Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: O59XhtWYj+MJhmUe+R3ii1+kCbkNOQ3zCWhBjc91oJU=
Subject key identifier: 4F:D9:C7:E6:D4:56:B7:85:EB:47:71:92:BB:BE:36:38:E0:29:CA:C0
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019A72937C29DA0F90FD3C445B65D198D7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 1048
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: rb1P4BAVJatHZTeK7DTWzKdfp4sak6y8trCITBWH/bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7c:29:da:0f:90:fd:3c:44:5b:65:d1:98:d7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=4fd9c7e6d456b785eb477192bbbe3638e029cac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:85:89:a2:3e:df:64:af:69:28:55:f1:80:
83:78:ae:a6:53:31:d3:5c:ce:94:ad:35:15:ad:a5:
73:d6:9c:b9:8d:c9:63:bd:29:2b:b0:e1:9b:fc:31:
db:a4:ff:74:66:ca:07:4f:12:76:d9:ca:c5:e7:65:
96:0d:2f:9d:e9:e3:6e:bd:d0:c8:87:c1:a1:9d:1e:
55:4e:11:06:37:2b:89:46:dd:a6:9d:aa:59:1c:fb:
59:78:db:9d:69:06:5f:b2:97:51:e4:b6:90:50:94:
82:39:78:85:21:e0:1c:c7:93:0a:a9:4d:34:70:99:
c3:c9:8e:01:79:b5:33:b9:ab:9e:18:de:a2:d6:df:
1d:52:d9:be:36:6d:05:be:d9:20:e0:92:a3:4d:a4:
0a:e3:79:44:0b:8c:d6:2a:bf:00:55:5a:d9:b8:35:
84:28:96:46:de:ad:21:d3:7c:4c:05:c4:95:82:d3:
2b:bf:cb:c0:5d:80:92:80:3e:62:29:d8:b5:d7:9f:
4a:9d:1c:d6:28:6c:a7:c5:ac:b1:22:b5:08:b8:0a:
2b:eb:ee:fd:85:89:2e:02:c2:83:f9:f5:39:0d:56:
b9:df:8e:5d:4e:a0:6c:21:63:9c:0c:15:c8:91:3b:
61:6e:8b:0c:bd:08:26:1b:4d:a2:89:bb:f2:79:ac:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D9:C7:E6:D4:56:B7:85:EB:47:71:92:BB:BE:36:38:E0:29:CA:C0
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:54:12:68:47:ce:18:73:6b:06:8d:b8:da:00:40:3e:75:76:
4e:2a:13:be:83:e2:ce:fe:f9:68:8d:db:74:d0:61:64:91:a2:
77:ca:4f:37:c6:e1:a5:d8:6c:7b:b4:11:b4:19:e9:3a:60:f0:
4a:72:2c:0d:03:8f:4a:20:b2:8f:e6:38:e5:3b:a7:8d:4d:05:
bc:4a:26:0d:2d:e8:be:09:0d:f4:44:14:71:31:f6:90:7a:28:
fb:5e:02:b8:9f:69:a9:61:00:a4:c8:68:b0:7a:4d:4a:e2:25:
06:a1:e8:6e:a6:89:3e:aa:2e:e2:db:52:f7:55:78:14:43:eb:
42:9f:07:57:da:23:96:28:4e:55:d7:db:38:df:14:a7:d4:ec:
10:cd:14:fa:78:73:db:e3:23:58:0d:07:e5:83:ad:56:c0:dc:
d3:ce:ce:9f:ed:b3:a7:19:1e:1c:36:67:61:b4:b4:55:75:1e:
3b:26:5d:10:fb:20:d2:2b:05:8b:bc:e6:08:3e:a0:78:74:a6:
b4:b8:f9:93:b4:f8:33:72:80:8a:33:a2:2a:ac:cd:dd:2c:0a:
ba:d7:5d:7c:7b:14:40:a0:65:e9:3a:5a:6f:fe:f8:37:06:9b:
f6:6d:8d:98:da:72:dc:33:5e:bd:b1:b4:a7:cf:e2:3a:35:96:
d1:20:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:01 2025 by rpki-client