Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: zGVzOv7tM3+MMgGQK/GXb/mcAv2IBFswTsTTo2Us1cA=
Subject key identifier: 91:D2:B6:C0:DB:D0:AF:2A:90:78:FF:16:B4:DA:5D:E8:30:CC:EE:B9
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019A7225CA0A526B7442026D4B285F742EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0412
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: FUvZsVjuSlC5fklj/GnQfdbfkoHmlRZEJFCI4Xohocg=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ca:0a:52:6b:74:42:02:6d:4b:28:5f:74:2e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=91d2b6c0dbd0af2a9078ff16b4da5de830cceeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:5c:7d:a5:ef:3a:e0:f9:44:f9:68:b5:02:
16:2d:cf:e0:48:6b:f9:79:64:9e:a4:da:42:aa:5b:
ae:e8:23:4d:29:4c:9f:01:91:19:b1:ab:a5:6d:09:
dc:d0:c5:fd:eb:65:85:07:b0:08:35:49:c2:62:cf:
fb:e8:08:6e:7b:32:53:92:92:8e:9e:f5:80:20:d2:
07:ea:fe:48:83:19:34:0c:20:cd:03:cc:c0:f6:25:
73:15:5d:af:9e:df:88:12:34:fb:e0:d3:2c:01:56:
97:2a:f9:50:52:b0:2a:c4:39:be:ad:3f:aa:1f:f8:
93:9d:71:64:74:f8:25:96:61:07:e0:92:57:8d:83:
bf:31:6c:f0:e6:03:7b:74:7b:43:d3:af:68:cf:a3:
28:b6:55:69:d0:be:8b:b4:26:ab:54:64:eb:d0:ef:
4f:2f:b5:2a:21:26:39:9c:50:7a:37:3c:65:87:56:
4d:46:f5:09:de:a8:0f:51:7f:eb:18:ee:11:b5:77:
97:c0:ce:b6:36:df:30:87:24:6a:ef:8e:89:96:73:
af:6d:2b:79:3b:ab:b2:3e:9d:6f:38:d8:31:9d:ff:
2f:25:cf:4c:20:b4:c8:72:5e:92:d6:e4:3f:4c:b0:
9c:fa:12:bb:13:20:ed:f4:27:3b:8b:e9:9d:9d:f3:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D2:B6:C0:DB:D0:AF:2A:90:78:FF:16:B4:DA:5D:E8:30:CC:EE:B9
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b0:77:7e:63:f4:3d:2c:17:14:7b:e4:90:37:34:ae:d6:f6:
d0:9a:0a:f0:68:94:54:35:99:9c:67:81:68:bc:23:28:b8:5c:
91:28:43:26:27:05:ee:91:30:82:5c:1d:59:95:b4:c1:a8:e4:
3d:24:a0:af:87:51:e7:95:06:78:2d:04:e6:b0:b5:fb:ce:a0:
04:a2:9a:0b:0e:46:6d:3a:bc:11:0b:cd:1b:6e:5c:f9:03:2b:
4e:27:66:64:23:c2:68:78:73:37:52:3b:9c:63:c4:55:5b:7d:
29:47:d7:f6:0c:e2:de:fa:a3:6e:af:ea:3c:01:2b:6b:2b:05:
b3:ac:1e:8a:99:93:dd:95:c9:0f:9e:b3:b1:5d:d8:3c:47:12:
21:4d:77:c4:1f:58:9b:ea:34:63:02:23:be:a6:da:0a:bf:c4:
1c:88:46:eb:b3:f9:fc:d5:be:92:70:35:03:9c:8e:91:06:71:
b9:1e:24:b3:d8:3b:f3:a5:d9:5e:11:04:99:ab:31:7b:10:fc:
ae:7c:33:f9:c6:7d:91:b8:5c:be:e9:a1:e8:01:d1:36:a2:9c:
7b:ed:ea:5e:9d:95:7c:01:51:0d:7a:3c:73:61:08:17:18:a6:
fe:0b:16:c8:92:e2:e3:7d:31:58:d9:0a:ca:de:83:00:20:a4:
1d:16:6d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:33 2025 by rpki-client