Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: QAEolWftNP8sky/zA31fjAztlgxspeXW6Yyl2PR4u5A=
Subject key identifier: B7:48:35:68:72:BD:A2:A6:AF:79:EC:F5:3B:F9:3B:A7:5D:2A:41:9F
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 019A28F95252B5F347293F5F8DF917436BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 16F6
Signing time: Tue 28 Oct 2025 04:00:19 +0000
Manifest this update: Tue 28 Oct 2025 04:00:19 +0000
Manifest next update: Wed 29 Oct 2025 04:00:19 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: 9+Pd3dv4OUGIi7eN0UHE/hAsKi25cEzuCahmtPet0ko=)
2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:52:52:b5:f3:47:29:3f:5f:8d:f9:17:43:6b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Oct 28 04:00:19 2025 GMT
Not After : Oct 29 04:00:19 2025 GMT
Subject: CN=b748356872bda2a6af79ecf53bf93ba75d2a419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:71:b1:66:37:79:a4:09:6e:4b:b0:63:77:
8b:0f:fa:88:cc:14:41:89:6a:ee:ad:2b:b9:52:36:
c1:6e:95:42:f5:5c:c8:c9:60:84:6f:36:bd:7a:40:
43:d8:d0:ce:13:50:d7:e1:74:c4:6f:c6:81:fd:28:
55:47:30:16:15:14:98:30:7a:4f:27:5f:ae:3a:5f:
3b:e6:96:c9:64:df:c9:d1:5e:e9:e1:42:c8:af:c8:
24:97:31:b7:19:9a:ac:c6:b2:47:01:db:32:db:7b:
d1:88:d8:18:82:46:92:7a:60:b0:c8:26:5c:56:fa:
a8:28:98:29:2d:d6:30:14:52:a8:e7:dd:36:58:e7:
b9:b3:f4:60:c8:1f:a8:db:78:6d:45:fe:01:47:6f:
14:8b:e0:13:2f:0a:f2:e1:07:71:25:e5:b3:53:5d:
71:45:87:3b:ae:7f:41:ab:35:e1:02:b5:fd:96:c7:
fc:3e:42:bb:de:21:2b:f1:39:e9:2b:b2:62:52:05:
87:36:f0:0c:8d:62:cf:9e:7f:7b:49:89:62:46:32:
4f:ba:02:e8:a5:c3:bb:97:35:4e:47:65:94:c5:c1:
c8:c5:9c:d6:45:c7:7e:63:47:cf:31:13:86:0c:7c:
eb:19:19:7d:9d:46:94:53:d4:d6:d3:ad:4c:b2:92:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:48:35:68:72:BD:A2:A6:AF:79:EC:F5:3B:F9:3B:A7:5D:2A:41:9F
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4f:d3:b9:6a:8e:1d:00:d4:68:7c:65:2c:22:97:8c:fc:c1:
c3:fa:04:83:3d:3e:3d:78:0e:f0:e0:dd:07:8b:31:b7:e4:d7:
0d:ad:f0:1f:75:b8:a0:fa:be:78:50:b3:74:c4:76:13:fc:5b:
6e:45:f8:3c:c6:b1:d3:70:dd:37:34:ce:2f:48:4a:57:6b:a1:
73:af:8e:bc:de:5e:92:6a:4d:5c:8f:2b:a7:b8:0e:0b:82:eb:
14:be:30:30:4d:4b:07:cb:a7:0c:e0:72:db:6f:4c:c2:09:f0:
2b:cc:20:52:68:e0:b0:77:6d:31:90:6d:ea:a2:6d:7a:ea:1b:
e9:de:96:36:71:f4:58:41:72:68:0b:60:33:e3:9e:5a:e9:40:
54:e9:42:78:52:45:24:cd:4a:bf:e8:3c:1b:cf:a4:11:27:0f:
19:a2:ad:04:e5:10:f6:41:87:2a:69:6f:07:0e:a2:52:40:c0:
18:37:9e:09:14:5c:f3:6c:15:79:af:5f:17:b6:58:58:84:eb:
da:31:bd:6c:c6:81:b8:70:d0:94:6e:1e:11:2a:b3:b1:84:1b:
76:e8:3d:1f:f8:a1:02:70:f3:86:54:58:6a:8d:b3:ce:a4:0c:
d7:b3:b1:31:19:31:aa:39:18:a7:63:40:37:e5:a5:d0:e5:a5:
30:74:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:30:38 2025 by rpki-client