Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: FVQb7Gr7ngbaYf1AXZkhrfm85AkEpolhdBXmBc5lCMk=
Subject key identifier: 87:37:2A:CC:19:10:AA:87:68:FE:A9:96:13:CD:9E:80:32:E8:47:6D
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 019A28560E3F3D3F5F030F0C40296E14B9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 06CC
Signing time: Tue 28 Oct 2025 01:01:59 +0000
Manifest this update: Tue 28 Oct 2025 01:01:59 +0000
Manifest next update: Wed 29 Oct 2025 01:01:59 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: Z4rQRUWfWn5pFk7Ki79EomD5F4mUWiLbVD0uh9xM8sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:56:0e:3f:3d:3f:5f:03:0f:0c:40:29:6e:14:b9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Oct 28 01:01:59 2025 GMT
Not After : Oct 29 01:01:59 2025 GMT
Subject: CN=87372acc1910aa8768fea99613cd9e8032e8476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:ca:e1:a8:fc:b1:43:25:b7:fb:eb:21:88:
e4:30:9a:64:1f:93:44:7c:9a:d7:e1:e2:32:b6:18:
0e:da:ff:da:b1:a4:d4:0d:bf:08:3c:21:ad:23:f2:
90:92:9d:4a:fe:ff:f5:58:dc:6c:78:d0:84:7d:d5:
91:65:c6:9c:47:54:ae:53:b5:41:40:b8:9a:ee:cd:
63:80:88:dc:0d:b6:ab:85:f9:2e:0d:b7:7e:78:58:
eb:96:ed:f9:e9:ce:8c:a2:01:59:3d:78:99:82:42:
24:3c:4a:77:d0:b9:58:22:08:32:1a:92:2a:74:83:
01:87:45:90:8a:37:57:76:cc:40:d4:d8:24:6b:67:
33:9e:e2:b2:ac:13:c7:52:95:70:fe:1d:f4:3f:e6:
f5:fb:da:b9:1e:99:e9:2f:63:7e:47:d6:d4:cb:f9:
53:35:1c:43:82:5b:ef:16:0d:07:a6:a0:ea:89:a6:
a9:3e:ae:44:e7:44:16:95:cc:91:06:72:b1:5c:03:
cf:f5:5e:4a:d2:59:d8:26:dd:f0:08:6a:ce:cc:11:
e4:bd:04:ee:2f:5f:12:08:07:89:e7:9b:41:35:bd:
ba:1e:c1:2b:2b:10:9d:dc:33:33:3b:f6:56:f3:97:
4d:0d:b1:e9:f4:57:e8:f0:ee:6a:4f:b9:76:87:10:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:2A:CC:19:10:AA:87:68:FE:A9:96:13:CD:9E:80:32:E8:47:6D
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:89:ad:f6:47:25:70:5a:e7:69:7f:8e:6b:81:02:72:95:7d:
2c:ca:3c:c1:68:78:42:f4:52:1d:08:9f:71:db:fa:69:d0:21:
b9:fe:ba:d2:26:cf:82:de:a4:74:ee:bf:a8:0a:74:b4:2e:a1:
dc:33:ce:1b:71:50:f7:aa:f8:5a:1d:df:8e:c1:b3:b9:77:92:
49:e7:42:57:32:9a:9b:3b:d2:ec:b5:fd:ec:ef:72:28:1e:7a:
7e:01:19:5e:27:28:ee:1a:da:a3:fe:84:39:db:7b:0b:35:e5:
bf:2e:d3:39:a1:de:83:4c:6b:07:af:00:4c:85:38:e0:a2:c2:
fd:20:75:79:0a:84:e5:9c:7b:6d:b8:70:16:17:42:bc:d3:68:
40:f2:41:57:e7:03:66:98:be:37:b9:ca:82:1d:96:24:69:76:
1d:4e:53:69:4d:ae:b3:75:cc:b7:91:bd:ec:e2:32:a6:76:1b:
98:f8:31:db:d0:fe:d9:f5:64:46:e7:fa:d8:4e:b0:74:37:28:
ec:d6:94:35:8e:a7:ad:54:31:e9:c1:ed:ab:96:78:15:0d:fb:
51:b8:39:66:e0:3c:c5:90:4f:df:e5:a6:b5:9c:83:c7:21:8c:
cc:c6:fb:0a:77:cd:ca:2a:09:51:ca:1d:1a:83:01:35:ec:42:
b1:c2:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:07:56 2025 by rpki-client