
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: CogOHx4A3yYMtzX3th4LB896pUFKVxeTg7tpt9L/1q4=
Subject key identifier: F9:2B:6A:92:C3:76:BA:C8:E1:3B:94:0D:07:76:00:85:43:4E:FC:8F
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 0199FAD8253003A2469A46384F03ED538790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:33 +0000
Manifest this update: Sun 19 Oct 2025 05:01:33 +0000
Manifest next update: Mon 20 Oct 2025 05:01:33 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: fYejJdlEJAGNwzY+S4sdNM5m5ylJlHeI6k7h/b4fFC4=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:25:30:03:a2:46:9a:46:38:4f:03:ed:53:87:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Oct 19 05:01:33 2025 GMT
Not After : Oct 20 05:01:33 2025 GMT
Subject: CN=f92b6a92c376bac8e13b940d07760085434efc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:60:2a:5b:c2:5a:97:26:d8:16:3e:d2:b3:
c0:fa:d8:18:92:b7:ea:2a:e0:ce:f0:59:2a:c5:91:
6c:46:50:35:7c:09:74:3c:39:90:ba:cf:25:cc:d0:
ed:dd:82:a2:94:90:8a:d2:fe:2d:7f:9c:f0:4f:92:
d8:54:bb:c0:1b:61:80:bc:a0:c0:63:c8:4b:41:48:
ca:79:33:aa:b8:b2:46:e0:36:7f:46:91:da:eb:94:
32:e3:0b:92:70:7e:a7:81:33:1e:d4:c6:2f:b8:c0:
fe:c0:ab:f6:0d:2e:28:b7:50:b2:cc:00:78:00:4e:
77:59:12:dc:43:7d:80:ab:e1:0d:d2:df:49:e2:43:
a9:06:59:d6:a1:d6:5b:bb:ff:cb:9a:68:7a:1c:88:
14:00:53:24:6e:8c:11:bf:da:11:a4:77:f5:6d:96:
71:c5:64:0c:64:ce:f3:1e:64:43:e9:33:de:6e:b3:
40:bf:53:02:1c:fe:d1:d4:9e:fe:5b:ba:b8:1b:be:
47:6b:f0:0c:45:12:ef:8c:b8:d7:fe:1c:54:cb:fe:
53:c2:97:c5:00:79:d0:4f:3e:e7:d7:e5:e9:c7:c7:
7b:ca:da:78:91:16:1b:5c:01:70:e5:d1:12:84:b0:
b3:28:36:a4:27:2d:58:3d:80:44:c9:0a:db:6f:5e:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2B:6A:92:C3:76:BA:C8:E1:3B:94:0D:07:76:00:85:43:4E:FC:8F
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:47:1d:86:ba:3a:19:03:67:b1:5e:6b:c8:0d:e9:b0:33:21:
a1:7d:38:08:f4:d6:ca:b3:59:a0:78:b3:28:9b:ab:14:47:2e:
fa:5d:f8:c5:39:fa:7e:41:cf:07:12:ed:3e:5f:08:65:ee:28:
da:65:77:f9:51:e4:26:cf:0d:e7:3f:b0:c9:73:2e:38:8e:dd:
0c:b4:8b:e4:24:4c:f2:a3:11:e6:48:f2:2f:65:99:61:7a:c1:
12:e5:c5:5c:77:ad:4b:b4:7c:db:ad:41:6b:02:0a:22:f3:50:
b7:98:9f:e7:4f:63:e8:9c:c5:45:1b:e3:eb:f7:63:b0:d0:3f:
ec:0e:cb:eb:cf:9f:76:19:21:7b:38:03:94:a9:1e:61:15:ee:
60:2c:aa:6e:fa:25:ca:8c:f1:d7:d0:0d:e4:13:a2:3a:31:00:
96:4a:da:b5:83:a5:fc:b4:78:4d:2c:8a:54:0b:e1:a0:68:4b:
42:d4:f8:c7:eb:30:3d:82:55:8f:5c:92:b8:89:d1:1d:b7:9c:
9f:1b:a5:b8:47:74:fd:6c:1e:d1:86:16:fd:69:c7:08:1d:7a:
c9:c1:1d:a9:e8:f2:f2:8f:27:ae:f1:fe:fa:6f:18:8c:f2:27:
d1:ec:e3:5c:51:8a:24:09:4a:67:1e:b0:7b:57:42:7e:14:1d:
ff:4e:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:46 2025 by rpki-client