Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: yUsRXzGc4xhXk04m2DBHiEUggYBbwUam6C43PDRR2o8=
Subject key identifier: 2F:B2:1A:70:4F:9F:9B:30:6F:46:F8:9C:FD:BA:87:83:1D:C5:A6:AB
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 019A73A6AB28AB4A90AAF32E6670A2E6E037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 111B
Signing time: Tue 11 Nov 2025 16:01:33 +0000
Manifest this update: Tue 11 Nov 2025 16:01:33 +0000
Manifest next update: Wed 12 Nov 2025 16:01:33 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: Fn2DKEd7ttbVYyv+JTK860u90zctMgpcRlAW1XqKE4I=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:ab:28:ab:4a:90:aa:f3:2e:66:70:a2:e6:e0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Nov 11 16:01:33 2025 GMT
Not After : Nov 12 16:01:33 2025 GMT
Subject: CN=2fb21a704f9f9b306f46f89cfdba87831dc5a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:a7:9d:38:ff:ee:8b:e6:82:46:65:a7:58:
56:2d:0f:35:5b:6c:c8:4a:56:dc:dc:b8:00:6d:76:
e1:b5:2f:98:54:92:19:57:19:ed:cd:9f:a2:48:e7:
99:84:2e:dd:60:a7:6b:99:e9:c3:bd:7f:2d:8b:45:
80:55:ea:2f:cd:86:32:b5:ce:37:10:9c:20:d9:d2:
1c:5f:3c:94:09:b2:7e:f4:e6:c6:a4:d4:c4:14:5e:
d8:61:19:62:c0:7c:2d:b9:63:85:e4:08:16:b2:bc:
91:f7:24:20:b2:c8:03:9e:68:94:ad:ac:e2:44:f5:
9c:68:59:9f:f4:8a:9e:8a:ba:9c:f9:3d:d7:d8:38:
ff:a7:74:9f:18:8a:68:b9:4e:aa:d4:14:49:89:8d:
69:05:a2:28:bf:9c:3b:80:d7:74:6a:92:93:2a:f7:
ca:ae:76:e2:84:48:a4:47:29:9f:aa:f6:23:51:ab:
b8:37:6e:38:67:87:9e:bd:29:d4:f3:32:31:87:cf:
2c:13:c3:5b:59:a4:22:be:08:7a:2d:76:d9:5c:f8:
70:0a:ce:a6:48:a6:81:fd:fb:da:65:07:ae:06:23:
e0:51:7d:2f:93:a3:7a:9d:28:64:67:cb:32:e4:ab:
a6:e1:09:12:61:51:ea:e0:6f:bb:d5:09:59:11:7a:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B2:1A:70:4F:9F:9B:30:6F:46:F8:9C:FD:BA:87:83:1D:C5:A6:AB
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5e:b9:42:fb:eb:ec:02:ec:81:a6:95:50:9b:e0:80:46:11:
cd:5f:31:f6:0e:dc:f6:92:b3:ab:c6:d5:2d:04:38:c7:12:f6:
c7:c8:5c:cf:6f:22:3d:04:5e:b6:f5:26:c9:e4:ad:a7:29:5b:
15:3c:76:ef:e1:da:f3:8f:33:10:6b:59:62:f2:19:63:80:3a:
53:ec:ff:48:8f:94:b7:f4:75:51:89:dd:f0:c0:8f:d2:11:76:
77:63:3e:cd:41:cd:08:15:9c:7c:9a:b2:7e:1d:01:19:8b:6e:
c3:87:6e:f5:30:e9:76:88:1e:39:d0:87:07:34:22:6f:ac:28:
4d:90:57:03:a0:93:0a:4e:a2:e9:82:df:c2:e1:95:25:a7:20:
79:50:be:2d:1e:f4:2b:51:e2:c0:50:60:8b:9c:be:51:8a:0b:
d8:c5:32:e2:d9:1e:0a:0e:9a:d2:24:71:88:8a:2e:72:68:4f:
2a:6d:ca:b1:b6:e3:ed:34:ae:88:28:bf:65:d9:d5:05:1c:6d:
36:07:c3:f4:1d:98:81:42:80:31:01:5b:7d:ff:ae:e9:c3:b1:
4a:8d:65:05:27:39:4a:e8:bc:ae:55:6d:af:26:0c:6a:94:56:
61:6b:ac:bb:bd:74:bb:9e:28:6f:cc:ef:0c:7b:9d:ba:6c:22:
dc:9e:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:13 2025 by rpki-client