Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: uLvim6RRh1T+iGhYKgSDPGEVKxE7MI/g1lZNOsg0YMc=
Subject key identifier: AA:75:57:8A:B1:58:50:F4:A5:40:C2:5A:1F:C1:91:76:A7:09:29:BE
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 0199FBEAEC1C001BF06B6EC4C6E9406DFE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: lDNcOF1kLvHgKW7G8UcZ6D4HeY05EnYUpRbmLK8sz2k=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ec:1c:00:1b:f0:6b:6e:c4:c6:e9:40:6d:fe:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=aa75578ab15850f4a540c25a1fc19176a70929be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:b5:1e:6b:2b:62:40:a2:6e:62:70:b2:c1:
4e:af:b9:55:07:0e:d0:06:1b:ab:1f:c4:ea:c9:b2:
74:59:00:1f:c1:49:78:3f:3b:9f:83:6a:97:e6:ba:
e2:b5:a9:a6:a1:64:08:3d:1e:ca:60:34:8c:87:e8:
d0:5c:3c:71:f3:9f:fb:a9:33:f1:42:be:d4:c2:e9:
94:d2:da:18:78:64:96:c6:14:48:b0:a9:1a:81:45:
35:d8:a7:30:1d:1a:fc:26:b1:e3:d6:04:8d:13:81:
46:ff:76:38:00:ff:96:c3:8e:0c:32:79:a8:50:5c:
f1:81:72:ed:35:4b:19:41:e5:a5:cc:fa:38:b6:15:
fa:c5:69:71:f5:28:09:53:4e:52:4e:06:ac:91:0b:
bf:66:06:54:fa:dc:89:18:24:2b:89:90:42:79:73:
d4:c2:03:e4:b3:a6:04:6d:92:74:74:d2:05:00:4d:
32:28:7b:d9:19:82:ba:3b:bd:63:da:c9:03:93:18:
e6:07:0e:d1:07:af:dd:1d:5e:f0:75:a7:e2:50:50:
9c:a2:9f:c4:90:5e:52:98:e3:61:fd:ae:12:e5:ef:
83:79:da:98:0d:72:62:4d:1d:68:35:54:22:68:79:
b3:28:9b:f9:58:64:9a:96:c0:6a:7c:74:0e:63:6f:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:57:8A:B1:58:50:F4:A5:40:C2:5A:1F:C1:91:76:A7:09:29:BE
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:64:eb:f3:1a:ee:9c:a1:e8:4f:82:4e:6b:aa:2f:9a:e6:ac:
2f:0c:b3:8e:11:73:41:54:07:52:05:52:19:70:02:b6:27:4e:
8a:6b:bf:d6:0e:db:10:87:62:ce:22:0e:f6:04:83:c9:e8:c4:
6e:0c:82:2d:20:7d:12:44:ca:80:5f:a7:32:27:5c:e8:7b:b2:
37:e4:fd:9e:45:de:21:ad:fa:1f:c3:bb:a3:d9:6f:25:47:9a:
68:63:c7:b8:6b:03:8d:84:4b:c9:10:1c:e4:88:42:b4:4f:05:
cd:0d:55:47:dc:f7:ee:e2:05:91:9e:1f:f5:54:0c:c1:88:2a:
dc:09:8b:03:a7:16:b8:1b:fa:82:58:59:43:04:c1:1c:96:9e:
21:e1:9a:8a:91:55:2c:07:b1:ca:da:93:13:fb:e1:8b:fc:ca:
6e:e1:f2:0b:2a:9b:89:f8:2b:7e:ce:b2:d3:b3:d0:51:79:6d:
b0:f6:ea:0a:a7:0e:07:25:ab:32:11:5b:9d:c8:b5:d2:1f:0f:
a5:93:f1:fd:75:21:00:da:a0:db:a3:cb:5a:b8:a8:ae:ac:c7:
c6:ca:99:d2:ee:53:04:77:07:be:70:46:be:76:d4:37:48:cc:
aa:56:1c:bb:99:85:9a:c7:a6:89:48:26:30:52:a7:19:63:81:
64:88:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:04 2025 by rpki-client