Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: X3P5bWU5S5cWXjIR/0jDoFuVfy//VFM15/A9wAF4j9Y=
Subject key identifier: 97:21:DC:5A:E0:F8:FE:62:4C:9A:FC:ED:BB:61:29:98:01:BD:49:63
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 019A0223560A63A2517BA51FDC4B9FF6A70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 0ED8
Signing time: Mon 20 Oct 2025 15:01:01 +0000
Manifest this update: Mon 20 Oct 2025 15:01:01 +0000
Manifest next update: Tue 21 Oct 2025 15:01:01 +0000
Files and hashes: 1: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: dJ24UiEt+Dfc8ahFcc0uDjZoxwNeMXGn5KbSvHyCX/U=)
2: NfxOkyabvxkDjJyXjcgpTv_relY.roa (hash: gFCHNUeKHs4QF0iUA6YO68TkrbI25pBG+SYBY+DhWPg=)
3: x5OcpBtDjdmsNegcpqKRcYGfe4I.roa (hash: tztbQVf1Csx2bxGYr7VD6e2RtMD/c7biQ+Jk1Ftm9xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:56:0a:63:a2:51:7b:a5:1f:dc:4b:9f:f6:a7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Oct 20 15:01:01 2025 GMT
Not After : Oct 21 15:01:01 2025 GMT
Subject: CN=9721dc5ae0f8fe624c9afcedbb61299801bd4963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:ad:be:2b:62:e2:bf:9e:70:7a:6a:17:08:
f3:75:dd:17:59:4e:e8:6a:f5:29:81:99:e1:35:91:
b4:26:80:53:42:48:b5:be:cd:22:e3:05:28:36:54:
88:5f:2d:66:c5:96:25:52:0c:ff:20:43:c1:a7:b1:
fe:58:58:c7:4e:74:3e:4e:76:7b:bb:f3:4c:d6:f1:
ff:d5:01:a7:ba:b1:7f:65:08:a5:a0:55:5e:99:36:
12:92:91:63:15:45:7c:53:fc:6c:ec:a3:d9:fe:29:
55:3f:ef:8e:fd:76:11:a4:d3:d2:cc:63:dd:0b:17:
b7:cd:13:00:83:95:8e:44:c9:3b:92:9b:82:fd:ea:
e8:42:e4:3d:23:21:85:ad:ac:f6:42:80:3f:52:8f:
2a:60:28:6a:00:29:06:81:5d:62:4f:e7:b7:db:84:
b5:87:af:31:b5:bc:f7:ea:c1:fa:52:29:f9:cb:5d:
f2:ff:cb:13:68:93:a3:59:8b:df:6a:49:b3:7a:f2:
57:2d:5e:d0:6b:8c:94:ec:e9:3f:d1:17:99:c8:5c:
00:6a:5f:00:1a:8e:7b:ba:e8:86:6f:cf:1d:db:9f:
4b:73:db:a7:8b:10:d1:c2:f3:12:46:65:1e:0c:86:
19:a2:b6:e0:f7:45:35:1e:2f:d8:db:13:1e:9d:6d:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:21:DC:5A:E0:F8:FE:62:4C:9A:FC:ED:BB:61:29:98:01:BD:49:63
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:89:d3:6c:e6:5c:cd:50:08:19:27:67:54:fe:2b:39:aa:b1:
d3:1d:0a:42:30:1d:25:2d:39:14:97:96:c6:17:42:bd:53:2f:
ba:b0:6d:7c:15:0f:ef:89:f3:34:bd:78:a9:f2:17:36:c8:60:
16:60:a7:f4:dd:c0:4e:0e:51:a4:f0:86:7e:d8:55:aa:4a:50:
76:08:02:ee:62:11:80:db:da:24:75:6f:81:d5:c8:20:7e:ab:
a7:71:2b:4d:29:23:7f:79:21:a3:74:94:d3:4f:c7:0d:2d:77:
97:9f:c6:c8:55:4b:b8:b9:be:95:79:f1:89:8d:06:9d:94:80:
4c:18:46:8d:bd:0b:6a:c4:b0:8b:5d:fc:e4:f0:10:13:84:22:
f7:50:77:aa:f8:65:f4:a3:0d:c5:e9:d6:42:aa:c7:44:c6:6b:
c1:97:07:e7:1a:1c:f6:49:90:9f:b0:cc:ba:2f:8c:aa:8f:b9:
20:3b:7c:0b:14:08:73:36:6f:b9:e6:f8:c2:a6:07:83:f3:06:
fb:4f:ca:ed:ae:e2:e4:d7:3d:74:a0:3f:fc:9a:46:e9:bd:91:
04:3b:aa:34:a9:8d:ef:0a:28:85:8f:46:30:e5:17:a1:55:e5:
47:25:d8:7b:17:ff:f7:7b:36:0f:81:3c:63:c7:5c:bf:27:fa:
c5:e9:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:35:09 2025 by rpki-client