Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: T/fzWZO5qqjo0ZFThIPUWTDxC1wOiDP56zesLU6b7hc=
Subject key identifier: C9:7F:DD:A8:6A:A5:AF:F9:E8:5A:43:6E:28:14:80:EC:C9:B3:8D:4A
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 0199FBEB12EBC33191473CCF5937DDD8C55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 11BC
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: Lgykl3mvI01B85x480ts30B/gVD8mVlNQ4ks405UjlU=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:12:eb:c3:31:91:47:3c:cf:59:37:dd:d8:c5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=c97fdda86aa5aff9e85a436e281480ecc9b38d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:4f:0f:c7:da:7a:0f:67:3c:85:c7:c8:1f:
bc:ff:20:b4:f6:6d:c5:9c:6d:e3:f6:1b:cd:e7:54:
81:a9:5c:f7:c3:f1:11:32:56:b2:ed:35:a7:be:50:
39:13:d6:87:3e:2d:1a:23:93:1a:69:fa:3d:23:61:
d0:9c:ab:46:bd:94:20:84:e9:2b:6a:87:7c:de:19:
cf:b3:f3:95:38:d4:9c:da:8c:8e:04:53:bf:d3:2a:
0b:b5:3b:39:63:ac:75:b8:e1:1e:da:89:83:a2:44:
4c:17:b3:dc:d2:f3:cc:79:7f:d7:86:77:db:51:66:
18:7a:ae:7a:e3:1a:24:d6:04:f8:0b:87:17:18:6c:
48:40:cc:a5:78:35:40:76:0d:fa:48:58:c8:af:cf:
67:db:d5:97:ef:7f:3f:80:1f:c1:7a:58:59:41:72:
ba:c3:38:79:b1:02:5d:64:0c:a7:09:f3:de:6e:d3:
63:66:67:59:c5:1f:bb:18:d1:b4:de:0c:9c:0f:80:
40:f2:15:92:78:9f:e6:15:22:af:59:51:e3:b4:aa:
ad:18:61:5c:09:1e:40:b7:9e:ea:4b:05:37:9d:7f:
76:78:90:bc:f0:94:eb:7d:3b:33:bc:88:e8:92:49:
35:f4:e4:05:72:28:b3:a8:b7:f6:ef:92:40:31:63:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:DD:A8:6A:A5:AF:F9:E8:5A:43:6E:28:14:80:EC:C9:B3:8D:4A
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:55:51:89:96:6c:fe:a7:ea:2d:aa:d8:3a:98:e0:48:52:17:
f4:95:f3:8e:8f:c1:2a:5b:52:34:09:e2:4f:84:6a:65:59:ac:
0d:36:b1:0f:df:41:5b:ab:53:0b:33:e2:3a:8a:ef:7f:11:b4:
e2:9a:4b:28:a0:c4:d9:e4:22:9c:b6:3e:ae:67:24:9c:74:ec:
80:66:9f:af:6b:2a:b8:3e:9a:1d:fb:82:fc:6f:5a:c7:35:63:
b6:69:c8:36:8b:0a:83:85:7a:d1:37:d3:d2:8b:d3:3f:f6:7b:
2e:63:e5:32:54:fa:dc:c8:4a:10:2b:8c:23:16:ff:53:aa:df:
e4:4b:80:25:60:76:0b:26:6d:7e:03:93:ad:df:eb:10:07:4d:
c0:e5:d3:2d:a1:53:0a:c8:8e:cf:97:58:3b:ae:cd:37:46:84:
fb:72:08:24:6e:ac:55:cc:65:44:30:f7:ce:f9:c7:95:d3:6c:
be:86:e3:cc:7d:18:ea:67:c8:d2:dd:21:0a:8c:8b:7f:e4:24:
4c:6c:43:7f:33:58:b0:05:5f:18:9f:f6:8d:70:46:a1:0c:f7:
c2:7f:35:ec:f7:95:7d:10:54:57:2d:3f:ca:5e:39:aa:f8:c7:
81:ac:68:90:6c:0d:26:a6:ef:af:dc:9f:0f:2f:9d:7c:cd:7c:
b9:1e:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:30 2025 by rpki-client