Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: WdekM9oe0FglsyO1MT/4bWV6+BAJ7KLlt0eTsRt3C9A=
Subject key identifier: 66:63:D6:FF:80:77:A0:C0:C7:C2:6A:F4:0D:44:81:1B:D0:FB:40:77
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019A676B43B0E560D4D23BBD4B004374F6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0A9E
Signing time: Sun 09 Nov 2025 07:01:14 +0000
Manifest this update: Sun 09 Nov 2025 07:01:14 +0000
Manifest next update: Mon 10 Nov 2025 07:01:14 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: NGScTHj37B4H2cbBhlWAxbrvPS3RlMx1nz1XYB22W7w=)
2: LaWeTZCAr-HUhZ4sGwn2UEM8UYc.roa (hash: B2sPWyas3UEyy6EkjCL1gILAFxuUkQj9iQf0YdV0Fw4=)
3: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:67:6b:43:b0:e5:60:d4:d2:3b:bd:4b:00:43:74:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Nov 9 07:01:14 2025 GMT
Not After : Nov 10 07:01:14 2025 GMT
Subject: CN=6663d6ff8077a0c0c7c26af40d44811bd0fb4077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:ec:7b:72:14:74:18:db:0a:2b:35:f3:bb:
8a:1f:57:02:32:02:8e:65:54:49:ed:e4:4b:7a:46:
58:9d:e3:12:dc:54:be:6b:42:df:4b:40:a9:c6:00:
9d:f2:d6:f2:74:1f:34:c2:db:6c:bf:ff:da:a8:a0:
90:8b:06:57:91:08:f8:eb:91:0c:41:b2:67:d2:0c:
0c:5e:53:a2:00:80:2d:73:a1:b6:1f:7a:2f:9a:92:
13:46:7f:d1:be:b1:85:0d:de:fd:e6:5b:f2:a5:cd:
db:59:a0:06:c7:7a:01:75:bb:c7:29:06:e2:4b:cb:
59:1f:a3:81:a8:0b:6c:2b:50:61:88:b8:d3:53:a1:
6f:f2:37:34:89:aa:4a:f5:49:98:62:d8:9f:f0:3e:
f0:53:28:96:36:dd:43:bc:db:ac:17:26:11:4c:cb:
2e:6b:99:3b:0a:11:53:fb:c0:9b:85:4c:f3:15:64:
e7:30:08:78:b9:cb:3f:60:c9:fa:5f:67:a3:49:c4:
bf:3d:89:25:8a:6f:18:da:e3:03:d6:83:b3:c3:02:
7b:f2:61:c2:d0:c9:7b:ab:9d:44:b0:0b:d2:ea:5e:
93:76:3f:ba:5c:bc:27:74:16:e3:9e:d6:8d:10:92:
da:8b:f4:1f:08:19:5e:5f:80:a3:0b:68:3f:85:84:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:63:D6:FF:80:77:A0:C0:C7:C2:6A:F4:0D:44:81:1B:D0:FB:40:77
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7f:12:c7:16:ec:1d:4b:d1:f2:00:cc:d6:d1:ac:38:90:b4:
db:b9:e4:64:15:22:e6:26:7d:93:2c:3e:b7:e6:c4:1d:c0:62:
dc:40:ca:3e:54:ca:fd:8e:a6:43:21:5d:07:66:88:cc:fb:5d:
60:80:95:06:4d:8a:42:58:c3:a7:1b:b2:06:32:08:65:47:01:
2f:0a:c0:30:d0:fb:a2:82:fe:33:69:1a:dd:fd:ff:7a:f6:25:
58:2b:d7:58:99:6d:db:b4:a5:c0:df:70:77:d4:97:8a:89:f0:
97:fa:6d:4f:08:2c:1b:f3:98:ad:fc:f3:61:35:79:82:fb:23:
17:8c:09:a9:6d:ed:5d:8c:f6:8c:25:11:32:c5:18:31:0b:53:
81:63:29:de:a3:a7:8e:ff:52:4e:c3:5f:1b:6b:80:d6:45:77:
ce:7c:85:35:5f:c6:9a:01:2a:d4:f7:1c:d2:aa:d9:7b:28:49:
fe:e0:f7:b6:e7:39:ed:92:49:d4:ff:59:20:57:c0:6a:61:29:
0f:d7:1b:94:b9:1e:82:31:9d:1a:a8:fd:0d:ff:61:33:63:70:
b2:f9:fb:1e:e3:c9:1c:56:0f:d5:a6:48:db:23:00:d3:bf:d5:
96:f6:9f:6d:25:55:7d:52:01:0d:be:1a:68:48:a8:9c:29:49:
07:82:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 09:41:56 2025 by rpki-client