Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: 9dQYMHNTDiuYyhxmaeY7vB6D4KVQ0XSdtX3RESOAR8E=
Subject key identifier: 2D:E1:EC:D2:3C:A1:48:CA:E9:18:A9:56:2C:EA:AC:C5:49:DC:7B:32
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019A725C8EA18B970A034EDBE38CB9BB0363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 07EF
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: bOImepZxlQw8JQ2A3rQp4ej+ymjGHWjzXdDXmnkQyp4=)
2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8e:a1:8b:97:0a:03:4e:db:e3:8c:b9:bb:03:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=2de1ecd23ca148cae918a9562ceaacc549dc7b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:27:77:65:bf:4e:9a:8a:91:59:f3:b5:74:
0e:77:84:2d:61:e6:86:ad:a3:a8:14:93:91:70:c7:
1d:18:b3:86:c7:0c:7b:82:a0:10:bd:3a:28:3a:af:
aa:b0:cb:3a:e6:74:f0:06:06:d6:45:05:fd:ba:5a:
33:fd:18:10:d3:b3:be:2b:8a:50:c0:f2:e0:e9:8f:
29:05:88:70:7f:68:95:d8:9a:06:2c:15:9a:3c:4e:
c8:9a:8b:aa:f7:9b:97:8a:2e:94:2d:ef:21:44:10:
99:64:a7:74:42:6a:ac:58:bf:40:b8:03:eb:1b:e2:
cd:79:77:bc:dd:ad:41:e5:72:c5:94:c3:6a:d6:8e:
1c:5d:ad:0b:2f:ea:75:7d:5f:48:b7:13:5f:56:8c:
82:1c:8e:e2:7c:54:c0:95:d2:7d:d4:8e:c8:5f:63:
e8:c9:84:59:f4:d7:5b:83:dd:35:92:34:39:85:dd:
19:67:4e:62:8c:b8:45:18:a1:dc:55:29:90:92:cd:
29:1e:cd:02:d7:8c:4f:6f:73:02:02:0c:77:3f:1d:
ac:9f:00:68:4e:8b:17:c8:d1:33:5f:fe:8a:ec:eb:
d4:fc:53:7f:c1:f8:a8:bd:b0:55:64:0d:62:1e:9d:
10:29:7d:72:18:1d:1f:1c:1c:89:d0:5d:97:8e:5e:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:EC:D2:3C:A1:48:CA:E9:18:A9:56:2C:EA:AC:C5:49:DC:7B:32
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:11:60:45:26:00:92:9a:00:4b:e8:4d:1b:6e:7b:73:21:7a:
6e:ef:47:2f:5f:3c:b9:22:dd:82:cf:18:25:c4:7c:39:60:ed:
97:b2:3a:a7:a8:5d:40:a1:05:29:e4:e4:14:c8:06:0f:70:a9:
71:e5:fb:06:c0:fc:35:f6:95:f3:ea:ec:ab:28:ac:ea:55:d7:
b2:3a:26:1b:22:2e:d4:6c:fb:37:70:65:bc:41:cc:ca:9d:6a:
0c:9a:da:04:33:29:94:e8:e4:fa:7c:3b:9b:61:2b:70:ba:cf:
76:e7:a9:ac:2d:91:41:30:7e:10:cb:d8:35:a4:eb:07:eb:0d:
fd:68:60:e0:c6:39:92:7b:83:ae:bd:85:fa:75:e9:72:c5:e6:
71:7c:a8:d3:ff:f5:1a:52:11:ac:a2:35:b1:17:f1:6a:77:e3:
9a:23:cc:a7:df:d4:eb:29:95:6e:af:c4:c6:b2:aa:54:2c:47:
c6:e5:8c:65:5e:13:b7:ad:b9:27:75:93:a1:57:4e:9c:b7:e5:
d8:2a:0e:b1:57:ab:17:59:3d:f5:36:e0:9f:45:80:50:be:50:
92:be:1e:07:82:b6:44:83:a7:61:2f:51:3f:c1:78:7a:97:be:
6e:93:77:93:86:f8:f1:ef:3a:24:13:3c:46:da:5c:fc:fd:74:
68:44:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:22 2025 by rpki-client