Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: JViEwiTRYLaVq2l1M/KBDoAcyOvI+jY0UXZobf/dlE8=
Subject key identifier: D4:7C:2A:42:7B:4A:09:1A:F4:E4:5B:D3:A4:25:69:EB:F4:91:73:73
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 019A72265436D41F35464927B0F74A12FF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: NYW0rThQWVJ9tXHX6VZYD/QyRtHCXL7AxqEzcxL/E2k=)
2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:54:36:d4:1f:35:46:49:27:b0:f7:4a:12:ff:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=d47c2a427b4a091af4e45bd3a42569ebf4917373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:d3:ec:a2:50:3a:e9:0f:24:59:49:33:86:
ea:49:fc:c3:e4:53:f1:66:05:b7:76:b5:26:db:5f:
23:59:40:54:c6:ce:96:b7:d6:13:1f:39:e6:ac:26:
96:5a:01:0d:2e:8d:cc:81:8d:e2:0e:3b:74:ea:18:
da:ff:83:2b:b6:f8:c1:04:b5:c9:58:6f:5b:a1:cf:
07:7a:0a:40:69:22:39:c8:f3:86:71:90:da:0e:59:
a7:31:f5:fe:13:d5:4a:32:e1:ec:89:d0:55:89:5b:
36:5f:22:77:a2:2d:27:19:1d:f4:8f:97:6c:b3:d6:
dd:1d:37:7c:cc:52:85:ce:e7:d3:eb:d6:7d:2c:b5:
41:23:dd:51:9f:f6:65:f7:47:bb:fa:71:b5:b7:24:
f3:2f:58:00:7f:ef:a3:27:8e:42:38:3b:0e:fc:b6:
e3:88:2c:11:32:00:79:5d:11:24:bf:d9:d9:f7:44:
c6:a4:62:28:67:db:9c:5d:e5:84:10:cb:0c:6e:8d:
98:a5:e3:43:70:cc:72:78:e4:92:8e:66:c5:61:ee:
81:c1:ab:3f:1e:7c:0d:b3:ae:51:8d:4d:97:0c:92:
db:7c:07:25:b0:85:91:f8:7b:e3:5a:0b:62:32:a5:
cf:17:9d:08:b6:ff:8e:23:66:1b:6e:4d:d6:f3:47:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:2A:42:7B:4A:09:1A:F4:E4:5B:D3:A4:25:69:EB:F4:91:73:73
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f1:07:1a:3f:cd:f3:4f:b1:30:74:9d:d3:87:ed:f3:ba:d9:
dc:6e:36:6d:07:57:12:0e:ae:a5:41:b9:f3:0e:2b:71:94:78:
d3:ed:9a:a3:b7:6d:d3:49:49:f6:51:52:d8:d9:89:68:ce:29:
24:97:2b:3d:db:d6:82:b8:98:87:db:c3:b4:04:47:c5:db:aa:
77:04:54:b6:39:e5:c9:21:1b:c1:a5:0d:c8:34:72:e4:33:39:
3f:d1:c8:88:a6:aa:9a:73:69:f3:e6:b4:01:ee:49:7e:35:33:
a5:92:a8:bc:f8:f0:32:e2:37:3c:0a:5c:df:ae:42:06:c1:a9:
2b:e2:40:65:ba:1c:52:a4:f3:fb:b1:03:67:4f:1e:dd:27:7c:
2d:23:b6:8a:d5:59:d7:8a:4d:1d:74:dd:fe:a4:1e:2b:80:03:
8e:4b:5b:b4:74:b7:45:42:31:51:4f:ed:bb:9c:ce:a9:ab:1d:
74:78:b8:29:b4:16:92:44:ff:10:66:74:d2:98:c3:f9:5a:14:
62:6b:41:c0:6d:f5:49:31:41:5b:61:c4:ff:15:6a:c5:80:e3:
da:18:83:63:5d:fb:f5:2f:bf:b6:3c:ea:2c:0c:d0:03:03:d6:
84:01:1d:b8:05:ca:40:0b:2c:9c:dc:f0:a2:01:41:4d:82:ce:
f0:b2:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:09 2025 by rpki-client