Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier: h0tPscWbhu57Qtd+MmpXjKkpET4DMygH9AKrC/IG7tY=
Subject key identifier: CA:30:52:70:AA:A7:ED:83:AD:4B:A5:9B:DB:C8:62:8E:59:C1:62:CA
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 019A1E07D19D7DDC647BE73A7790FA79931C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number: 1393
Signing time: Sun 26 Oct 2025 01:00:20 +0000
Manifest this update: Sun 26 Oct 2025 01:00:20 +0000
Manifest next update: Mon 27 Oct 2025 01:00:20 +0000
Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: UIR9rNhw8S5KDp3uHkpfn4XG3YQzGrxaoqiKy8y/ltU=)
2: cnib18kOQCfp6lVhz4WmJc4Qscg.roa (hash: 29WsgPo6IrtJ1OC04nNW3KGjgpHd3XfgWJen7328b88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:d1:9d:7d:dc:64:7b:e7:3a:77:90:fa:79:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Oct 26 01:00:20 2025 GMT
Not After : Oct 27 01:00:20 2025 GMT
Subject: CN=ca305270aaa7ed83ad4ba59bdbc8628e59c162ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:a1:63:6c:34:a8:50:b4:b1:b5:40:bd:4f:
55:6d:80:60:d2:5c:a5:45:28:ca:36:64:00:e5:0b:
6a:38:2c:52:69:fa:5b:d4:68:cf:99:c1:9d:43:f7:
ed:c4:0b:b6:e9:8e:d1:83:d1:f7:d7:2d:b8:37:e7:
a3:a0:86:1d:a9:84:c9:2e:17:1f:47:92:96:bc:e5:
2c:e6:b3:16:db:16:69:5d:d2:3e:ba:84:ff:75:c7:
d4:78:f7:60:45:55:6e:3d:9b:00:03:ba:8a:5f:1f:
ea:90:aa:19:fd:03:76:d2:46:05:e0:89:05:0d:e6:
40:0c:15:57:dd:67:e4:76:c0:80:4b:69:19:ca:b5:
f0:9e:1c:aa:84:3a:41:93:6f:c7:8e:e4:26:b7:13:
89:dc:d1:d0:f8:f4:a5:ab:bd:2d:51:62:a3:c5:3a:
74:0c:7c:9a:05:8a:be:86:6d:55:12:ce:9c:b2:a9:
61:b0:21:e4:5a:70:f8:23:08:d8:de:a0:6c:6c:36:
1b:ee:a0:fe:b2:89:75:00:62:d6:7d:f1:ba:28:e5:
35:67:9a:04:2a:97:03:23:49:25:45:9a:6d:5d:9b:
63:32:d0:45:5b:ad:8e:8c:14:d7:14:37:ee:45:dd:
9e:74:57:ec:11:4c:ec:e7:1b:e5:25:a8:02:8f:87:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:30:52:70:AA:A7:ED:83:AD:4B:A5:9B:DB:C8:62:8E:59:C1:62:CA
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:16:89:3c:df:24:18:f0:2c:f9:12:cd:07:0b:2e:b2:91:62:
fe:4b:44:22:a6:16:d2:0c:d5:05:ec:b9:44:ee:ed:93:f0:d6:
80:2d:a9:c7:27:b2:d0:8b:46:ce:d6:bb:0d:7a:f7:8b:b0:20:
24:f0:8d:a7:61:3e:bd:6d:8d:b2:95:da:7d:a9:a5:2b:60:cf:
8a:5d:e7:c2:67:d3:3b:cb:99:a2:1b:c6:7f:82:7c:73:fd:22:
ea:0c:2b:8b:03:ff:26:ab:7c:ff:c0:c0:75:33:02:20:13:2a:
fe:69:4e:7c:64:fd:ab:0c:84:62:d5:ea:fe:e3:e8:15:0f:6c:
c3:0e:44:5e:d5:d8:ab:2d:4e:91:b1:c1:4b:97:02:b4:5c:12:
ef:e2:1b:ae:d6:b2:56:f0:94:6e:d2:26:3d:18:c2:9e:dc:f2:
4b:47:da:9c:32:56:06:78:6c:e8:1d:5e:4f:a7:99:5a:8e:d5:
a2:05:a6:41:76:16:9c:84:17:30:77:10:0f:81:9a:7e:7d:bd:
6a:df:14:f6:09:fa:70:e1:76:a6:a6:2d:a1:ba:c5:10:74:df:
6c:df:2b:5e:7a:42:9b:51:a8:ca:27:77:8a:92:4d:8c:48:6c:
2a:0e:4d:9e:05:42:22:4f:31:bf:a6:e8:8c:f2:74:74:1b:51:
76:ee:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:18 2025 by rpki-client