Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json)
Hash identifier: v8lnRutuj/9ZeyVHMkD2lXKFhKRORAbDDMkBQz5oTrw=
Subject key identifier: DC:06:7E:ED:61:69:DB:D9:5D:CA:D8:A1:63:E4:93:79:D2:EB:FF:93
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 0199FD6B40541A202D525CBF0E73DBB47AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
Manifest number: 1286
Signing time: Sun 19 Oct 2025 17:01:28 +0000
Manifest this update: Sun 19 Oct 2025 17:01:28 +0000
Manifest next update: Mon 20 Oct 2025 17:01:28 +0000
Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: sIdwZewaKL7goZmjsscygRbs4Py6kleLcmpXGKY3QKA=)
2: DnlnaiUOn3bGRjdw-Yb1fkUsNto.roa (hash: E1ibhwBfmIcFn7h/JxzOSZ/iplWkTSQE9ZGFZ1Ek2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:40:54:1a:20:2d:52:5c:bf:0e:73:db:b4:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Oct 19 17:01:28 2025 GMT
Not After : Oct 20 17:01:28 2025 GMT
Subject: CN=dc067eed6169dbd95dcad8a163e49379d2ebff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:39:3a:02:f8:6c:e9:76:b6:fa:cd:8a:1c:
a3:ec:44:d9:92:45:cf:2f:9d:c6:b2:af:b4:ae:8e:
97:01:24:3c:5e:f3:d9:f8:d0:ef:b0:b0:ce:33:fb:
87:bd:4e:ad:d3:c9:f8:7e:16:ea:b7:88:b9:7e:97:
4d:3a:14:24:de:c8:69:87:be:d2:d2:5c:3e:d8:99:
7a:0c:3a:04:15:6b:da:1f:42:27:42:e5:f2:23:81:
44:cd:1f:8e:be:6a:12:fb:24:c6:44:fe:00:7b:4c:
6b:97:eb:aa:7a:5e:bb:1f:a5:d9:f2:c3:a5:b5:01:
7d:8d:a9:5d:43:63:d9:fa:bc:66:e4:88:f1:60:ca:
c4:8e:0f:27:ed:68:a1:0e:cb:35:97:67:30:94:04:
19:ef:17:82:9b:ca:4b:d5:3b:4a:2c:ee:dc:e5:22:
7f:b9:05:c4:12:94:e5:c5:75:61:bb:94:7b:9a:e6:
bf:23:80:7e:a9:4d:de:55:fe:d4:6b:69:c5:be:f7:
9b:cf:ff:e8:8e:76:14:1a:76:9c:2a:ca:f5:4b:03:
fa:36:f7:96:18:1b:6d:d9:81:e2:cf:75:db:ad:c5:
e9:38:2d:99:6f:a2:5a:d3:3b:31:07:d6:49:a0:07:
29:fd:54:f7:dc:ac:c3:ac:e9:6d:a1:d8:59:ac:1a:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:7E:ED:61:69:DB:D9:5D:CA:D8:A1:63:E4:93:79:D2:EB:FF:93
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:49:c9:43:5d:15:5e:6b:e2:0a:76:66:71:67:4e:f7:3e:46:
ca:8c:e0:63:31:0a:e8:75:14:8c:8b:a7:e4:01:69:50:91:b6:
47:f8:79:ed:cf:b8:19:35:bf:af:b6:c4:96:2d:a8:60:ad:1a:
94:24:b3:01:4d:77:cd:37:7b:14:c6:38:9b:77:e5:3d:8c:b9:
8f:55:e2:eb:36:9b:aa:b5:59:9e:49:ca:f8:de:cf:83:d7:86:
4b:fd:09:61:e8:3f:d9:84:a0:2d:3f:70:7a:d4:c6:36:b6:c7:
91:b0:33:01:65:ef:4f:b8:ef:6e:6c:ea:82:8c:68:4e:e8:c9:
15:79:22:f4:80:45:93:ea:3f:99:b3:ff:33:2f:c5:6a:3f:55:
ee:86:11:bc:c8:d2:a6:2d:0a:aa:e0:69:9a:d0:5f:18:23:40:
f0:11:79:f5:1c:22:d7:9a:96:59:a8:f0:40:f4:5e:74:bd:c0:
33:62:56:50:2c:3b:de:44:61:18:21:58:e4:57:d3:bc:47:de:
e3:a1:70:7f:3f:a4:7e:ef:e9:dc:4c:bd:7b:aa:9b:dc:1a:3a:
2c:f7:bd:bd:50:a5:c1:d5:4c:8a:07:6d:ea:1f:2a:97:98:b3:
e6:0c:3c:64:ee:06:91:d6:e2:5c:bf:85:48:b9:20:ed:c4:37:
32:e8:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:48 2025 by rpki-client