Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: arKWJ7voohHI98AuVQdcQypZF8rG9HgW/WaV4h8J9jg=
Subject key identifier: B3:53:76:B3:CB:95:97:3F:CB:4B:8A:05:A1:4E:9A:27:6C:53:D6:DD
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019A70A4F932A289A7C52E2840DF051DEE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:50 +0000
Manifest this update: Tue 11 Nov 2025 02:00:50 +0000
Manifest next update: Wed 12 Nov 2025 02:00:50 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: 8m9X1dC8+Y7gjYWd6RIJj8yYXb/7urYkJXy1jOrBZfE=)
2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f9:32:a2:89:a7:c5:2e:28:40:df:05:1d:ee:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Nov 11 02:00:50 2025 GMT
Not After : Nov 12 02:00:50 2025 GMT
Subject: CN=b35376b3cb95973fcb4b8a05a14e9a276c53d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:ee:9e:09:89:7a:4c:1c:49:6c:52:cc:82:
10:fc:db:8f:59:7d:c3:87:d6:85:5a:a8:f0:bb:3b:
4d:be:e1:b7:3c:6e:d6:4c:b9:1d:ed:f8:4d:54:f4:
25:a6:57:de:0e:ce:41:e4:71:3f:58:cf:0f:bd:3a:
4b:4f:da:15:27:25:11:4c:fb:a0:27:ee:d5:f7:dd:
f9:e6:4e:fb:ce:8d:d2:86:73:7e:19:b2:97:34:37:
3b:ec:c3:63:1c:eb:76:0b:53:98:42:77:4b:73:15:
f5:37:21:e6:b5:00:5f:b2:d6:79:12:74:6b:8a:57:
b8:ca:a7:f5:2f:ec:f1:91:51:d4:aa:7a:5b:ee:50:
05:4a:c8:3f:51:24:e7:54:27:27:79:a3:f9:88:b3:
62:7e:7a:b8:52:28:2c:02:52:22:7b:62:a9:37:89:
b5:fb:de:ee:7f:5b:ce:e8:2c:88:12:e5:c6:25:6b:
18:0b:de:51:ae:94:aa:c3:5f:b5:c0:04:6a:05:66:
ac:e9:e1:77:b9:1c:51:4f:95:2f:a5:98:d9:6b:f7:
39:b1:81:b8:6a:f1:9e:4f:38:e8:b3:5b:71:23:f2:
ba:10:2e:07:13:d1:31:f7:72:74:49:ed:6b:e1:fd:
7f:a2:71:cb:d7:fe:01:b3:2b:4b:cb:3b:3d:fd:f8:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:76:B3:CB:95:97:3F:CB:4B:8A:05:A1:4E:9A:27:6C:53:D6:DD
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9f:e4:9a:4f:f2:52:67:c3:5b:49:a9:cf:31:50:8b:a2:93:
a5:6f:c2:c3:6c:4e:71:d4:9e:33:e5:00:f7:03:67:1d:f0:76:
3f:5c:88:69:a6:6c:43:4f:9f:9e:24:f7:6d:e9:57:79:d7:b5:
8c:3a:c4:9c:05:6c:cc:a6:11:aa:f6:f0:68:c3:54:6e:a7:93:
4d:b7:6a:a5:9d:18:17:27:fe:6d:6b:54:4b:b1:1c:f8:78:bc:
0c:e3:76:72:ae:64:55:ed:ef:6b:35:44:81:17:71:92:86:0c:
ba:25:df:64:23:7d:44:1b:cf:2f:98:b7:26:87:e7:d7:df:84:
5b:d4:c1:c4:c4:22:ab:7a:ed:84:3d:a6:14:44:b9:3a:79:9e:
dc:f6:44:ab:39:04:65:b3:c0:55:90:0c:f2:38:99:9a:08:ab:
2b:28:54:74:ee:81:02:32:d2:f6:9e:a2:cf:07:50:e5:91:e3:
be:77:1b:39:34:58:8e:f3:c7:e2:69:1e:2d:37:ec:b0:ec:8e:
73:2a:63:0b:e1:20:77:9e:02:ce:27:7e:a1:2d:59:06:44:ea:
16:90:22:67:0c:92:a4:49:b3:3d:b1:bc:ce:b6:60:87:be:10:
bb:19:40:ab:df:bc:92:42:21:2d:d4:16:f6:f9:07:4d:32:ae:
b2:93:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:47 2025 by rpki-client