Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: 8TlppoCWiWV1cX16dWn1p9NagmLmryVjNO1QDCjgBoU=
Subject key identifier: 08:F9:E9:E9:A8:FC:67:F9:2C:A7:A0:76:CF:0E:96:FD:C0:E7:C8:1A
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 019A71B83ACA911FFE7C2DFD208615570CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 0410
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: 98RMdNW1ndm3FzWf6IEGjZ97bBPCgeebzOxSx4x03Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3a:ca:91:1f:fe:7c:2d:fd:20:86:15:57:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=08f9e9e9a8fc67f92ca7a076cf0e96fdc0e7c81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:04:54:f0:c8:dc:22:30:36:ba:4b:98:9e:
51:4b:46:e6:d3:ba:85:ef:a9:f7:7c:31:bc:08:5c:
d7:3e:bf:e2:29:6e:9d:3d:24:35:8a:c8:18:83:04:
93:a3:29:d0:eb:c9:90:c4:ce:8e:8d:e0:e6:19:f0:
ad:b6:7e:06:45:25:49:f3:b6:c9:a1:6c:b2:6e:31:
0b:71:fb:da:4a:a9:7c:fb:09:cb:e0:72:65:4e:5e:
5c:cc:12:4f:8a:5c:7f:a8:43:8f:73:ba:20:77:d8:
53:13:d1:a3:bd:7c:18:b6:c9:9c:94:73:a9:f1:e6:
60:37:ea:ac:5c:7d:88:95:ff:04:c1:29:43:7c:4a:
be:07:93:7c:c8:0b:21:41:6c:7c:5a:8c:ae:8f:0d:
38:45:3c:3c:e5:a8:9a:46:2d:2e:0c:e9:96:ac:14:
c8:6a:0c:00:6f:60:22:7a:68:d7:2b:97:d1:15:15:
8d:99:12:6b:f8:0c:81:4f:47:13:9b:7a:51:10:dd:
b0:a4:6f:da:bf:13:bf:9b:76:ce:a9:0b:25:7d:cd:
01:16:80:cb:18:a9:c3:81:88:e4:8d:d1:54:22:8b:
06:93:70:a9:af:29:73:c4:7a:2a:c4:98:e9:31:37:
cc:6f:b4:92:0a:55:8b:2d:6e:48:aa:0c:88:1e:a3:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F9:E9:E9:A8:FC:67:F9:2C:A7:A0:76:CF:0E:96:FD:C0:E7:C8:1A
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:ef:35:62:aa:a1:5e:1f:2a:f5:2b:52:02:91:b6:aa:65:
41:5b:a8:69:82:39:a3:b4:91:6c:8f:23:df:61:47:f7:51:4a:
f2:8d:2d:bb:df:24:e1:59:59:1c:58:c8:0f:e0:86:43:a5:c5:
89:3a:d2:1b:ed:6d:8e:27:bf:9a:bb:e3:01:06:8c:b2:9e:fc:
2d:f1:46:1e:fc:2e:3a:f8:a7:d6:62:2d:fb:d8:75:23:d7:5e:
02:2e:b1:70:90:63:7f:6f:21:cd:9f:8b:af:ae:e5:83:53:8e:
0e:0b:f3:89:99:26:5b:e3:42:17:be:28:54:9b:98:14:4c:d9:
06:74:b7:56:8a:4a:0d:00:32:9d:9d:6c:0b:95:e4:83:57:da:
b7:e2:66:09:ec:4c:ff:21:7c:77:80:5f:17:bb:dc:dc:e7:c0:
e2:05:a0:7e:23:d2:66:75:71:e5:9c:ff:f0:38:d7:92:ef:df:
96:91:97:62:e9:1d:90:b8:25:32:0e:f7:85:cf:e1:4f:d3:4b:
d3:cd:08:bb:24:fa:44:87:37:5c:1e:de:28:ca:f8:08:88:04:
64:f0:d2:a8:e4:b6:2c:9d:07:54:65:0f:06:dc:20:c5:6a:46:
a1:32:ca:93:b1:f9:82:12:d9:f1:7e:85:a0:dc:83:65:58:f0:
22:0f:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:49 2025 by rpki-client