Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: eeVYXz3/1nDid3fvsPcCL2IEm3a6vy7/gllS0yvX5II=
Subject key identifier: 06:A5:D2:F6:AC:CE:88:F9:5E:2C:D0:47:E4:53:E7:D0:AA:59:7C:AC
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 019A01112720761223CF159EDC99297BAE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 0A0A
Signing time: Mon 20 Oct 2025 10:01:32 +0000
Manifest this update: Mon 20 Oct 2025 10:01:32 +0000
Manifest next update: Tue 21 Oct 2025 10:01:32 +0000
Files and hashes: 1: 9kQSFx9NBgdYOUE_u_QQ1xrVHjM.roa (hash: nF34ztaCx4lsDpWaNHXR5tZ2u4WJ9TVd0nOUtCtY/2Y=)
2: d2kR6d3TC7hLx-LY_yPrSHmZEqk.roa (hash: bktunr76fWYhMzD/+mLyc6QoNibWe0J9osON7R46Nkk=)
3: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: OByGB+EqqHkYnGcTHm6vjqr3b2t1SLFAAggeP1W/KP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:27:20:76:12:23:cf:15:9e:dc:99:29:7b:ae:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Oct 20 10:01:32 2025 GMT
Not After : Oct 21 10:01:32 2025 GMT
Subject: CN=06a5d2f6acce88f95e2cd047e453e7d0aa597cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:d4:66:ec:0b:d5:fa:b7:4c:de:c1:aa:c9:
97:f2:7a:54:f2:1b:fd:59:71:02:d5:f3:40:e4:3e:
b8:f5:84:71:1b:1d:e2:e5:52:9d:61:14:66:e5:a4:
8c:8b:21:2d:b6:e8:98:df:c6:42:04:fb:1f:12:92:
06:c9:5a:d3:f4:35:43:6d:5a:60:7c:ea:37:dd:e5:
3d:87:e3:b2:3b:33:dc:0c:44:e9:82:fa:2a:fe:aa:
23:fa:27:27:b9:d1:ad:ed:cb:d2:3d:1f:6d:39:50:
04:b9:09:cf:44:59:f1:99:a1:0b:62:41:fd:52:69:
7b:4c:32:0f:d6:77:ec:42:b0:7f:74:4a:91:65:2b:
5a:d9:62:16:22:09:19:51:64:71:09:87:98:c3:af:
17:a3:eb:76:ef:49:49:41:59:7d:2a:70:dc:26:97:
0d:dd:52:5f:69:f1:b0:a0:26:32:c1:b2:02:08:e0:
19:b7:71:10:f3:83:0e:f3:5e:1b:68:49:d2:05:ea:
ef:57:d2:3b:bc:08:3f:3b:27:56:d9:14:1c:24:46:
e6:ad:17:64:6e:41:26:4c:55:6d:b0:82:4a:69:f5:
27:02:30:0e:7f:43:66:89:84:2c:60:f8:a7:4e:82:
e1:0d:8d:fa:1d:9e:6a:cc:52:6e:9a:44:dc:3c:d4:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:D2:F6:AC:CE:88:F9:5E:2C:D0:47:E4:53:E7:D0:AA:59:7C:AC
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:77:8c:67:bb:81:89:64:c0:f0:a4:9f:73:63:98:ac:9d:71:
c4:1f:70:91:98:7e:1c:4b:4f:ee:91:16:86:3d:63:15:8d:3e:
28:52:68:e5:44:ec:dc:a3:be:2a:a7:2f:67:4e:57:62:23:dc:
31:6c:46:79:4b:af:02:47:39:4f:68:3b:65:91:e7:07:70:32:
36:83:7c:09:5c:79:50:98:21:1c:e5:46:23:bb:14:3b:60:d5:
1b:a1:35:55:ff:2e:fa:67:9e:c8:2e:be:af:7b:c4:39:f3:2d:
81:02:da:e3:9c:58:21:78:e7:ce:1f:60:78:a6:f6:85:03:4b:
b4:88:ec:af:b6:9d:05:8e:12:9d:19:2c:7a:7d:30:a7:cc:54:
d2:c7:80:5e:c4:4b:59:86:43:0c:74:0c:f9:19:d3:24:c9:12:
d8:f9:52:55:5a:83:f3:e3:c4:a3:f6:af:5d:3e:a5:a2:67:8f:
1f:63:86:56:ca:a7:ec:85:10:4b:4f:da:ab:b8:ee:7b:5a:62:
44:2a:cb:38:38:bf:53:69:f0:4b:72:e1:22:c2:f4:1f:59:99:
06:5e:91:c0:4f:b6:76:39:96:c3:b9:d2:46:73:d6:bd:3e:0e:
a0:d8:e8:09:96:7d:ff:55:8c:ce:82:7b:14:61:e3:c0:fa:62:
e4:66:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:36 2025 by rpki-client