Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
File: DpFsLKNrUAlu4v5EuUUpwto8PsI.mft (raw, json)
Hash identifier: tTxUDd5Jw/NO7E5LIgrQ+5E2ufPeGXgi2mHx72bRcS4=
Subject key identifier: E1:F0:3D:82:AF:F9:33:5A:FD:83:80:83:2D:FC:19:50:19:7B:9A:AC
Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
Certificate issuer: /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Certificate serial: 019A7112F743B9F09382D866DD3A3DC90951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
Manifest number: 04A5
Signing time: Tue 11 Nov 2025 04:00:59 +0000
Manifest this update: Tue 11 Nov 2025 04:00:59 +0000
Manifest next update: Wed 12 Nov 2025 04:00:59 +0000
Files and hashes: 1: DpFsLKNrUAlu4v5EuUUpwto8PsI.crl (hash: 6gR3zKMOcrfyxLCCbzFXdlJmqbInwvhfp0mKHKc2Vbs=)
2: QGeFBaZMcPUbZlccMoyAnOzy3gE.roa (hash: 7YeLQ57g/FUFF/JvQDJhVLUE18/59LuhhMGoWNanM4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f7:43:b9:f0:93:82:d8:66:dd:3a:3d:c9:09:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Validity
Not Before: Nov 11 04:00:59 2025 GMT
Not After : Nov 12 04:00:59 2025 GMT
Subject: CN=e1f03d82aff9335afd8380832dfc1950197b9aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:27:ac:31:ef:7d:1b:d5:0d:04:91:2f:12:b5:
c4:bb:7e:8a:8c:13:9b:9b:64:8a:59:81:0d:2a:a8:
c9:b5:41:ce:c9:ce:5a:6e:f7:27:08:0f:06:7e:19:
96:83:b4:dc:22:61:8f:41:f8:94:03:7d:4b:4e:24:
9f:6d:35:34:39:78:5c:79:f6:3f:f4:01:0f:71:7f:
2f:9a:47:ff:82:67:e7:76:c9:49:10:9a:73:30:a1:
93:7f:2b:c1:04:b6:6c:11:90:5c:bd:26:a9:9a:92:
d7:36:ac:18:9a:04:5a:e6:16:45:0c:df:34:76:7b:
48:fc:1a:f5:ac:9b:da:76:e8:a7:37:de:57:c0:9f:
c7:ad:79:07:64:31:e0:78:d8:31:ce:d4:25:ab:3b:
33:58:11:42:b6:86:e8:39:24:bf:15:30:58:03:35:
a4:f5:87:d4:bf:54:21:0e:68:18:7c:30:59:70:d4:
fc:67:77:07:d2:1e:7a:df:e7:fe:59:36:b2:9b:6a:
42:b7:e9:21:08:f5:03:b3:b7:7a:42:59:5b:69:af:
da:db:ae:08:f9:85:46:89:f4:09:8e:b9:2f:25:47:
1f:12:84:5b:a4:70:20:ad:eb:02:da:8b:b6:e5:cc:
41:49:65:fe:7c:21:13:03:7b:b5:d9:27:01:6b:0d:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:3D:82:AF:F9:33:5A:FD:83:80:83:2D:FC:19:50:19:7B:9A:AC
X509v3 Authority Key Identifier:
keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:97:7e:f9:d2:26:08:0d:fc:ac:14:e7:94:42:9f:df:aa:
77:b9:f9:b2:78:5b:7d:65:2f:bc:b2:48:3d:76:0a:94:8b:2c:
f4:57:d7:e7:94:f2:06:fd:ae:cc:29:24:7f:4a:35:ff:56:5b:
05:05:6b:f2:2c:ce:0e:0d:b2:18:d2:97:5f:1f:45:09:93:8b:
1a:d2:c6:ec:e4:6a:e4:7c:b0:a1:ce:43:b3:03:ac:d5:e4:cd:
62:13:0e:22:f6:fb:76:dc:c9:be:26:86:7a:65:31:7c:3d:fd:
0f:d3:d1:5a:9b:33:1c:d2:0a:a1:79:20:4d:f2:fe:4e:a8:b9:
4e:24:bf:84:4b:76:f6:93:3e:b5:e0:4c:b9:01:80:74:77:b5:
42:f1:63:2f:d9:cd:17:75:07:93:5f:88:d4:22:32:7b:de:37:
34:5d:01:a6:b6:15:37:64:e3:7f:26:e3:13:4f:28:68:1d:58:
d5:3e:bd:97:fa:25:e1:b5:2d:4a:02:f0:cd:b4:47:36:84:e3:
5d:de:d7:91:4b:63:6d:6e:bb:fc:06:c8:9f:ef:63:a5:b5:0c:
79:a8:51:16:f5:a5:21:47:f4:82:ef:27:2e:02:44:a9:8b:91:
3d:02:8d:7e:aa:e4:8d:d6:a5:2b:b2:79:85:1f:93:c8:aa:62:
87:49:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:15 2025 by rpki-client