Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File: dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier: 1ANu4YJTvsU5R+AGbgdL2/YiOQPo8vsQe/X/rAEYsO4=
Subject key identifier: 45:E5:56:3C:43:A9:AC:B4:FF:2B:C1:7B:7B:B7:DE:60:BE:B1:23:29
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer: /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial: 019A72CA75C417B5F3E1EC872CA219C6E263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number: 0DB0
Signing time: Tue 11 Nov 2025 12:01:02 +0000
Manifest this update: Tue 11 Nov 2025 12:01:02 +0000
Manifest next update: Wed 12 Nov 2025 12:01:02 +0000
Files and hashes: 1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: TuAYAzsts9/gajykWE5mnz7+i1b0Tu0p/hSBohu8cL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:75:c4:17:b5:f3:e1:ec:87:2c:a2:19:c6:e2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Validity
Not Before: Nov 11 12:01:02 2025 GMT
Not After : Nov 12 12:01:02 2025 GMT
Subject: CN=45e5563c43a9acb4ff2bc17b7bb7de60beb12329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:c1:13:ed:88:72:af:4b:22:f8:e3:3c:f7:
4a:ce:40:2b:9a:00:52:7c:cc:a2:09:39:8e:96:44:
7d:5a:8b:65:d1:84:de:28:df:28:4f:c2:74:ce:4e:
14:6b:de:96:1b:89:7f:51:3e:5a:0c:f7:92:3d:2d:
f5:3c:d8:b3:11:51:7c:6d:5f:75:6b:e8:ff:9f:e2:
64:34:64:2b:f3:14:84:65:ac:f8:40:73:f9:4f:cc:
19:f8:2d:6f:42:5d:1b:02:28:a9:bc:14:b2:3e:1c:
fc:96:1e:f8:69:78:97:25:13:1b:90:f1:7e:b8:16:
f6:d1:9f:c8:f3:78:93:f0:cc:2d:52:65:c6:9c:90:
48:53:8a:a2:5a:47:4c:7d:64:25:bd:4e:29:d6:b5:
3e:5e:01:27:76:97:25:ee:1f:57:ce:67:73:82:13:
0f:22:f3:77:ad:9a:b0:58:16:fc:8f:dc:08:5c:93:
7b:a4:e8:94:ae:e1:46:73:e0:c7:9e:76:90:b0:42:
9c:55:79:ca:62:e0:46:68:c7:57:42:0b:90:fd:3b:
85:e1:fb:e9:ec:27:ca:82:00:12:f1:f4:00:2e:aa:
52:3a:df:72:67:b5:b0:83:15:6e:60:a3:f5:f9:21:
f0:d4:d5:2d:59:3d:ec:e4:bc:fb:ad:cb:ad:e0:4a:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:56:3C:43:A9:AC:B4:FF:2B:C1:7B:7B:B7:DE:60:BE:B1:23:29
X509v3 Authority Key Identifier:
keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fe:f6:50:0a:77:93:42:2d:87:c7:f8:f1:c2:b8:b7:02:52:
b6:a5:83:04:87:a5:fb:76:16:4a:d9:b5:5e:5a:a4:78:b3:77:
d8:dd:e3:81:bb:f7:05:36:9a:ff:49:ec:65:f9:8f:50:d4:5f:
60:d2:7e:9d:10:d5:a3:6c:e4:6b:12:10:68:2a:e4:b8:d8:0b:
c8:dc:14:42:c5:f7:d9:89:ac:a3:42:48:fb:c3:58:87:d7:d0:
79:d9:60:31:99:39:ef:d8:77:6a:0b:a9:a9:79:fc:4b:52:00:
b8:d4:ff:c8:af:d2:4b:75:84:dd:43:69:45:ee:a4:e1:92:13:
08:9e:3f:bb:41:5b:94:b5:eb:fc:30:17:7b:07:47:00:90:cc:
51:99:2c:fa:a0:25:4d:67:44:44:b5:14:36:c8:61:89:7d:9a:
d6:61:7c:5e:b2:3e:44:0b:d0:74:b3:46:9c:cc:67:c3:b4:3a:
2d:d3:4a:fd:cf:cc:52:3d:09:56:8b:2f:a7:0b:9e:24:14:66:
32:51:e3:9e:bb:0b:be:36:9d:03:89:c8:96:cf:69:51:da:53:
90:47:eb:62:34:f7:0d:37:9a:10:a9:de:71:d2:53:24:df:ee:
f4:f2:85:03:f5:b7:f3:d9:5c:ec:89:bc:dc:61:5e:6a:45:3f:
90:9b:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:40 2025 by rpki-client