Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: ZZ+qUjmgBb5prZw+Bc27xmD3AF7RaN4vgk9oTvrSfr4=
Subject key identifier: 94:F4:4A:75:48:98:8A:4F:8C:E8:5C:76:55:BF:1E:4E:30:16:05:5B
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019A70A52174559370FCB188C4A5EDAB86CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 02:01:01 +0000
Manifest this update: Tue 11 Nov 2025 02:01:01 +0000
Manifest next update: Wed 12 Nov 2025 02:01:01 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: JlUcTPzZ4oUY0UFUtW0Qi51ePg9VXZSv4ISf95QHzh0=)
2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:21:74:55:93:70:fc:b1:88:c4:a5:ed:ab:86:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Nov 11 02:01:01 2025 GMT
Not After : Nov 12 02:01:01 2025 GMT
Subject: CN=94f44a7548988a4f8ce85c7655bf1e4e3016055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:1b:89:88:2a:fa:8b:5a:2c:8d:f9:5a:38:
b7:b4:3d:22:7e:eb:34:d9:1e:77:dd:da:44:d3:24:
96:bf:d2:cc:65:2d:e4:ff:b1:d5:69:fb:f8:f8:f8:
17:b0:55:ec:1d:4b:f6:b3:eb:08:28:72:e7:8e:a1:
54:32:d3:68:ad:96:f6:2a:6b:86:43:b3:36:d4:fd:
73:7b:5b:d0:78:97:70:5f:c2:38:7e:90:ab:32:6b:
b4:9b:2e:7f:83:42:9b:51:9e:62:38:be:71:56:33:
a3:f3:de:a8:42:ec:67:11:fd:96:41:c2:e2:de:b2:
c4:23:38:f9:77:87:03:20:43:0c:64:58:b3:42:83:
ca:82:8d:fb:b5:68:f1:82:c4:fe:88:c0:3e:3b:2d:
9a:8a:aa:fb:b8:03:b9:4f:aa:f1:de:b3:57:02:4f:
90:96:ce:a5:19:fa:ee:92:0a:26:b5:ba:58:5d:56:
35:b8:30:00:6d:ce:79:eb:80:9f:a9:51:44:d7:3a:
41:d7:d9:6f:86:88:43:03:8a:de:a4:0b:0a:b5:36:
4d:2a:cb:d1:51:a4:5b:e6:bf:dd:64:5c:b9:f7:7b:
25:d5:86:ac:91:1e:47:63:38:d9:ff:c4:3d:a5:db:
cf:17:37:eb:30:5f:e5:48:dd:51:59:01:07:eb:14:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F4:4A:75:48:98:8A:4F:8C:E8:5C:76:55:BF:1E:4E:30:16:05:5B
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:26:02:4b:42:9c:a1:8d:c0:a4:1c:aa:53:16:43:c2:be:4b:
c2:e9:0c:f6:70:95:a9:2f:d0:31:11:68:ae:8e:1f:12:d8:70:
b6:ae:26:38:6e:6c:4b:e8:41:0a:46:fe:6e:3d:23:20:13:ca:
2f:d3:f2:1b:ef:21:17:38:81:4e:6d:f4:ab:5d:25:97:72:0e:
bd:62:67:af:c5:3b:aa:43:6e:06:33:8a:63:a6:ac:da:11:dc:
c2:6a:0c:20:5f:09:00:ef:24:5a:e4:bb:0d:da:7e:e8:83:98:
f9:e1:89:f0:f3:b0:06:0e:48:5a:07:43:d9:dc:d1:3f:ff:80:
28:da:45:ce:c1:4f:95:8b:83:5f:f4:93:5a:0a:8e:79:67:7e:
c3:7f:e6:f6:15:d8:a6:c5:dc:96:1c:a0:8e:a9:a5:e8:48:7c:
32:76:8b:08:80:49:67:69:39:5c:8b:bb:82:e1:5a:50:19:9e:
9d:ab:75:a8:c0:fd:17:b2:1d:33:9d:e7:8e:a8:3a:c0:ff:d1:
13:11:46:84:da:88:d1:38:b6:28:54:b1:11:ea:a8:73:81:c6:
be:10:76:64:f6:4c:8f:e5:ae:e5:1a:4d:5a:99:f6:ca:a6:98:
4c:64:6f:95:9c:4d:b6:d8:9d:4e:ff:19:a3:9d:7a:b1:47:6f:
12:bf:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:31 2025 by rpki-client