Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: Houy0ArTRBATWFEXYvoFxYMzxfYvYh7fDWDZA7XO+2E=
Subject key identifier: BD:33:14:DD:EA:0F:FF:E5:07:54:67:74:DD:B8:40:E8:73:6F:FE:81
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 0199FCC6A71C6894C5B7EBE676CF55C2E2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0BED
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: vX1fbfA7FRpmuMVPHF4oX0OM6fhH6AWN9aOWCj0jc6M=)
2: xx1FjY8JYYnnymM_Usd0dhEPXMc.roa (hash: jThxXylFfBYyWhSUb/DWJLhZb//oHbnd3oYRtsD1klg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a7:1c:68:94:c5:b7:eb:e6:76:cf:55:c2:e2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=bd3314ddea0fffe507546774ddb840e8736ffe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:fb:d7:05:b9:3f:2d:56:80:44:42:09:6d:
95:88:6b:55:5c:75:81:29:a4:d4:df:68:59:a7:56:
b6:4f:a4:b1:a9:28:36:bd:09:51:e4:88:1e:a6:1d:
13:3f:36:22:c0:6c:75:5b:4f:19:a3:35:c4:35:63:
dc:c9:13:03:54:1a:59:e5:9d:24:08:3f:f0:74:00:
45:c4:a6:98:32:51:6e:f3:6d:02:8d:4e:14:38:2f:
62:0b:63:45:04:38:ae:45:ba:7c:99:93:9a:33:da:
28:4a:4c:84:28:4a:b0:18:bb:47:ac:ef:c2:a0:40:
61:b2:08:5c:e7:c1:dd:62:27:60:70:53:af:2d:04:
17:59:fe:7f:3a:ea:6c:8a:03:61:10:0d:3e:a8:d4:
38:d2:b0:a7:9e:06:69:ff:78:ca:f1:75:9a:9c:14:
40:0d:bd:60:34:99:fd:14:56:31:d9:60:62:77:a2:
23:b1:92:98:3b:16:c5:ca:df:71:d6:8a:ef:8b:94:
99:bf:4f:10:03:c3:eb:fa:61:cd:94:a7:f2:df:1d:
17:43:54:65:75:17:45:97:c0:bf:90:d6:29:2f:e2:
7e:e9:64:32:78:c1:90:b9:77:c3:3a:73:48:f6:bb:
22:9b:e3:a3:4b:b2:33:d4:eb:98:ca:a6:e1:b6:ce:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:14:DD:EA:0F:FF:E5:07:54:67:74:DD:B8:40:E8:73:6F:FE:81
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:46:e3:4f:08:eb:ce:ae:24:6b:c6:ba:b0:97:97:fb:b1:3e:
85:14:cb:fa:0c:ba:a0:31:4a:90:8f:33:f6:71:17:e9:e0:c5:
d9:94:c8:d6:62:61:9b:00:e6:54:2a:32:8b:dd:fb:48:9a:c0:
8f:57:6c:c9:96:d0:10:d2:99:bc:e7:ff:f1:e3:c0:c5:cb:47:
65:21:60:89:ff:8c:11:33:22:c0:9d:8a:8e:de:43:a3:aa:c8:
42:1d:37:88:ca:3a:86:4d:63:69:ff:33:ab:80:f5:d2:78:20:
7c:21:ca:63:6f:67:2a:ff:39:89:f1:a5:df:37:5b:c6:91:84:
7e:26:d9:74:43:8d:d1:1f:ee:1f:ce:74:3a:f7:b0:a4:1f:e5:
ce:d7:b2:a9:6f:d1:ea:bf:5b:14:2a:87:99:74:08:ea:c5:ce:
c5:cc:b1:99:4c:1c:62:a9:b9:ec:ed:8f:bb:e0:0e:16:2c:23:
89:25:5f:34:8d:52:47:33:ae:ef:2f:50:4f:3c:79:f9:de:e9:
89:5f:3d:5f:51:f2:9a:dc:b4:3c:6b:94:3c:9d:19:d1:05:f6:
f7:67:01:fb:3c:82:7d:09:d8:b6:b8:c9:2c:8e:aa:ff:43:28:
f5:2e:c7:c1:8d:31:37:9f:71:79:40:59:0f:8f:56:de:5d:31:
be:32:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:19 2025 by rpki-client