Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: nkH+b12tyHsH/o+g7EwaXhv66GYe/rLVYN4sjLGncsQ=
Subject key identifier: 0E:75:93:19:2E:92:62:90:C0:85:4C:1C:F7:D1:96:C2:19:FE:70:08
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 0199FC58A6273952DD9CBA788E7D943B3A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: 28r3lezFt1DhHYHa7zUp6dp6gek.roa (hash: UnpOGH6h0Mhuee/PLRufj5c9ShCIaJkFN7bgA7Z1mp8=)
2: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: migaOjJbS9D4e59I1Qk2ordDnd8ei8Pw7eDYDqZ9nrE=)
3: S3gytHIiWuDnii46Cee6MjqDODU.roa (hash: WjQ4G+4EZrW+UzIf8d/g5pUPAeGGv9rfo0G8Gxn9x1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a6:27:39:52:dd:9c:ba:78:8e:7d:94:3b:3a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=0e7593192e926290c0854c1cf7d196c219fe7008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:83:5b:30:0f:b3:a6:c6:59:49:04:a7:57:
3f:59:d3:61:ef:f1:70:17:13:4c:fa:7a:7b:fb:0c:
7c:03:cb:e3:b2:6d:ca:fd:1c:02:7a:3a:66:a5:f9:
77:be:ef:3b:1e:3a:21:7b:a3:87:98:5c:db:a1:34:
dd:61:2a:39:62:e9:12:75:26:61:f6:51:a8:0a:ff:
b9:24:79:1a:d7:d4:fe:1b:20:63:32:60:6e:c4:4d:
23:3b:53:4f:d9:7a:a3:fb:ff:4a:ca:de:d1:a5:f6:
7b:01:a4:09:80:2b:60:e3:88:49:ef:a2:37:d4:29:
3e:4c:cb:cd:81:f5:89:85:8e:e9:39:d7:99:89:47:
d1:19:8d:48:92:ad:87:57:2d:08:1d:93:81:0c:66:
31:25:ac:45:11:23:12:d3:46:34:ee:dc:16:a8:95:
02:19:8b:0d:95:30:91:bf:6f:1e:c9:11:f4:a9:b9:
96:f2:5d:aa:c0:9d:7a:ea:e2:04:20:4c:8c:79:45:
e7:3a:87:ab:38:9a:ba:67:2c:20:60:85:ec:4b:f2:
fe:a2:d8:fc:f2:65:ef:25:3c:7e:57:23:cf:db:85:
d9:91:d3:8e:89:b3:c7:4a:d7:85:39:08:ce:4a:c3:
a3:f2:04:29:74:fd:61:71:89:8b:2c:57:6d:05:69:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:75:93:19:2E:92:62:90:C0:85:4C:1C:F7:D1:96:C2:19:FE:70:08
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:00:7c:00:31:74:8f:76:13:a6:36:e5:cb:e0:7f:7f:4f:d8:
52:ff:d1:da:9f:02:d9:ba:9d:68:77:72:ee:71:05:e8:f6:69:
00:c6:d4:43:8d:50:10:fa:9c:56:d0:87:bc:f0:7d:f7:c4:1a:
a4:70:d5:69:45:5e:47:0a:03:0a:c3:69:4e:cb:cb:0e:89:fc:
12:6f:51:b6:bd:0a:1f:92:06:17:fe:5d:e3:65:9b:ff:0b:54:
65:8e:6a:0d:c0:58:0d:7c:31:36:b4:59:ee:21:26:98:d2:ff:
f9:86:3a:7e:b4:9f:97:cf:5e:12:e8:c8:6e:f9:82:ee:c4:d7:
d6:11:4e:50:d8:a7:0d:32:d1:53:45:56:9f:c0:aa:6b:2c:f7:
c3:28:96:f4:d8:5e:b2:0d:58:8b:3f:dd:e1:08:35:2a:64:36:
07:b4:50:e1:de:7b:82:fd:ef:12:f1:34:33:d7:ef:98:2b:cc:
34:e5:44:ce:00:6f:69:a3:da:69:47:fa:a9:39:0c:84:52:c2:
12:98:2a:5a:f0:f3:00:da:c9:0f:1d:94:50:56:8b:71:3f:a5:
2b:a0:11:67:20:b7:71:7c:81:eb:19:4b:ba:60:4f:90:f5:7a:
20:61:99:e0:7b:c5:af:70:21:41:34:2b:5c:b4:0f:7a:fc:d0:
67:aa:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:34 2025 by rpki-client