Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
File: dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json)
Hash identifier: XG87swuUOzhr5pfOJoLCcNUOL9xb7HAgX9pF1pRXNp8=
Subject key identifier: CA:61:AB:6A:3E:5F:2C:14:28:09:98:7A:2D:D2:4E:F8:13:29:72:79
Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
Certificate issuer: /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Certificate serial: 019A7149DC41C918DF07491FF8AD193682E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: EbZ-PzExvsrKZ1aOLdbMth19YQY.roa (hash: Y23B6h9Jehv4hPRBbE1Q/MgzAwC8F0dy1/k/s/bejkY=)
2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: ewUDjc+dLUR0nYX2ZyQ6hvvAjOIwGcvBmC+FnYk7o80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:dc:41:c9:18:df:07:49:1f:f8:ad:19:36:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=ca61ab6a3e5f2c142809987a2dd24ef813297279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:9e:33:a6:c6:5d:2b:56:1b:b6:0f:5a:a5:
e7:b3:dd:22:39:3e:79:ab:67:58:a9:00:d5:ce:bc:
69:f2:c7:df:35:6a:79:93:40:47:22:38:f0:80:12:
2c:61:5f:0c:6f:da:29:1d:42:d5:81:e5:74:10:83:
7e:17:45:61:98:33:cb:fe:0b:68:bc:97:b7:6f:10:
9c:ec:ac:06:e6:44:cb:9d:ee:30:f2:8a:8c:8e:87:
4d:13:33:7a:ad:2c:6b:5d:32:dc:95:ed:ed:39:ee:
4b:6f:04:d3:ad:27:0f:42:23:67:28:8b:be:5a:5b:
1b:98:68:4a:61:2b:8b:ea:37:4c:a0:b8:bf:24:05:
5b:48:19:01:3f:5e:3c:3f:0b:e5:7d:f9:50:c3:d5:
95:f8:47:4b:15:2b:33:a4:5c:c0:b7:12:9f:ea:2f:
fd:13:87:29:3f:30:a9:f9:ed:1f:88:56:36:5c:da:
a6:88:eb:54:2f:37:43:93:a5:42:63:fa:9b:5d:b9:
e1:70:f0:55:0d:71:e9:38:6a:b2:ab:b9:8b:3f:9d:
05:83:0f:d2:6c:68:85:f2:97:0e:9e:d0:71:fe:09:
e5:62:0f:21:33:29:da:79:21:1b:12:af:9a:48:98:
64:9c:00:b8:94:b3:71:82:99:f9:e3:90:7c:4c:9c:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:AB:6A:3E:5F:2C:14:28:09:98:7A:2D:D2:4E:F8:13:29:72:79
X509v3 Authority Key Identifier:
keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e3:56:93:ca:3a:b5:7a:ce:63:89:68:d9:31:f5:c8:0c:d0:
50:78:7e:8c:4b:1d:c2:23:47:97:44:0c:9d:c4:9d:28:87:90:
0a:a4:12:25:9e:60:4a:d5:2d:c3:e7:c9:f5:eb:ec:58:dd:1f:
58:00:62:3a:50:a5:01:2c:a6:85:f7:9b:fc:6c:f4:f5:ef:15:
b7:2b:32:6d:26:4d:2a:0e:4f:6c:59:a1:33:77:25:95:f9:87:
f0:98:d4:3b:78:2d:a3:e8:05:65:1a:92:d7:df:14:78:b5:d3:
2a:16:12:7b:37:6e:5f:5b:50:b2:cc:42:d5:68:ec:87:f7:e7:
a4:94:50:90:bf:b9:4e:9c:0c:eb:29:ca:1a:ea:6a:51:88:96:
76:6f:40:96:f8:74:a4:e9:73:f7:26:5e:dd:27:48:ef:fd:cf:
23:99:20:2a:5e:e3:8f:1c:e5:eb:de:7d:5a:f0:bf:e2:2b:b2:
17:13:cf:cf:ea:55:31:78:83:07:33:68:69:36:c6:ed:23:37:
89:80:ea:10:c4:28:ee:74:e8:db:a7:1c:52:ab:12:db:22:ab:
fe:ca:44:9c:76:af:59:95:61:8b:2d:c5:2e:a2:0b:23:4e:0f:
5d:e2:e6:45:a2:78:83:4d:2f:89:17:b3:98:97:31:7b:24:be:
48:d3:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:45 2025 by rpki-client