Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: NopuFVAO3+KxY19KIHA4rtZ5iKdQYImAABkhGFmH0HY=
Subject key identifier: 72:8B:54:26:1F:C1:39:24:AA:66:27:97:76:A5:1F:DC:0D:C3:B8:1E
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 0199FC58C5C141175D941B53109ED56106BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1303
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: OF+BR/MGFELlVVdeLVDqiGCnmDhB6JW8DI1tL2maWB4=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c5:c1:41:17:5d:94:1b:53:10:9e:d5:61:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=728b54261fc13924aa66279776a51fdc0dc3b81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:e0:1d:b1:07:02:ea:c8:32:6c:c2:49:6f:
3a:49:59:73:51:85:d5:4b:72:b1:45:78:ed:e2:0c:
75:db:30:d2:36:c4:fe:02:5d:c2:33:80:c7:04:b4:
59:5d:b9:74:a5:e5:45:93:b5:06:40:35:54:aa:31:
2e:0a:ff:5d:8b:26:42:64:ee:55:a9:15:49:8c:ad:
ff:c9:a8:70:7a:e7:89:f7:c8:f4:6c:da:b3:ef:36:
1d:f7:e3:c2:84:a8:3d:be:04:d7:9b:a9:aa:c9:94:
2c:d0:01:88:ed:cb:4b:ca:eb:f4:00:9d:f3:90:57:
b1:eb:be:94:35:25:d8:48:c7:ea:7b:fc:57:8c:23:
ea:f4:6e:37:44:6c:5d:66:7c:85:f4:2e:99:76:a2:
03:73:b6:88:96:08:54:5d:dc:04:d1:5e:ec:ae:9d:
ae:3d:10:52:65:eb:a5:a9:c0:ba:4e:c7:e4:aa:c0:
63:d0:0a:3d:1f:1e:86:55:15:62:5a:e2:5a:68:1e:
56:cb:f5:52:ac:ac:cd:c6:2a:e6:80:d9:c4:46:b7:
26:93:43:42:a3:87:8c:b7:67:f7:84:b1:db:d1:95:
b2:9c:20:6e:d9:e8:04:0b:66:38:8a:a2:e8:ff:c6:
99:5c:2d:2a:e2:a4:6a:49:75:e4:43:67:67:4e:3b:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:54:26:1F:C1:39:24:AA:66:27:97:76:A5:1F:DC:0D:C3:B8:1E
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:70:ce:f7:b5:f5:60:33:c0:37:83:35:85:1c:6d:6d:71:07:
68:63:4c:10:9f:5d:a1:93:f5:87:50:2c:fa:b7:54:ad:79:bd:
27:08:cf:cf:af:7e:54:12:09:48:3c:27:62:33:c7:34:7a:e5:
40:63:4e:f1:c1:93:43:96:a7:46:87:ec:c8:18:d2:41:85:e9:
b0:8f:d4:f5:56:be:32:56:5e:07:df:29:1a:9e:eb:1e:15:d3:
c2:46:30:e9:39:a9:b2:83:e9:be:c7:41:97:77:88:f1:a3:63:
45:46:62:f5:3f:ca:b0:96:14:ac:15:ec:da:79:23:cb:b8:3e:
6c:08:40:f9:ab:da:4d:f8:e2:24:30:dd:aa:a9:5e:e2:d0:ec:
b6:8a:85:5e:cb:c1:5e:6f:5a:33:f5:22:97:46:dc:95:6e:2f:
10:d8:ad:7d:48:cb:17:d5:7f:75:a9:35:b6:9b:1d:ee:4b:3f:
0e:0f:bd:68:6a:5b:d1:cb:8b:83:90:b5:fa:a6:8a:20:24:e7:
83:83:2f:b6:9a:30:0b:92:a2:e3:ce:2e:e6:7b:83:75:bf:b7:
0c:16:61:1e:46:6b:50:94:53:22:de:bd:c2:7e:c0:02:87:1b:
ac:8f:ae:84:a0:06:36:9e:10:13:04:9d:b6:2c:68:3a:a1:66:
0f:72:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:53:56 2025 by rpki-client