Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier: cb4nCBFRbTPZnvXaxH68UI8TCkiJrtabx2Z5Xvu+bfk=
Subject key identifier: E1:5D:70:2A:F6:CE:BD:89:35:7B:E2:61:72:86:CB:A2:3C:0B:C8:8D
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial: 019A19187BDEA9434A2E25831D5D3C04BF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 02:00:26 +0000
Manifest this update: Sat 25 Oct 2025 02:00:26 +0000
Manifest next update: Sun 26 Oct 2025 02:00:26 +0000
Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: BkXPEFQb0/aS+LcTXa+vFQkKvAr3bAvaX9EXvLjpSgk=)
2: rG4uV5FpPy0fw9yTiKRJUxEEj4o.roa (hash: BaS8t7omCzvSgmaV1xikWxIAkO9HyfZ7kCUC9REWlSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:18:7b:de:a9:43:4a:2e:25:83:1d:5d:3c:04:bf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Validity
Not Before: Oct 25 02:00:26 2025 GMT
Not After : Oct 26 02:00:26 2025 GMT
Subject: CN=e15d702af6cebd89357be2617286cba23c0bc88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:ab:8b:7e:88:6b:ac:7e:b8:b2:68:1d:0c:
e6:93:9b:a8:4f:d7:29:6e:63:0b:5c:27:fb:5e:24:
b7:51:f7:3a:44:b2:01:c1:be:2e:6f:73:4c:35:70:
01:5e:5c:d7:7a:48:29:64:c1:b2:77:f6:30:00:08:
ae:55:98:3d:ca:5a:57:d4:e4:57:ea:e7:61:44:49:
72:31:ca:ea:75:9b:12:8d:81:31:1a:d4:7e:b9:7b:
b5:ea:c6:68:ab:6b:da:cf:fa:ab:56:c6:c5:49:79:
83:e1:0e:2b:5d:0c:28:8c:a7:e3:38:3a:5d:82:71:
1c:dc:67:50:c3:f5:3a:fd:1a:aa:36:b3:60:08:9b:
43:ba:09:04:7f:a5:69:88:75:6a:61:70:f4:94:5e:
3e:24:e7:6f:6b:2b:34:01:2f:15:9b:ab:0a:11:77:
2e:3c:67:b6:33:3a:cf:23:a3:a7:b5:00:d4:dd:6f:
88:35:d9:31:80:db:49:08:0a:2a:22:99:0c:20:8b:
70:36:73:49:d1:4a:c2:5f:6e:d5:a6:5b:2f:56:6d:
ee:8e:6e:79:d8:12:03:36:5a:03:fd:60:52:c7:2c:
50:a9:fc:18:f0:d7:ca:1b:52:34:31:0c:a2:5f:bf:
d0:d3:92:bf:24:76:53:be:f1:75:26:56:fa:c0:a3:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5D:70:2A:F6:CE:BD:89:35:7B:E2:61:72:86:CB:A2:3C:0B:C8:8D
X509v3 Authority Key Identifier:
keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e3:63:05:13:7e:fb:3f:d0:93:bd:0a:56:18:13:be:2a:bc:
52:61:50:0f:b3:2a:21:9d:19:e5:f8:b9:5c:24:e9:61:38:55:
5d:a3:a9:b8:3e:ff:ee:8b:7f:48:79:02:7b:25:f4:af:49:57:
2b:f0:b5:24:36:0a:eb:8c:fc:66:ca:bc:b0:96:53:21:51:38:
f8:af:30:1e:b9:b7:74:d0:f6:a8:67:23:b6:90:f7:23:fe:26:
39:6b:ee:6b:a8:32:9e:13:7c:5c:f6:ea:56:99:f1:df:3b:b8:
63:24:c1:e9:b8:76:3a:7b:44:13:69:c3:f3:b2:fb:53:9a:4d:
ae:e0:15:a5:f6:79:9d:b4:e9:2c:21:82:a4:0b:5c:79:c5:ce:
68:ac:bc:07:92:f1:af:ce:4b:0b:89:bc:94:8e:7a:a9:5d:9e:
78:db:c2:27:64:94:41:e3:c9:97:6a:af:2f:d6:9a:06:54:35:
e8:1c:12:37:c9:6e:f5:8f:b7:86:87:86:62:c5:f6:2a:4a:6b:
70:40:90:38:fc:52:94:d9:09:10:a6:f2:9f:76:25:02:1e:13:
ac:09:d0:9e:11:dc:63:4f:2e:2f:21:24:a5:2c:f5:3a:41:a2:
d0:41:52:2c:5b:ce:03:41:89:73:f5:b8:f2:45:92:38:b8:b2:
ea:be:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:21:13 2025 by rpki-client