Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: FKJ2BGTAkXeMoR+Gkv/qheVusWsZndQ17KlpjwpX1AM=
Subject key identifier: 45:D7:6F:83:01:E2:80:3F:F1:61:BD:6B:99:E9:72:15:1A:86:A3:90
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 0199FBEB461FFC9B34110B4574FCB56561BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 0BC6
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: AuvhMGh9PK52ne1JSuBaz6CmkUkXB+B3iLscEDpTOKg=)
2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:46:1f:fc:9b:34:11:0b:45:74:fc:b5:65:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=45d76f8301e2803ff161bd6b99e972151a86a390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:47:f9:73:98:14:f5:cb:de:86:e2:a1:d8:
b2:c3:0c:b7:8a:d8:41:2c:e8:7e:76:08:92:28:b8:
48:1a:ae:54:39:3f:6b:ad:8c:38:5d:b3:44:91:e7:
58:c3:91:1d:42:d2:e7:da:76:43:23:9b:b6:5a:93:
4c:88:9b:06:98:46:d0:5c:71:ce:fc:9b:9f:82:60:
40:16:bf:a5:ff:66:d4:48:fd:02:62:24:40:7a:61:
d5:06:a2:ff:ea:00:5b:9f:1b:9d:70:92:cb:91:3a:
c5:a3:18:f4:2b:5b:f3:28:e6:86:20:60:bf:bd:f3:
d3:33:1f:6f:37:51:37:9b:7f:d5:02:cc:f0:89:cc:
4a:97:0b:46:11:8f:1b:4d:5a:2a:3c:f1:e3:fc:dc:
68:db:16:53:88:b9:b0:ec:13:49:00:23:36:53:be:
f7:b9:e7:d3:a3:34:e6:7b:d0:70:e7:33:80:60:69:
3f:5e:b8:55:57:e6:ed:d5:d5:2d:2a:01:06:12:20:
fc:13:98:3d:e3:de:d2:2c:45:ee:89:5c:a9:42:58:
2a:03:5c:43:c5:55:bd:fb:6e:44:ae:8a:63:7b:ab:
f2:b3:05:cb:27:53:e1:17:fc:a2:22:83:b4:4f:e4:
d8:77:29:8b:19:b3:95:e6:a4:e7:a8:4a:0f:b1:f3:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D7:6F:83:01:E2:80:3F:F1:61:BD:6B:99:E9:72:15:1A:86:A3:90
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:0e:f8:39:c8:ae:fb:1a:91:91:52:c3:f9:f4:96:91:9e:
72:2a:b0:46:f0:01:ac:74:84:b2:1c:2e:06:81:8a:5c:06:2c:
13:4f:f8:b7:fd:c7:7f:fb:1e:2e:16:dc:67:2f:b4:b4:79:92:
0c:ef:df:43:c3:28:d0:4a:97:39:ed:de:87:5e:01:f7:4a:f6:
49:aa:f6:6d:85:a1:de:0d:3d:51:a6:9a:c2:00:94:7b:19:2c:
45:15:34:cc:41:3f:81:bb:61:4d:2e:80:d9:28:01:1a:0a:16:
83:8a:90:e1:e9:3b:2a:59:d5:ba:32:49:12:2f:bc:3a:ee:34:
d7:5c:f4:48:dc:d4:f9:b7:eb:bd:a9:ba:b0:3c:d5:c6:8b:1e:
fe:39:6b:6c:aa:3a:e5:0e:5b:0f:33:84:9e:63:64:19:9a:cd:
e1:3e:51:d5:66:38:f6:57:d6:b5:3a:d1:c1:95:f8:b8:b8:19:
d1:f8:32:75:44:40:24:ab:9e:32:89:a4:37:db:4e:e0:9f:75:
04:2b:4a:1b:5e:00:b4:62:63:05:d8:44:a5:b9:7e:08:7a:7d:
40:e7:b2:5f:fb:55:1f:c6:7f:f2:05:ea:26:fe:43:0c:2f:04:
49:e6:69:6a:11:f9:83:9c:35:7f:47:de:50:02:d8:09:a0:bb:
fd:7e:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:42:05 2025 by rpki-client