Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: BVxwlO8hgDpGUliX009Bo8GVbEZ8gPZNcv20FpaEdEg=
Subject key identifier: 73:32:3B:20:8F:47:C6:2B:E1:24:D4:04:84:F8:89:70:87:9C:7C:37
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019A7149B4C0D79B7FDA6E20AEDFEB8FD13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: GcLtorMa0oy3uVpiyrAN4RR11dvEbr0bKYCYRb6Gl5I=)
2: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b4:c0:d7:9b:7f:da:6e:20:ae:df:eb:8f:d1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=73323b208f47c62be124d40484f88970879c7c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:2e:b5:0e:93:34:8f:04:98:63:7c:38:b0:
59:18:64:23:fb:89:0b:69:6d:2a:b8:0f:74:4a:d7:
b1:27:b2:52:5b:08:5b:53:c6:0e:be:b4:f6:05:ea:
90:76:8f:9c:04:61:a7:a8:f2:04:c8:59:50:45:0a:
a7:7b:2f:f2:4a:af:92:73:8d:c3:43:50:43:63:b1:
bc:a4:78:43:0e:6f:8b:78:b3:9f:2e:88:a7:21:69:
52:2c:8d:f3:90:7a:ca:f1:4f:c0:30:04:24:71:b4:
18:15:69:3e:7c:42:b9:a1:11:ad:9e:d8:24:27:aa:
fa:a2:23:24:0e:8e:f3:10:e0:50:63:57:d9:63:ce:
45:d6:2b:6a:b6:8d:1c:57:a7:8d:a7:b3:ca:e7:cf:
33:b5:d0:cc:bd:9d:ab:2c:e3:fe:9f:71:fe:18:a5:
5d:7c:8c:6d:6c:8b:35:0c:32:33:c5:08:14:c4:20:
ec:86:38:29:e2:b7:03:71:c2:05:76:23:b8:ea:67:
8d:7b:ea:0c:9a:e9:e7:e9:a2:61:dc:13:8d:90:6c:
ec:e2:36:3f:83:bb:e9:95:1c:35:5a:ca:59:45:28:
87:17:c4:dc:0f:64:86:a2:19:37:a1:fb:e8:82:3b:
af:d5:52:17:44:72:ce:47:68:fa:66:88:c2:e7:da:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:32:3B:20:8F:47:C6:2B:E1:24:D4:04:84:F8:89:70:87:9C:7C:37
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ab:3e:84:9a:43:15:4b:d5:4e:7f:d2:a1:82:b1:cf:4a:ec:
e5:46:71:06:fd:0f:16:47:20:19:96:c1:6c:df:20:86:8c:bd:
df:c0:6b:6a:b9:be:09:18:24:cc:96:0b:c5:a7:ba:80:0d:84:
ed:77:d4:b8:d9:d1:2a:de:55:0d:fd:19:18:b0:83:28:62:1a:
21:6e:e0:ed:6e:90:33:14:ac:e8:14:80:89:45:da:34:2f:6d:
b8:69:65:e8:b7:88:77:75:ff:46:31:8f:08:64:4d:5e:b4:1f:
98:7f:9d:54:9a:97:c8:9d:dd:5b:1c:68:62:6f:e2:03:cc:61:
7c:77:0e:bd:26:3f:8e:40:2d:2f:c9:01:aa:a6:c7:63:37:ae:
f0:aa:43:be:40:ec:60:10:72:d8:a8:38:60:62:6c:1c:9b:63:
aa:eb:b2:13:a8:f7:7e:09:a1:dd:e6:2a:ff:09:7a:13:54:9c:
94:df:55:c9:79:73:03:85:c3:c5:b7:0d:f5:dc:ad:40:28:b4:
87:9c:8b:7c:7e:d1:3d:b8:0e:69:85:67:f3:50:6e:bf:47:66:
bf:a1:6e:af:38:3d:2d:c7:82:e9:9e:dd:24:fb:83:00:8d:3b:
a0:7b:cc:ba:7d:7d:ec:ad:52:57:84:b9:21:ad:6b:5d:fb:d3:
c2:aa:6c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:48 2025 by rpki-client