Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: annLDiJFP+K+fkGaBTWlOgaFuhmASPvMrTy4LuT7LwI=
Subject key identifier: 02:70:9B:74:D1:40:D7:96:FB:10:67:A8:60:32:2E:20:7D:E5:9D:9F
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 019A711316C3D56A0313FAC3190117DF1171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 096C
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: tuloe8ZtLFOr4jBaHykRIX3Oh0sTgmL9EWtxehNeVUU=)
2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:16:c3:d5:6a:03:13:fa:c3:19:01:17:df:11:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=02709b74d140d796fb1067a860322e207de59d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:b3:d3:e2:55:95:3b:62:46:51:8d:1c:69:
de:f2:40:fa:3f:47:db:53:2a:d3:59:e5:81:10:c0:
83:76:79:47:63:a9:21:68:cc:c8:00:7d:79:7e:d7:
fa:9f:10:4e:83:6b:ab:d4:cc:79:82:79:9d:78:10:
ca:be:e3:56:c5:f4:af:1c:69:31:e4:24:b9:94:dc:
d5:bd:85:fe:71:f8:99:1a:6a:46:01:93:02:3f:d9:
ab:a2:a2:5a:0f:e3:eb:59:cb:6c:bb:68:67:fe:cb:
43:19:e8:9d:50:96:6f:40:43:b3:ae:96:6d:3d:ac:
7f:3e:22:e3:62:6c:e0:ab:73:93:e8:9c:73:a7:5d:
e9:a2:be:f9:f4:c4:ce:ea:ee:dc:d8:7e:98:fd:ca:
d0:1f:bc:4e:9a:23:53:3d:57:d9:0f:8e:a1:e2:02:
e1:ab:4a:54:6b:34:f7:a5:0c:6b:2a:4c:4e:90:e9:
9a:92:0a:bb:40:fa:b0:0d:92:8e:7e:75:9b:84:3c:
85:ef:e6:f2:a3:a9:aa:c4:e0:1f:21:e2:08:65:13:
65:44:4c:a6:e0:26:66:38:57:3a:b1:da:33:d5:62:
7e:59:d4:1a:0c:c1:9f:1d:72:45:c6:96:f5:18:31:
a5:b9:3b:9e:7b:34:76:73:be:97:b8:b7:66:58:59:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:70:9B:74:D1:40:D7:96:FB:10:67:A8:60:32:2E:20:7D:E5:9D:9F
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1c:5f:18:66:27:9c:28:1e:60:36:bc:47:b3:1e:1f:bc:c2:
6b:e3:19:84:1b:20:c8:89:74:61:f3:ed:e7:6c:44:0c:a4:9c:
1b:7b:1f:18:81:53:33:17:94:b0:29:bc:35:d3:5f:73:6c:0a:
53:fb:56:f0:db:79:53:50:94:81:21:99:30:02:42:26:bc:3d:
43:3a:bf:50:66:fe:20:86:53:47:b6:aa:f8:6c:36:a3:a9:06:
40:30:65:80:38:84:55:3a:2a:9b:0c:9b:c5:e1:64:9b:d6:8c:
60:6b:c3:75:ea:5d:92:67:bd:7c:fd:b2:ae:4a:c6:38:ca:90:
50:78:b4:57:cb:9d:5c:84:53:c0:a3:7a:e9:c8:04:49:3a:24:
0d:8a:9e:e4:67:28:cc:4d:ec:ad:c3:45:2a:3e:08:b4:7e:0b:
bc:35:a4:17:e3:f9:1f:43:b4:13:40:16:e9:51:ae:6d:98:1b:
45:e2:b5:35:79:0f:c9:fc:68:b0:5f:50:9b:85:fc:be:14:d1:
b4:be:0a:7f:4d:08:d2:5c:1e:5f:0f:40:fe:a7:7b:ad:4a:8a:
a9:19:4f:da:72:7e:ed:6b:17:8c:3f:b0:da:3d:b3:eb:0c:83:
0e:ed:48:8e:6e:98:d4:88:ce:05:80:b4:57:1c:24:c2:81:a9:
6a:5e:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:08 2025 by rpki-client