Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier: i+vqbp4RLUvvJAwpl9OKkjXshlD+MFIXSia1dvxT5GE=
Subject key identifier: E0:47:6B:E8:A6:F8:96:20:33:CC:AC:1B:61:37:B6:55:43:E2:C7:C5
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 0199FE7D9CC02C2A00878F16BCD573ACE2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number: 167A
Signing time: Sun 19 Oct 2025 22:01:08 +0000
Manifest this update: Sun 19 Oct 2025 22:01:08 +0000
Manifest next update: Mon 20 Oct 2025 22:01:08 +0000
Files and hashes: 1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: O4YgxmzMSegwHP0JEuYQJSR3E0tDNFyLyd4LAtccPWw=)
2: egtmxNDK9FDAgrarU-Xyuo-QkfI.roa (hash: e278lOu7Zhdc/1PtGLzkkZXNU5WcrL6PKLI2BzSWdWQ=)
3: qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa (hash: AiZ+gWtLdz0jof3tMOVdLJ+BBsLKxSxUlK2q0zbs/tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:9c:c0:2c:2a:00:87:8f:16:bc:d5:73:ac:e2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Oct 19 22:01:08 2025 GMT
Not After : Oct 20 22:01:08 2025 GMT
Subject: CN=e0476be8a6f8962033ccac1b6137b65543e2c7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:b2:34:71:4c:ea:e7:27:d3:6a:5a:6c:5b:
10:1c:cf:2e:a5:aa:98:bf:11:46:49:c3:3f:aa:c1:
83:55:d2:d6:e6:35:19:e4:48:ee:ad:66:f9:40:01:
da:63:1e:d3:53:06:86:fb:a6:86:00:f2:f1:f2:28:
fa:69:3b:63:ad:18:81:fc:0f:91:90:21:d4:65:1f:
a9:73:1a:09:b7:5c:16:2f:16:5f:db:20:2b:b2:0f:
91:33:18:1c:cb:04:77:5e:cf:66:02:57:30:b1:5e:
9e:24:f1:aa:f8:f6:7a:69:42:76:89:7e:46:46:ab:
77:c7:d8:29:e3:e2:f6:1c:41:d9:eb:ee:75:2b:34:
24:3b:c1:d5:93:c2:d0:e7:43:75:ae:68:d7:4e:13:
61:43:65:74:d8:34:d6:93:82:6c:7a:45:c9:86:31:
6e:46:51:f6:1c:53:fe:72:3b:1f:79:16:2e:4b:98:
6a:4d:92:4e:e9:4c:ec:d1:9b:64:62:09:51:57:b7:
fb:83:fd:66:66:32:66:df:37:95:76:da:32:2a:51:
5f:05:90:40:bc:f4:8a:cc:7f:f4:60:bf:a7:b4:48:
54:9d:cc:85:74:b5:74:35:52:d9:36:1d:47:45:8d:
74:0e:cb:64:14:91:8e:65:32:a2:0e:26:13:1d:4d:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:6B:E8:A6:F8:96:20:33:CC:AC:1B:61:37:B6:55:43:E2:C7:C5
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:46:d3:fc:47:3e:1a:f4:03:94:ef:1a:db:94:1c:ae:1c:8b:
c5:53:28:6f:8d:ae:7a:c6:8a:a8:1a:a5:2b:1c:24:cb:c6:cd:
9c:c0:e1:4e:82:66:75:83:31:d0:5d:52:71:2a:b8:5f:ef:02:
08:a2:e4:4b:fa:5d:b7:6f:e0:76:2a:c1:06:62:32:e8:30:34:
7f:2f:51:ae:fe:a6:91:90:e9:b1:05:74:24:2e:f4:e7:f3:79:
01:3c:1b:75:21:1e:07:0d:0c:1c:8b:96:52:44:cd:a9:97:c2:
7d:43:47:fc:e5:7d:4d:81:ce:24:8e:ee:1c:fd:a3:b1:7c:5e:
a9:77:55:fa:dd:16:bb:72:59:d2:86:ab:4b:72:fe:e8:f2:05:
9a:00:a8:fa:66:d6:fc:f3:db:ae:76:e9:84:bd:81:51:65:27:
11:3d:26:ec:3c:06:92:a4:bc:a6:df:1d:3e:2e:59:1e:4e:9a:
ab:a5:08:bc:4b:82:d0:51:bb:4c:cb:27:b9:b7:09:7c:f0:a3:
5a:dc:82:3c:53:88:c2:25:39:6c:b1:c4:55:c4:41:a3:be:29:
0b:cb:0b:ba:00:04:f6:2c:f6:d1:51:60:de:85:71:c8:94:9d:
d9:be:82:d6:c1:fb:3d:61:1b:ce:01:1d:14:60:5b:1a:81:fb:
85:85:2a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:49 2025 by rpki-client