Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
File: DmmmfUshWj8x_EYvDqU074P471c.mft (raw, json)
Hash identifier: 5O1brFo3MZkywsXt+b5AcQi7fuMwEqR5ebNSZ+NP4bQ=
Subject key identifier: 8C:B8:02:50:E1:54:71:C4:1D:2A:ED:20:12:A4:DB:97:BF:E4:64:E3
Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Certificate serial: 019A2CD62E66BB0F5D29C29A4C7B5D5FEA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
Manifest number: 091C
Signing time: Tue 28 Oct 2025 22:00:25 +0000
Manifest this update: Tue 28 Oct 2025 22:00:25 +0000
Manifest next update: Wed 29 Oct 2025 22:00:25 +0000
Files and hashes: 1: 5n6-nw8FoTNYcZ9aENZQUU_ruI0.roa (hash: g9NrBLOfxYZz72cswyRQrtWjdRUQegpck7SaMHmrvjs=)
2: DmmmfUshWj8x_EYvDqU074P471c.crl (hash: INAWlO9NtJP+RADZJc0fR7U3uHXxhi3WooPmwDXci7U=)
3: O4fx24MkcOun7eOMuF45FXz1Rp4.roa (hash: Oql3zSLN2xRRYzfupmVInGA+80An5sqYygQF4rxwNdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:d6:2e:66:bb:0f:5d:29:c2:9a:4c:7b:5d:5f:ea:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Validity
Not Before: Oct 28 22:00:25 2025 GMT
Not After : Oct 29 22:00:25 2025 GMT
Subject: CN=8cb80250e15471c41d2aed2012a4db97bfe464e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:00:bc:4a:2e:f6:cf:f3:74:a3:36:9b:2f:
46:2e:6f:5f:cf:3a:24:81:96:67:c9:97:4c:e5:d2:
71:6e:87:9e:94:95:64:c3:78:f5:ef:f4:da:74:dc:
da:27:d4:69:61:ed:e4:48:d5:22:95:50:b1:9b:31:
b5:09:52:9b:96:a3:fd:3f:4d:2b:c5:a9:85:ba:7a:
46:5f:05:34:6b:6c:bb:cf:c9:41:6d:f6:6c:5e:4b:
df:f9:5b:bc:ba:5d:31:0a:ac:93:c8:0d:01:e2:6f:
f8:18:a7:0d:be:49:ed:3f:b2:15:a5:60:a1:72:4a:
96:eb:2c:d4:a6:fe:ee:27:7f:bb:70:53:42:84:89:
ff:20:14:d5:60:20:0c:1e:5e:d0:47:18:c6:46:9e:
ee:39:80:c9:d0:73:0f:64:c4:2e:e1:15:63:2b:97:
2e:3f:de:ad:1f:43:78:c9:e5:cc:66:6c:d0:72:9e:
64:e2:0f:d7:c3:b1:a5:f5:0c:79:ec:ee:6a:83:6a:
f3:af:d2:21:dd:3a:4d:bd:f2:1d:7b:06:2c:cc:f5:
0e:f5:05:82:c4:75:d6:af:21:55:8f:db:2f:14:43:
a2:09:b9:63:fc:6e:ac:29:39:24:fc:0d:68:8f:44:
a5:18:df:89:ed:36:a1:14:f7:97:43:fe:1f:35:5b:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B8:02:50:E1:54:71:C4:1D:2A:ED:20:12:A4:DB:97:BF:E4:64:E3
X509v3 Authority Key Identifier:
keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:53:89:bc:24:ff:a1:f2:76:b4:06:69:47:ab:8a:c3:f0:c3:
15:0e:7c:67:54:3e:05:b3:25:61:5a:5d:7b:88:ce:cd:cb:60:
ed:63:14:ce:18:b0:39:60:27:67:ef:bf:da:4c:ad:36:5d:b2:
cc:24:77:64:a8:b1:6f:ef:e5:95:86:76:4a:f0:e0:1b:60:d0:
5d:9b:c6:a2:c1:13:d1:fa:5a:ba:d5:5e:84:24:b7:e6:39:f2:
61:52:6a:09:12:2c:3b:b6:d1:75:8c:ac:3e:86:0a:e8:3a:db:
bd:31:ed:4b:74:ea:65:6b:d8:98:b7:76:f3:e4:2f:09:2e:0e:
cf:cd:23:63:02:b5:b7:23:a6:18:a2:f4:98:26:75:19:3d:3f:
1d:2e:c3:b4:59:04:17:82:7d:f5:3e:89:a0:f5:27:83:1e:a5:
4c:02:8b:d1:af:f4:6d:05:56:63:da:23:e6:03:26:fe:e0:1b:
04:8d:a4:93:ab:25:72:18:86:51:5b:16:49:61:8e:cb:8d:eb:
24:4f:f3:0f:fd:e4:8e:73:f7:90:c6:18:c7:b4:e1:ee:9a:9e:
93:9b:5a:ad:18:94:12:46:92:6e:d3:cb:85:32:42:6e:46:35:
11:00:f3:54:29:cb:f4:44:c8:31:bc:ee:3a:c4:65:fd:f9:6a:
21:07:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:50:52 2025 by rpki-client