Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: nq7vp2LgCNouuXtnzXbmOWXbKrJLI70myFfp4xx8HVE=
Subject key identifier: BD:19:F2:C7:C4:9D:06:89:1F:F9:62:BA:43:B5:45:12:01:88:3F:1F
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019A71EE6900369AA5ACD2843097F2359EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 0689
Signing time: Tue 11 Nov 2025 08:00:40 +0000
Manifest this update: Tue 11 Nov 2025 08:00:40 +0000
Manifest next update: Wed 12 Nov 2025 08:00:40 +0000
Files and hashes: 1: 1-T115Hn6ISqfHKEp1Ejx9Gs-LdM.roa (hash: hwD1bihujg4QKnIBffCm29/kZuX5tsYo4qsj399ZBlI=)
2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: kFdeszNPMLk123HoJ6j5PLp60f0bg8WjRX7P/RA7ixQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:69:00:36:9a:a5:ac:d2:84:30:97:f2:35:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Nov 11 08:00:40 2025 GMT
Not After : Nov 12 08:00:40 2025 GMT
Subject: CN=bd19f2c7c49d06891ff962ba43b5451201883f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:57:c5:4e:db:41:ba:9e:a3:1b:50:eb:23:
24:25:85:46:f5:5a:31:7b:4a:90:54:d9:e3:52:e0:
0c:02:fd:8a:84:f7:b5:6b:69:a1:d6:4d:44:d6:05:
28:9d:1e:ca:64:41:65:61:bf:80:52:b4:4e:ef:10:
6c:98:12:95:80:34:20:ed:75:90:f4:0f:88:2e:56:
3b:c0:22:74:cd:f8:0a:7f:22:1b:7a:c0:b2:73:00:
c2:0a:25:07:f4:44:48:90:59:b4:5c:2d:9a:3b:d3:
d1:ec:e7:46:ee:ac:a7:56:27:b4:9b:69:e1:0b:ac:
e6:8a:08:d3:94:07:bc:5a:1f:79:5a:e5:b7:16:0d:
02:62:2f:7d:df:57:4b:3b:a2:d2:7f:14:7f:cc:e6:
37:25:31:44:b2:54:ff:44:72:f5:7b:c8:c6:19:36:
f5:50:46:e8:b1:6e:45:aa:87:96:2f:83:e7:13:c2:
25:c1:b1:24:8c:ec:76:0a:75:5e:fe:e1:62:65:88:
1a:a9:be:58:f6:9f:e2:c2:4b:c0:04:4f:1f:1e:42:
fb:de:43:98:38:b1:a6:b8:21:db:03:63:9a:44:85:
51:2a:c5:30:09:8d:90:ec:08:a0:08:14:a6:aa:bc:
9d:b6:9e:a2:c4:74:09:de:be:53:23:33:79:35:47:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:F2:C7:C4:9D:06:89:1F:F9:62:BA:43:B5:45:12:01:88:3F:1F
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:43:b1:bc:30:fd:9c:d5:4c:d7:05:7d:3d:07:0f:b3:20:ee:
9e:a0:fe:04:ab:90:63:9a:44:55:3f:ee:23:67:46:cf:49:9f:
f2:dd:67:9a:d4:ca:73:bc:ef:72:b6:84:16:cd:3b:fe:6a:fb:
c1:fe:e2:41:f6:01:40:ec:ff:f3:20:6e:ce:b1:fb:b6:32:8f:
01:0f:b5:87:4a:36:c4:21:24:ab:d3:89:48:39:04:6f:2f:9c:
d3:20:bf:91:9d:fd:b4:25:1f:b2:e8:ea:08:96:66:5d:60:94:
d1:f8:70:f2:78:50:95:6b:0d:6f:29:87:1a:78:3f:f9:21:4f:
bc:fc:80:03:ef:ea:f2:f7:92:22:09:63:04:bc:4f:ad:ae:38:
56:fe:26:61:da:86:f8:17:2d:60:31:21:0b:64:a4:b2:3d:26:
39:2b:4d:2a:2c:30:f0:ca:c0:22:b2:19:32:60:30:2b:6f:b2:
13:45:e3:43:fa:4d:c2:1f:7d:27:dc:9d:5a:96:8d:c8:87:19:
57:c2:7b:74:e7:0e:09:04:4c:13:b4:71:60:14:de:b8:e2:f0:
75:c5:e4:43:ca:ef:a5:85:05:d4:2a:cc:74:7f:df:97:9a:dd:
ee:1a:31:6e:11:92:12:b2:b5:cf:37:35:e7:5e:a1:60:e8:72:
29:f1:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:00 2025 by rpki-client