
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File: DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier: iMrDSb9n7Ji1p/+Kbh3dwJXh3uz1jquw8aQHFX1y9po=
Subject key identifier: B2:01:75:88:79:C1:74:CD:19:DB:3A:08:89:B5:8A:9A:CA:42:7C:C5
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial: 0199FAD85AC740009EA66E4D930CADDF4048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number: 0988
Signing time: Sun 19 Oct 2025 05:01:46 +0000
Manifest this update: Sun 19 Oct 2025 05:01:46 +0000
Manifest next update: Mon 20 Oct 2025 05:01:46 +0000
Files and hashes: 1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: DXpaMC+JOE3uGXYo1qaunappnHMl9e1IyEARSbmeLiE=)
2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:5a:c7:40:00:9e:a6:6e:4d:93:0c:ad:df:40:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Validity
Not Before: Oct 19 05:01:46 2025 GMT
Not After : Oct 20 05:01:46 2025 GMT
Subject: CN=b201758879c174cd19db3a0889b58a9aca427cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:77:38:19:3c:c2:17:e2:be:41:ef:59:91:
47:f9:69:94:b7:7f:1e:d8:0b:23:ef:51:6d:07:f7:
26:d5:4e:b8:27:13:5e:3c:29:08:05:41:d6:05:8c:
b8:98:ca:28:01:77:4c:fb:56:aa:72:8f:c4:fa:65:
f8:13:d5:1a:17:f3:2f:1f:be:a1:49:fd:5d:69:91:
b9:3d:11:2a:e3:f1:25:5d:4e:13:a3:99:7e:ca:06:
fb:8c:f6:6c:44:a8:83:c1:ae:99:25:0e:07:d4:a3:
21:8f:21:da:75:f7:f2:17:09:7b:ed:45:7f:a1:26:
44:6f:5f:24:f8:94:0e:2e:30:d2:96:27:83:32:3d:
11:e5:38:8b:b4:fd:6f:1a:ce:f3:ca:fd:a0:76:b3:
2b:02:e6:81:0a:25:4e:66:7f:21:4e:e6:9e:e1:4f:
2b:e7:0e:1f:ba:fc:5c:55:4b:80:02:47:f1:e3:c4:
d8:f0:af:e7:09:18:d3:63:cf:d9:9b:6c:13:6f:bd:
2b:cb:11:5b:ac:bf:59:b3:a5:13:68:fd:de:57:65:
63:d0:64:f4:ea:f3:dd:15:f5:c0:c3:ab:d0:ae:5b:
01:cd:ef:b8:58:a9:58:15:52:fd:fb:12:72:2a:88:
58:be:58:ad:ec:9e:88:99:68:13:ef:8d:5a:dd:69:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:75:88:79:C1:74:CD:19:DB:3A:08:89:B5:8A:9A:CA:42:7C:C5
X509v3 Authority Key Identifier:
keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:43:86:64:95:8c:59:22:01:6c:9a:87:75:cc:87:fa:cc:71:
e7:aa:f1:cf:9d:7e:6a:83:c0:7c:03:e4:bc:f2:4d:23:f2:51:
bf:83:54:a5:74:73:04:fb:02:ef:da:56:12:60:49:fd:d1:7b:
00:bb:2e:4d:ca:01:a7:e6:59:04:14:c5:c7:91:4f:38:b5:f7:
5e:b7:90:fd:81:77:d9:03:f5:33:d6:3b:ca:ec:30:32:52:16:
5c:7b:0e:1c:66:f4:f6:77:36:d5:59:82:d5:cb:f5:0c:7d:59:
1d:3d:fa:be:21:2d:5f:60:c0:b0:94:54:8a:90:8f:3b:a8:1f:
37:43:01:df:5e:11:20:f3:99:1e:6f:e4:e0:b5:c1:2c:b0:ff:
4f:56:fc:a0:17:ec:ca:53:8f:fa:e8:43:b8:58:ae:03:d6:71:
cb:03:6b:04:ed:c8:2a:d8:1c:b1:de:cf:b6:dc:4f:07:8b:a8:
d1:38:8d:f9:8c:8d:3d:21:34:46:66:7c:01:a9:6d:25:48:7e:
f4:9d:12:c4:c1:e6:63:90:3a:7f:17:03:0d:75:be:23:26:5e:
9b:fa:2e:0b:38:15:fe:df:af:04:bf:5b:e6:76:df:6c:47:5c:
41:32:57:b4:81:ba:32:1c:b6:2f:ad:94:b6:a1:50:4a:73:ba:
ec:0f:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:24 2025 by rpki-client