Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: hCRasGwY6GyxdrI9L/obW4kYA0AzLHGSGR4O82Kp8p8=
Subject key identifier: A1:C5:37:54:0F:17:3E:81:7C:F4:3F:2A:2C:34:82:7F:91:F8:1A:73
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 019A730187A3DE6DB73E2C140461B5BAF9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: 0195
Signing time: Tue 11 Nov 2025 13:01:11 +0000
Manifest this update: Tue 11 Nov 2025 13:01:11 +0000
Manifest next update: Wed 12 Nov 2025 13:01:11 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: rDfR58Rh9IXLECW3V6cqmYbhF8k/8lrFZYQj6GJAGUs=)
2: UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa (hash: FXCOZ3RR1v7GAOBmOczwXx+7sehvCfZ7oMWfxcGZPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:87:a3:de:6d:b7:3e:2c:14:04:61:b5:ba:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Nov 11 13:01:11 2025 GMT
Not After : Nov 12 13:01:11 2025 GMT
Subject: CN=a1c537540f173e817cf43f2a2c34827f91f81a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:2c:f0:ef:5f:8e:0b:5d:c8:b4:d3:af:29:
80:a2:a0:69:1b:44:d7:99:cc:14:d8:a9:7c:38:4e:
92:b1:c0:59:c7:c8:10:74:84:d0:55:ef:22:fa:03:
5d:85:af:9f:02:10:8b:1e:42:61:2b:0a:db:0b:1f:
2e:52:48:82:80:56:9f:b6:85:20:6d:5d:85:70:4c:
a7:60:c5:15:2e:b2:e2:0b:44:fd:0f:bd:ff:1b:13:
62:2a:8b:71:76:bb:76:5f:d2:72:d9:c1:38:fc:e4:
3b:c5:1a:57:f6:fa:ff:ba:24:6e:c5:eb:ff:f2:ab:
aa:aa:37:7b:3c:f1:cc:71:cb:78:13:6d:b7:ba:0a:
73:97:d3:87:c6:e5:f7:52:fc:b5:8d:54:f7:21:dc:
96:e4:78:41:0d:0c:a1:60:08:f8:5a:fb:b2:ce:52:
dd:2b:5f:bc:ce:2c:ff:3d:b8:16:a7:0f:31:df:88:
91:ca:bf:b3:5a:fc:aa:44:9c:87:59:ab:53:56:9c:
3b:66:79:42:b4:92:0b:9b:01:8c:a5:e4:30:c0:d8:
88:f6:11:be:1a:45:df:fb:af:00:14:4e:9f:c9:af:
c4:dc:16:66:32:11:a0:fe:b0:13:5b:51:35:b8:ae:
46:d3:44:6d:67:a1:76:c6:3f:8b:32:67:35:d2:47:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:37:54:0F:17:3E:81:7C:F4:3F:2A:2C:34:82:7F:91:F8:1A:73
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8a:42:fd:b9:26:45:07:b9:3d:47:10:d0:7b:c2:ee:fe:fd:
30:dd:47:72:30:3f:3c:06:0d:9a:55:2d:0b:1e:3e:99:1a:18:
7c:b3:26:37:ef:df:55:6a:a5:57:75:ca:ee:0d:bc:0c:f3:41:
a3:40:18:1d:4e:ff:de:d2:0a:a1:ab:c5:b1:f9:6d:b4:ba:5f:
53:2f:8b:dd:23:8b:1f:04:dc:7d:f2:d1:8e:44:73:7d:83:a5:
a3:43:63:c6:3e:a0:e5:70:40:7b:2e:9b:4e:93:09:6e:30:cf:
65:f4:d6:c4:1c:0c:dc:51:2d:12:27:a4:53:35:45:3f:25:57:
92:e8:68:49:08:0e:ca:7e:a3:e9:26:a0:3d:29:55:b3:09:55:
a3:94:b3:9f:f1:37:89:04:a4:fe:d9:ca:f0:92:aa:1f:4d:f6:
9d:b3:56:65:5d:1a:f0:70:cb:5c:0d:56:cc:67:e4:83:c9:87:
7f:09:63:51:83:08:0a:c6:bb:a3:46:ae:da:57:72:b5:31:8e:
12:e6:9a:d0:65:94:a8:de:a3:3d:d4:f7:52:29:66:55:1e:18:
97:4e:65:4d:fa:90:20:87:16:bd:69:90:7b:cf:1d:b7:bf:3e:
ea:71:57:a4:55:c1:5a:9f:04:81:62:02:c8:4e:74:1c:e2:95:
d6:5c:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:22 2025 by rpki-client