Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: /ep49f9Iz/bOJ92QTuhYo8tnrM2DbYOIlGrke4k8kEg=
Subject key identifier: 05:62:68:DD:27:32:69:BA:D1:BD:9A:D4:BB:5E:25:D4:17:4C:CC:21
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 0199FCFD83481D464C80E0BBD39634FCAA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 0AC9
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: 7SHjb3To_8zToO1PZkaOAJQ-mzY.roa (hash: aqql1uslZqhQkjcDpj0gs+oDngpuPaF1ypOzLp6Vqak=)
2: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=)
3: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=)
4: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: /exRzGvtOC5j2kAHvqISVxVWhMUVz5Zu3RIOgXVrNPc=)
5: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:83:48:1d:46:4c:80:e0:bb:d3:96:34:fc:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=056268dd273269bad1bd9ad4bb5e25d4174ccc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:0d:fd:9a:39:fd:14:7b:ee:83:6d:cd:e6:
fd:4e:23:8e:dc:31:a4:2f:7e:96:05:64:47:4c:d5:
e8:cb:2e:c7:a4:36:62:b5:04:44:9c:5b:e3:ac:96:
29:a8:82:0e:b4:a3:70:62:40:9f:dd:98:a8:0f:3b:
c8:74:4a:ba:91:d7:dc:60:ba:d5:6b:86:4f:1c:e2:
62:d0:1b:1f:da:f3:02:a0:ed:5b:d3:99:9c:7f:26:
f1:73:3b:64:63:ae:ab:3e:cf:7a:34:76:7e:69:c3:
dc:ab:b2:93:bc:60:97:34:01:e9:2a:2d:79:13:44:
fe:d0:43:f6:a8:eb:95:f3:67:48:c9:45:f8:17:45:
2c:b6:36:fb:f9:71:75:da:56:cb:e7:74:6f:a7:d4:
2a:91:84:95:fd:5a:7a:e7:ff:37:66:14:4b:1f:1d:
00:15:9d:b6:0d:51:3f:a0:c0:12:ce:1e:38:c4:e5:
8a:3b:04:c5:bb:be:84:7d:72:ab:46:e4:af:c1:28:
b1:8e:43:37:e0:03:79:6f:b3:d4:55:00:0d:90:4e:
b8:48:99:4f:ba:5f:20:dc:d9:77:ae:0f:0e:6c:6c:
25:c4:84:7b:d9:00:de:42:d6:eb:46:ff:5f:68:ea:
4a:57:c8:21:59:b2:7e:7c:53:4e:ca:f5:08:77:ea:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:68:DD:27:32:69:BA:D1:BD:9A:D4:BB:5E:25:D4:17:4C:CC:21
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:03:2c:71:a2:be:90:7a:06:c7:a7:87:0b:25:d5:13:8a:ed:
e9:58:fb:19:fe:70:5a:96:09:97:87:ad:35:c9:b3:4d:d0:ee:
7c:84:07:95:cc:f1:a3:ec:34:e4:ca:1e:ea:ad:fa:dd:b2:2e:
74:6b:37:d4:58:94:48:14:ea:e2:c4:6c:ca:a9:c1:df:8b:56:
f4:b9:22:e3:c2:d2:ea:d3:55:80:ec:d4:90:7a:d1:36:c6:0b:
66:a3:6e:46:d3:a6:53:7c:38:ac:a3:ed:41:6d:f4:c5:7b:94:
5c:2f:13:30:66:e5:fc:e8:b2:d8:99:f8:6a:f2:03:fe:78:ce:
88:d6:69:2e:ac:52:bd:ce:03:d4:a1:de:24:cd:39:79:30:36:
c1:b7:66:09:43:ea:08:f6:ec:32:2f:e4:00:ec:cc:d4:1a:03:
76:0f:5f:c0:99:5d:d6:9a:42:7a:85:83:3e:06:48:e3:b5:14:
e3:0e:9d:24:aa:87:8a:4a:ba:75:6b:ea:b7:3f:7c:49:fa:c6:
fc:4b:b6:3b:00:52:f7:24:d2:6a:35:64:be:01:12:10:8c:ae:
78:56:23:4b:a2:1c:6b:9b:1a:93:45:53:c3:46:b0:82:16:c6:
76:fe:e7:e4:33:49:96:26:73:12:8a:22:ab:55:e3:b5:aa:45:
fa:3e:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:12 2025 by rpki-client