Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: Vo2k1hnBUK0L2q4NfhmvY8AbsX37MrOz4JeftJHGNTA=
Subject key identifier: 69:64:19:09:82:DA:5B:AF:38:E1:08:78:3C:15:58:BE:A5:45:2F:90
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 0199FDD95F5770F55EEECF9B22853AC5C118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0B9E
Signing time: Sun 19 Oct 2025 19:01:45 +0000
Manifest this update: Sun 19 Oct 2025 19:01:45 +0000
Manifest next update: Mon 20 Oct 2025 19:01:45 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: 7uuYlNz3ThjwNSHTW22xJeetwgitaF2wTDiAR/gsgU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5f:57:70:f5:5e:ee:cf:9b:22:85:3a:c5:c1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Oct 19 19:01:45 2025 GMT
Not After : Oct 20 19:01:45 2025 GMT
Subject: CN=6964190982da5baf38e108783c1558bea5452f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:2f:39:8c:24:dd:60:2e:73:bd:b0:3d:cf:
57:d3:21:89:41:b2:1d:a5:76:c0:95:64:c9:4b:9d:
19:ff:90:02:34:a1:45:1e:53:99:18:f9:3d:b3:51:
1e:f5:d2:a8:5c:e2:28:87:84:d7:06:82:f0:32:be:
16:ff:4b:33:57:3d:0c:8b:35:27:c7:58:0c:1f:6f:
2f:87:a2:7a:23:e3:c1:c8:82:32:cb:ab:c5:6e:9d:
4a:71:c8:03:df:0b:16:29:50:30:f7:13:a4:69:57:
9a:b6:8d:ec:d5:88:ad:07:8d:7b:59:04:77:51:36:
d8:b9:e4:61:34:4a:0b:69:16:7d:8c:db:0f:16:28:
66:12:fd:b3:47:65:10:c3:74:52:1f:7e:1d:8e:1c:
d1:b1:b1:d0:dd:bc:41:4a:dc:e4:2a:ba:64:d6:dd:
80:6b:76:56:d7:f1:2d:e1:48:e4:ff:2d:b2:d5:a8:
15:ee:85:1b:0c:a6:55:1a:94:c0:9f:cc:a3:39:21:
4a:96:b7:7b:3a:29:5c:50:fa:f1:0e:a8:0f:02:7c:
5e:d0:01:ac:6f:15:88:c9:2a:61:d3:41:61:9b:6c:
92:27:11:bc:47:c7:25:30:1a:fa:49:1e:fc:cc:09:
74:92:ad:df:3d:2e:f2:56:e3:8c:37:bf:1d:89:82:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:64:19:09:82:DA:5B:AF:38:E1:08:78:3C:15:58:BE:A5:45:2F:90
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e0:a8:3e:17:10:56:39:a4:26:9f:b1:37:01:fe:1c:ba:68:
23:e5:9d:c0:bc:c2:1c:85:b2:bb:c4:74:ec:11:57:81:dc:47:
cd:a3:e6:e9:a2:b4:27:82:58:13:d0:dd:71:4a:42:60:58:ee:
b8:e6:2b:69:86:20:7b:28:7f:42:d3:d1:c6:1f:1c:d0:25:35:
45:ac:96:58:14:a3:31:01:aa:33:8e:2b:0b:56:1e:71:5b:e7:
cd:14:d2:2d:6f:6a:96:49:0d:39:89:49:dc:98:26:fb:4a:7a:
1a:9f:69:94:62:de:92:a8:f3:25:6f:28:76:9a:ae:9a:3b:60:
3a:c8:8b:a6:df:98:5d:b6:ef:9c:2d:ed:ec:46:b2:be:7e:91:
d1:9b:5d:70:58:60:ce:37:03:6f:64:32:0b:f6:c5:97:ca:29:
87:15:df:8e:cf:41:54:7b:2a:dd:5c:77:94:50:bd:d4:50:d4:
e6:81:ff:bc:20:39:a1:a8:c8:e5:5f:76:aa:5e:e5:32:40:38:
b8:72:22:5e:3c:16:32:0b:2c:06:19:d6:3d:e2:52:32:40:07:
8c:72:1c:41:14:6d:52:79:b1:b1:59:bd:5d:84:84:c5:0f:f7:
c3:9f:d5:ed:04:5e:65:d2:d0:ad:0e:f0:ad:07:82:1d:16:76:
1b:5a:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:41 2025 by rpki-client