Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: vyHBVeQ17/GMOuot/xdhVVVqiuaBNs5VmP2u3d3F2wc=
Subject key identifier: 3F:6C:8D:F2:24:BC:F3:5C:01:B3:66:AB:1D:41:40:2D:DE:D4:E3:B3
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 019A522C242A820FF5E214E335D4D375D169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 04:00:15 +0000
Manifest this update: Wed 05 Nov 2025 04:00:15 +0000
Manifest next update: Thu 06 Nov 2025 04:00:15 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: tgqGbcs0C0ehPHSCTVoUMrAZRQpsvY7pkaIsUfp/9Is=)
2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:24:2a:82:0f:f5:e2:14:e3:35:d4:d3:75:d1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Nov 5 04:00:15 2025 GMT
Not After : Nov 6 04:00:15 2025 GMT
Subject: CN=3f6c8df224bcf35c01b366ab1d41402dded4e3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:44:4b:ff:9f:c5:65:48:8a:c7:18:de:05:
2a:87:5e:f3:a1:d4:0b:64:32:85:97:36:f2:be:bf:
57:2c:21:13:5c:f2:a1:55:53:eb:d9:9a:ec:25:b3:
fe:50:dd:67:86:42:de:37:f2:60:f0:41:ce:26:8a:
88:65:1f:24:03:23:6f:7a:d0:dd:71:28:17:83:bd:
aa:ef:2c:72:7c:46:76:5f:b2:99:91:c9:d0:04:be:
d6:99:d2:6f:5d:d1:41:de:eb:a8:07:32:9b:a0:fb:
91:9a:33:81:f2:d9:2e:f9:aa:46:c0:23:d9:65:61:
c1:83:bd:45:4f:66:41:e9:d2:4e:ad:b4:e9:44:6c:
00:ce:a5:1d:d8:90:28:a7:e0:72:a3:db:cd:b3:5e:
98:d1:95:4b:08:f3:04:43:13:56:a9:2a:e9:be:9b:
82:89:da:0d:ae:ff:4b:55:5a:4f:5b:ea:e4:85:6b:
74:e1:12:a4:83:cc:88:3f:2c:1a:c1:17:14:e7:56:
06:3b:a8:8b:4d:9f:f0:72:e5:c5:eb:f4:a0:3c:dc:
e1:9b:6b:7d:f6:23:1a:4a:29:99:cf:16:b3:23:d9:
17:bd:81:35:6e:a8:b8:6c:f7:5c:00:fe:b6:31:00:
d1:65:63:af:80:07:0c:66:b2:ab:91:01:ec:43:28:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6C:8D:F2:24:BC:F3:5C:01:B3:66:AB:1D:41:40:2D:DE:D4:E3:B3
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a3:a8:f2:7c:23:50:01:6d:69:7f:bb:c8:79:89:e7:77:a6:
84:44:d4:dc:88:fe:22:ca:da:5e:35:bc:e5:31:e1:e4:56:7e:
01:be:ad:1e:a7:d1:9b:13:3f:92:ff:f8:a3:25:13:c2:31:e9:
3d:59:8b:0b:17:60:4a:dd:f1:7f:50:4d:3f:54:09:da:ce:9e:
fb:54:15:86:fc:ba:83:5d:c4:23:04:72:a6:5c:5d:7d:2e:ad:
aa:ca:29:50:9a:ed:8b:99:82:8d:9b:8b:7b:60:c5:d0:48:b1:
a6:44:d8:73:b8:6c:98:b5:70:a2:e1:5e:42:8d:31:90:e8:14:
b3:78:6c:70:c9:db:74:f0:62:28:ac:f0:69:66:69:37:d0:53:
7b:ba:a2:3c:c5:45:0e:d4:ae:d5:7e:63:c3:b2:87:3c:c0:c8:
9c:a8:ad:41:20:2c:57:ec:fb:26:6e:eb:f2:9c:e6:d0:3d:1e:
4d:e9:49:a5:f5:57:38:4a:db:0f:bb:56:5b:9b:f7:0d:e8:5c:
00:d5:6e:d7:5b:b1:99:49:25:a9:af:10:a6:e0:6a:13:9d:67:
d8:49:e8:d5:88:68:1b:28:b2:fc:d0:63:0b:53:1b:13:39:f1:
93:fc:64:42:68:b3:88:ab:a0:e5:16:3b:03:51:d9:c5:6b:00:
e3:45:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:57:31 2025 by rpki-client