Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: ifIUJvfRZZA36aCe/4osUFybKTyCxHZB8exbZ3bW96U=
Subject key identifier: 74:96:4C:D7:85:07:A4:E2:13:D7:EA:7C:34:36:98:7E:53:28:3D:E9
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 019A70DC6DB3669580621BCB0A9CCED5D1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 0367
Signing time: Tue 11 Nov 2025 03:01:25 +0000
Manifest this update: Tue 11 Nov 2025 03:01:25 +0000
Manifest next update: Wed 12 Nov 2025 03:01:25 +0000
Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=)
2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: MtM8OxtOVWnH/JWgp6TjwzWf47Tc1rhXuIe1GMEPEsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6d:b3:66:95:80:62:1b:cb:0a:9c:ce:d5:d1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Nov 11 03:01:25 2025 GMT
Not After : Nov 12 03:01:25 2025 GMT
Subject: CN=74964cd78507a4e213d7ea7c3436987e53283de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:2a:3b:ac:23:c6:81:db:4f:d9:e9:52:af:
5f:eb:d0:f3:44:3f:15:2e:21:40:5a:72:23:31:90:
60:98:22:ff:e6:3d:04:86:6c:37:f6:db:17:de:0f:
0f:e6:70:dc:41:75:05:6a:c4:54:29:1b:43:cb:0d:
d9:0c:c3:93:45:2b:ba:15:77:b8:70:1e:cc:26:c6:
63:20:40:57:97:ba:b5:05:74:b9:46:09:ad:23:5e:
60:96:ca:06:25:05:f3:c9:97:ef:ab:e5:51:de:d8:
71:63:18:ea:4f:d0:96:ea:95:13:ef:06:f1:e2:1a:
a9:ac:09:5b:89:07:4b:ab:a0:38:17:95:c2:8d:d7:
6a:5e:c3:5b:6a:cb:73:a3:1f:92:73:58:4f:e4:d7:
25:ec:7d:74:08:a7:1c:9b:21:71:75:0f:9a:e1:3f:
c3:0c:94:d7:69:a5:f8:2f:4e:b2:b1:76:91:3f:41:
68:2e:f3:5d:53:50:13:df:37:73:f7:b4:7b:c3:76:
9a:5f:d3:c7:50:4b:74:13:c2:0b:1a:78:57:82:44:
a6:53:9b:4f:43:27:2d:a8:cf:90:a5:5f:d5:44:e6:
df:a7:5e:0e:9e:ec:09:91:13:40:f1:11:6d:48:1b:
59:7c:61:04:ae:49:65:4d:c8:11:ff:da:1e:ee:07:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:4C:D7:85:07:A4:E2:13:D7:EA:7C:34:36:98:7E:53:28:3D:E9
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6d:98:39:c0:29:c7:be:78:0b:32:51:df:92:73:35:d0:b5:
71:79:d1:1b:6b:79:de:8e:e3:32:19:b7:52:fe:fc:c7:4a:18:
86:cb:e0:7d:d6:e2:c6:59:ed:6f:78:ef:a9:9e:08:0c:53:ad:
16:cb:ed:ea:76:c4:f8:c7:ae:66:2f:17:b3:93:b7:9d:e4:23:
c6:f5:4a:bc:f5:49:a2:9a:50:d6:ee:df:16:f5:c2:19:b7:ef:
c2:95:aa:ef:b7:9e:a2:08:95:f2:82:26:70:cc:0c:53:4f:52:
56:27:4c:d9:2b:14:93:ea:5a:19:8a:71:07:fb:4c:b0:81:ea:
ed:c6:a3:26:66:34:fb:c8:43:a2:c0:33:e7:4e:8c:c6:3a:65:
0e:bf:66:71:43:cd:60:6d:fe:16:39:a7:53:cd:31:bf:f2:a4:
4f:1e:28:91:d5:8d:7b:cd:29:4d:67:91:41:56:41:c2:3b:34:
56:85:40:cc:ec:c2:f1:bf:2d:67:2c:8f:6a:fa:80:85:38:6e:
b4:e7:1a:58:ae:31:db:40:1a:f5:0a:d1:9e:58:a1:f2:3e:42:
79:5b:9a:67:28:2e:f9:74:44:57:86:b6:d4:c6:fd:bf:ce:b8:
60:8d:af:24:04:1b:83:76:33:24:43:e1:1a:94:fe:9c:9b:ff:
67:b8:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:22 2025 by rpki-client