D:95:28:B5:30:F9:34:F3:62:08:E0:7A:74
Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Certificate serial: 019A71B7AAAF7524D35D8219F082D6C6A144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: laLCLPMcW4VVQPJLjoolcJ1cRgJtXZVuXnO0+XdGS1w=)
2: dnhmPWmpRWX9rAh9nBMTSVjDqxs.roa (hash: fzOf1Or3/SM11VjxsfHMYPlVNvpYFDsl88MJ3GBj7FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:aa:af:75:24:d3:5d:82:19:f0:82:d6:c6:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=9094c50405ede76d9528b530f934f36208e07a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:a9:a7:13:04:70:54:19:84:77:af:4f:0b:
c9:39:c4:d7:cb:7b:78:b0:d1:75:35:2a:74:41:f0:
cd:f1:1e:d5:0d:16:19:f2:81:de:1f:dd:35:66:b7:
56:1f:7e:a2:b0:ef:de:ed:15:3f:8e:d1:85:11:e6:
fb:0b:f9:23:18:6f:24:40:ff:43:fa:2d:40:81:0a:
8b:d2:20:79:42:ca:08:ef:2e:d2:64:46:b3:bc:4c:
94:3b:a3:8b:1c:5c:95:de:b7:26:54:f9:31:a3:3b:
2a:94:9e:78:de:5d:db:86:2f:07:16:71:b3:f7:ba:
60:63:19:cd:32:25:ce:b1:8d:c4:12:79:1e:38:a2:
94:c5:4a:ef:15:e5:56:c7:f7:99:8d:99:75:b1:6f:
09:b6:c3:a8:22:f1:51:e6:e8:63:4a:56:cc:52:52:
c4:f9:09:00:a1:3a:b6:ff:5f:66:56:73:a2:8c:81:
67:ae:2f:de:2c:b6:97:16:08:7d:aa:c5:73:d7:b2:
2f:32:ac:8a:6d:a0:76:f6:80:bb:e1:c7:64:05:aa:
e8:db:bf:1d:41:5b:5d:a4:8b:85:b5:1b:0b:91:11:
0e:93:b7:66:8e:e7:7a:0f:9b:50:72:22:14:08:76:
87:c8:04:66:95:ab:ab:79:05:c0:83:2f:b4:4b:8e:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:C5:04:05:ED:E7:6D:95:28:B5:30:F9:34:F3:62:08:E0:7A:74
X509v3 Authority Key Identifier:
keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ea:a3:25:16:6f:2d:86:61:5f:bc:c7:46:cb:bd:52:fc:57:
4b:84:36:64:18:c5:c1:69:4e:89:71:5a:eb:80:af:5a:39:e5:
23:8d:63:07:95:b6:c5:cf:75:5b:75:78:e3:81:53:c8:d2:7d:
f8:22:90:61:3a:1b:6d:3b:fa:95:a3:64:b8:e7:91:ac:06:68:
88:a2:bd:59:2f:ae:01:ef:92:58:c4:1b:ea:72:fc:09:e4:86:
db:6a:9b:52:93:7f:23:a6:f8:9f:c7:06:77:46:63:47:60:f1:
91:b7:46:5e:07:de:67:7d:41:67:8f:be:14:5d:88:b9:5c:3a:
d2:74:40:cb:5c:3c:34:7b:6d:c8:96:f5:e1:74:33:e8:91:69:
91:b3:e9:44:dd:30:64:d7:e2:de:a0:c3:6f:6e:d5:11:1a:85:
00:a9:68:e6:5b:54:6a:d3:a1:b7:12:b7:44:b7:83:72:8e:cb:
5b:f0:c3:b5:e5:d4:9e:27:4a:5c:f9:e9:97:14:2a:c8:82:f9:
f6:79:d2:81:49:cf:ba:17:a8:35:de:f2:23:71:98:d3:c8:61:
88:06:b6:ed:9e:63:dc:80:ee:ed:c3:00:3f:d4:a9:b8:81:e4:
c3:5e:b9:12:87:02:ba:98:ed:6f:bf:83:33:ca:7f:9c:b9:16:
4c:4e:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:43 2025 by rpki-client