Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
File: DigOW_CXDHM8w0vBvnkmdZrDHe0.mft (raw, json)
Hash identifier: qR2100m6MM0t5LhzPofx3LjOH+N+2OaNRjKmqtm+PWM=
Subject key identifier: E5:F5:0D:E5:BD:EC:D8:40:2F:CE:52:71:17:B5:13:24:7D:4D:96:C1
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 019A01B5A4DBEC6967A407D2724D750D182D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
Manifest number: 13FC
Signing time: Mon 20 Oct 2025 13:01:12 +0000
Manifest this update: Mon 20 Oct 2025 13:01:12 +0000
Manifest next update: Tue 21 Oct 2025 13:01:12 +0000
Files and hashes: 1: DigOW_CXDHM8w0vBvnkmdZrDHe0.crl (hash: WxX+PJxrFUNmrxKamW2cEM5KAQSGm/XVTqaT716FZWM=)
2: nitfhwT5zdpxb50hXlk4jgWzdQE.roa (hash: Cnmglk4tBEqztiio9IkWbUek+XEbAwr0Bjp+MAHYUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:a4:db:ec:69:67:a4:07:d2:72:4d:75:0d:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Oct 20 13:01:12 2025 GMT
Not After : Oct 21 13:01:12 2025 GMT
Subject: CN=e5f50de5bdecd8402fce527117b513247d4d96c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:92:69:46:59:6f:64:6e:a9:75:d1:37:b6:
63:31:2f:9e:18:25:97:dc:8e:b5:0b:f2:79:9d:61:
f8:89:c5:0c:38:f7:cd:fb:26:ad:be:f6:d2:ee:be:
5a:8e:8f:64:ae:17:e9:c9:a3:0e:56:fe:15:43:5e:
9c:3d:c6:f6:55:69:ca:87:f2:51:e5:d3:03:4e:b0:
db:2b:cc:07:74:72:74:9c:ae:03:6a:85:cf:44:c7:
1b:29:bf:c4:14:8d:9e:c1:17:6d:99:dd:86:93:68:
eb:ed:9e:9f:ae:69:24:c5:aa:59:12:54:42:b3:8a:
8e:5c:92:70:44:97:66:18:39:1d:09:3f:ce:83:66:
ed:ea:ba:63:35:3a:ab:0d:9d:f1:b2:bb:85:e4:6f:
58:db:4f:b9:36:3f:51:d5:38:17:ab:ac:e4:5c:a1:
90:e5:00:e7:8d:b5:78:0b:b0:07:c9:b7:3a:c4:92:
dc:bd:96:88:68:4e:18:66:a7:b6:02:f1:95:40:8e:
a5:0a:71:59:2d:b7:ad:db:3d:cc:72:0c:48:aa:bb:
fa:bd:82:95:90:70:94:4e:af:79:26:3e:94:0d:6c:
51:c1:df:b0:7a:de:e6:6f:f5:7d:a3:27:05:fd:7b:
1b:b8:c5:0c:1c:29:54:1b:9c:2b:34:9e:1f:73:fa:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F5:0D:E5:BD:EC:D8:40:2F:CE:52:71:17:B5:13:24:7D:4D:96:C1
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:82:56:a9:a0:c3:2e:62:bc:ca:94:89:d2:88:e0:c5:5b:a5:
2a:64:b8:63:bf:d2:4d:05:5d:05:47:6e:e0:42:38:41:5e:d5:
7c:aa:2f:98:41:9c:17:ec:e6:c7:06:87:0f:dc:4a:cf:c0:27:
6a:8e:fa:ea:18:03:a0:c7:13:88:42:7a:31:43:22:83:7a:0d:
85:fd:df:71:41:ca:f9:09:f8:b7:b9:b2:7f:74:b2:2e:65:f5:
3b:26:bb:89:51:8c:73:20:f3:81:cf:44:2f:ee:26:e2:4e:06:
a4:2e:d4:b0:4d:ee:e4:3a:6d:ab:df:ea:f1:bb:f6:9f:b8:90:
bc:a8:4d:46:16:f6:e5:d5:43:77:d9:0d:83:8f:bc:aa:78:06:
6c:27:5f:12:56:b4:7f:83:c4:40:92:6c:a3:7f:fa:c0:88:18:
84:22:13:e4:f4:5a:22:d8:b9:74:51:b8:14:f1:f4:13:31:f8:
0d:b6:ef:13:59:ae:94:5b:6d:f9:20:97:20:f8:6b:89:33:ee:
5e:f8:68:28:da:3f:e2:31:02:e4:b9:76:a2:09:8d:c5:81:0f:
39:32:51:60:75:a4:16:04:2b:df:41:c2:48:89:6e:e0:fe:49:
e6:81:b5:c9:12:40:83:b2:2a:9a:b1:d4:eb:80:c9:25:33:cf:
78:86:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:36:04 2025 by rpki-client