Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: SJfQBAuibVJRziyfqXmWlLf6q6HOkJOe03kjiJAI7zg=
Subject key identifier: DC:3C:DE:72:46:7D:4F:F3:47:2A:FC:79:F2:FA:62:B5:4F:58:AA:F6
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 019A72CAA83D48BCB35A7C5A7E335A823540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0DBC
Signing time: Tue 11 Nov 2025 12:01:15 +0000
Manifest this update: Tue 11 Nov 2025 12:01:15 +0000
Manifest next update: Wed 12 Nov 2025 12:01:15 +0000
Files and hashes: 1: 6Y2-BPBwmi0ajRFfuk-7gjxb3VY.roa (hash: zEnO2OcP02snJFVmokqdabitxnMtngb7RKkC32lY0BQ=)
2: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: PUdM9fwvdG3KiP1C52Yv+12KSrFdY+KiHxmJoh2q56w=)
3: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
4: tn_gy-6KAV5ZpTSqYbryoSs6AIA.roa (hash: tZ5/NhO61aB/g/lfOTBKTOhiuBSX3QMZ1HNoyXDOpwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a8:3d:48:bc:b3:5a:7c:5a:7e:33:5a:82:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Nov 11 12:01:15 2025 GMT
Not After : Nov 12 12:01:15 2025 GMT
Subject: CN=dc3cde72467d4ff3472afc79f2fa62b54f58aaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:c4:04:40:d6:d9:62:fa:cf:4b:dd:b4:ba:
76:90:67:3a:60:dd:dd:d6:8e:66:99:be:7f:84:bd:
b0:56:25:89:86:de:16:a5:55:5b:39:c3:9a:0f:a5:
6a:2a:e3:27:3c:00:c0:88:3a:f9:71:ee:56:92:c7:
e4:8c:24:45:11:ed:8e:e1:ac:3a:f0:00:3b:a4:b4:
56:3e:8c:9c:02:43:d0:35:5b:77:99:f3:91:3d:51:
7f:a4:6c:78:64:5b:ec:73:fc:6f:68:40:2a:92:fc:
b9:cc:71:3e:af:e6:90:9c:2c:0e:92:c7:12:3e:87:
93:aa:5c:9c:ea:98:96:48:29:5a:f5:36:37:b4:2f:
71:57:47:be:74:dc:8d:f1:39:12:67:8f:7b:08:e7:
4c:09:09:2c:0a:ea:b7:86:7d:ed:35:0c:e8:22:a9:
7a:ba:67:32:c1:c9:07:b7:4b:af:4c:91:15:56:29:
a3:2c:9e:35:4b:83:b8:57:c7:4f:aa:96:31:e2:e9:
c2:af:44:ff:1c:be:49:f5:30:50:7d:26:b8:e5:6f:
bb:91:f2:26:50:b5:e6:7b:32:ee:36:38:36:82:78:
13:22:5c:66:c4:3e:8b:25:69:1b:99:45:6d:78:c6:
cb:ee:ff:9c:2a:49:1a:d1:f0:34:ce:93:42:38:24:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3C:DE:72:46:7D:4F:F3:47:2A:FC:79:F2:FA:62:B5:4F:58:AA:F6
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:b2:1a:97:e0:46:cf:d0:38:8f:ab:a2:cc:a1:ef:fc:6b:
03:5b:ef:17:d6:24:93:f4:cf:ad:aa:a5:d7:68:f4:81:94:a6:
19:80:33:40:30:55:96:6e:2a:18:2b:da:3b:d2:58:e8:a4:26:
eb:9e:48:bc:ed:ee:61:ab:6e:bf:96:95:6f:87:72:a2:ad:b2:
a1:59:99:41:c5:78:d6:64:29:04:09:8a:4d:21:7c:e9:49:06:
3e:c1:2b:91:89:48:a9:4d:1a:b8:77:6e:16:1b:2e:6f:d7:24:
11:1d:eb:02:77:5c:fc:60:4c:88:77:7f:7d:5f:d6:95:f4:21:
f1:c6:bf:91:33:76:e8:1b:09:e9:45:23:4e:90:0c:64:70:f3:
04:c6:b3:e0:07:ad:d7:ca:b4:c4:a6:55:b3:c8:3e:d7:16:ac:
91:1d:5d:f4:56:6f:81:6d:3c:fc:c1:25:df:ae:15:b7:9d:75:
db:1b:58:1f:bd:3b:e7:6f:a0:af:d2:01:a8:93:e8:51:6d:86:
0a:49:88:21:dc:b6:9b:89:9f:cd:aa:78:ee:f8:ad:d6:af:57:
8b:8e:9e:72:8e:b7:45:70:af:fc:45:17:74:3c:ec:f2:31:be:
17:6e:a6:62:0d:9f:3a:73:05:47:3a:b8:fe:90:cb:b8:c9:03:
0e:b8:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:43 2025 by rpki-client