Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: z2XivL8DC5aux56yqjAHpBOAhS+9pFWzRFtQokc8RBI=
Subject key identifier: 63:7C:5E:40:62:E8:D3:3A:D7:C6:D2:B3:1E:C6:4E:77:71:94:F7:28
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 019A7112E9215244F3AAAE1BD24888D1D785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:00:55 +0000
Manifest this update: Tue 11 Nov 2025 04:00:55 +0000
Manifest next update: Wed 12 Nov 2025 04:00:55 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: FxSknOxaGjreIhRTe2umdxEBRBAx0+Os+LZ/Ibu+RQo=)
2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e9:21:52:44:f3:aa:ae:1b:d2:48:88:d1:d7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Nov 11 04:00:55 2025 GMT
Not After : Nov 12 04:00:55 2025 GMT
Subject: CN=637c5e4062e8d33ad7c6d2b31ec64e777194f728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:c9:d8:08:88:8f:2d:b7:e7:65:07:f9:53:
1b:6f:43:8a:40:81:76:82:e4:1a:2a:ef:9f:14:25:
56:54:1e:3a:f3:71:55:ca:fb:e8:88:4d:d4:aa:e8:
9b:f6:16:8e:25:f4:08:5d:a3:e3:04:66:eb:98:d0:
c9:03:31:4c:8c:93:e6:e1:e2:cb:70:c5:dd:70:6c:
53:db:ce:cf:a9:43:61:46:91:13:5f:cc:c2:5f:16:
cd:f0:26:65:13:73:91:bb:cf:f4:f3:6a:bc:50:b8:
51:2f:a4:67:5e:f2:df:59:ce:cb:28:a9:29:48:9f:
a2:ac:32:01:b6:d4:5a:13:0d:bc:b9:6e:f0:24:68:
11:38:e5:bf:cd:8a:04:5c:76:ab:a8:55:f5:7b:e3:
13:2c:82:fa:07:aa:fd:24:13:c4:99:52:30:60:aa:
33:97:03:61:10:29:3e:a9:88:0f:4d:2e:71:b9:d9:
5d:3e:d3:13:84:8d:19:bd:50:96:12:5a:6e:57:ff:
b3:b5:29:da:c0:17:81:e1:cc:cd:b2:a1:40:bc:c3:
ed:0f:c7:f0:0b:02:ca:99:08:fe:48:d1:85:f2:43:
a3:c3:5e:65:e3:66:7b:11:c7:b9:c8:9d:0e:f3:e6:
9b:07:eb:09:6c:36:31:70:d1:1e:b7:1e:98:30:75:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7C:5E:40:62:E8:D3:3A:D7:C6:D2:B3:1E:C6:4E:77:71:94:F7:28
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:78:f6:e7:ca:1b:d8:03:41:9c:60:05:45:15:e4:bf:ab:
b8:99:44:f9:36:52:b0:1d:72:65:26:39:26:f5:32:13:7b:10:
79:ba:b8:45:32:7e:61:de:c0:9d:1e:2f:b0:92:0d:d2:e2:8c:
e7:95:ab:da:b1:2f:ce:05:4f:1e:8a:02:9a:b8:0d:6d:68:5b:
60:99:9a:78:c1:91:20:c1:b5:8e:73:09:c3:6d:8f:2a:21:77:
26:9a:e8:31:15:a9:af:a7:99:40:22:ed:e4:89:bd:b5:0c:e7:
2f:be:cc:80:64:be:14:79:ea:cc:b3:2d:0b:13:e8:4d:29:6f:
ed:24:c7:81:79:02:1a:47:44:aa:a9:d8:06:89:42:d8:e8:ac:
8f:51:47:13:f0:11:6d:0d:59:63:6e:ae:4f:1c:9d:4e:e7:ed:
09:d4:b2:c4:23:7e:13:54:5a:18:f7:f1:b7:93:5c:96:79:ba:
cf:0c:30:d5:23:e4:9f:47:29:95:49:2c:17:b5:2b:26:d0:9e:
9b:62:0f:d0:a4:b0:c1:03:97:bf:06:ac:ed:14:5f:d5:70:50:
91:f9:14:6f:72:0c:f3:9f:83:72:9f:5a:f1:c5:f3:4e:9a:ed:
7f:b4:5c:75:cf:9c:9c:46:fb:a6:82:5b:60:f7:9c:c2:37:62:
58:d3:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:50 2025 by rpki-client