Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: PW6CJ7cnsdZ4KpU/BiyBqia+j6b7WI7TcIlgMGdsqWM=
Subject key identifier: BF:49:62:BD:B3:11:8E:C1:3E:E4:45:8F:B0:B6:0B:14:8F:07:31:D5
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 0199FDD8FE7E9AD4545C4803C5FF3D980326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 15D4
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: uHZNsVgoRxNmFMnC+qoaQrif/4RF+1K265/nEVNW9ME=)
2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=)
3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fe:7e:9a:d4:54:5c:48:03:c5:ff:3d:98:03:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=bf4962bdb3118ec13ee4458fb0b60b148f0731d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:d8:26:08:35:8c:a8:f1:b0:0a:48:8a:9a:
a0:ba:4f:7b:32:5b:9a:e3:d2:d1:25:3d:33:ba:49:
12:74:2a:a3:73:83:18:19:e2:78:a3:79:80:18:c4:
ed:33:b3:07:de:bf:2c:43:11:2a:45:ce:e5:36:a1:
1e:5a:81:ad:77:f7:2e:99:1f:6c:e4:64:53:95:90:
9a:8d:9e:70:94:dd:2c:18:43:ff:3d:d7:82:37:8b:
56:c7:ff:39:77:14:dd:c0:35:3b:b6:9c:4f:7b:72:
ef:8c:6a:56:b0:c5:f8:b0:48:0f:1e:59:38:23:67:
fd:4a:80:c7:bf:31:bb:2d:bc:de:0f:ae:80:f9:33:
87:98:c4:b7:ba:f6:d8:33:6a:c1:09:0d:13:56:f8:
a3:ce:4c:ef:81:5d:1e:77:55:9d:ab:42:a3:8c:f2:
99:fb:f5:07:f5:ed:6f:e1:f2:29:34:29:51:00:b1:
f0:42:1d:0a:bb:a1:65:df:6a:66:6c:6b:42:cd:b6:
66:6b:f3:b9:73:6f:77:41:af:8a:7c:2d:a3:a7:64:
68:a8:d4:02:8f:52:f8:a4:c5:61:0c:37:e3:3c:92:
5e:e5:66:43:3f:41:f2:f7:32:12:50:02:97:b6:8a:
9b:a7:c2:fc:e0:af:ec:e6:07:95:0e:8f:63:ec:0f:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:62:BD:B3:11:8E:C1:3E:E4:45:8F:B0:B6:0B:14:8F:07:31:D5
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fb:eb:ad:d2:c8:99:f9:d7:14:2f:79:2f:c3:f4:dd:f2:bb:
c5:35:5b:41:15:c1:9f:31:1e:ca:61:b7:16:3d:59:6a:8b:32:
67:9f:6c:b8:cc:56:47:1f:da:7c:e6:8f:b1:9b:f3:93:c4:b0:
19:5d:30:57:b0:cc:df:6e:d5:38:6f:be:8e:27:53:03:b6:07:
0c:cd:dc:be:9e:4c:bb:d5:57:b9:ce:9e:24:e0:b2:80:2a:0a:
bb:bf:87:ca:ae:9e:fb:a1:e4:7f:6e:88:e3:92:b4:c8:ed:9c:
e9:c0:98:18:fc:2a:2e:43:f8:1d:09:54:0e:bb:33:08:bb:b0:
72:13:21:28:f1:fd:8f:83:08:9b:95:b6:db:48:59:51:6a:d4:
fc:fa:bf:4e:86:cc:bb:7a:46:7b:ba:b5:e6:77:e0:97:b9:ca:
29:81:df:20:f4:95:bb:7e:d5:0c:a3:98:a5:ce:b8:19:ae:e5:
4c:eb:ca:d3:80:57:7e:65:60:56:03:fe:05:e7:1e:8b:8b:3e:
48:73:c4:17:9a:c3:6c:74:4b:f5:fb:e4:8b:4b:b1:84:93:5f:
1b:a8:19:8c:2b:04:6d:91:9c:89:eb:1c:fc:96:e4:22:63:93:
5b:a0:80:b4:f6:ae:8c:cf:48:f3:b4:99:be:e1:a2:fc:4a:a6:
98:53:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:02 2025 by rpki-client