Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: JV8etCgr7WL1y1HvaFHA5QvNCdbGSqVL8BJYNVWu98E=
Subject key identifier: D5:7B:28:6B:46:6C:CF:99:08:30:AF:BE:18:ED:22:29:0F:29:A9:1B
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 019A00A3991197500FA5156FD188E8A62282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 0F4C
Signing time: Mon 20 Oct 2025 08:01:52 +0000
Manifest this update: Mon 20 Oct 2025 08:01:52 +0000
Manifest next update: Tue 21 Oct 2025 08:01:52 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: lCKOE/wR9L3rBYmbfNpF8fiBNMli/PHEokL8GwJdkkw=)
2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:99:11:97:50:0f:a5:15:6f:d1:88:e8:a6:22:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Oct 20 08:01:52 2025 GMT
Not After : Oct 21 08:01:52 2025 GMT
Subject: CN=d57b286b466ccf990830afbe18ed22290f29a91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:b4:25:b5:55:a6:3d:d3:5d:02:f7:74:f4:
9e:71:9b:11:0e:0f:ab:ea:fc:b1:fd:70:dd:43:64:
4c:c1:49:47:49:4f:c6:55:f7:52:e9:c5:3a:b9:8e:
0d:6b:6b:73:52:01:05:dd:f2:c6:19:bb:c7:1e:1d:
51:78:4b:1d:10:1b:c9:f5:ea:96:0c:ac:81:01:24:
5e:e0:66:3e:3e:82:00:91:d0:40:31:f7:c9:dc:9f:
36:c5:c9:ab:53:0e:35:43:5f:f1:75:30:92:dc:65:
29:e9:49:ca:8e:03:06:a7:19:a5:be:f9:71:29:91:
24:e6:9c:f0:00:72:64:04:90:a3:0a:b5:10:35:5e:
36:bf:c3:a6:28:86:bf:4e:5d:82:7e:ff:fe:4f:80:
36:7e:fd:47:c8:77:62:69:7e:1e:2c:73:cf:9d:9c:
61:b9:99:c5:c2:4d:91:b4:d0:10:30:b5:da:8d:85:
b6:92:df:8f:d9:26:8e:17:a6:1b:1f:63:2a:9c:e3:
b1:fe:43:0e:b8:cc:69:5c:32:88:59:b8:e8:b3:f4:
cb:8e:7f:29:8d:61:5d:f0:94:82:92:f5:d6:bd:4e:
a5:ed:9f:fa:0a:ca:18:a9:de:b1:c4:58:95:9e:f6:
bd:63:85:b7:54:94:3e:29:5e:06:4a:ff:13:7e:2a:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7B:28:6B:46:6C:CF:99:08:30:AF:BE:18:ED:22:29:0F:29:A9:1B
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:03:80:36:99:90:da:dd:12:58:e2:15:61:d4:a7:60:c3:9b:
9b:d9:d8:51:5b:c2:b8:52:fc:43:f5:e7:f1:a2:99:8d:5c:3d:
3c:ff:23:9e:0d:dc:e8:96:68:0b:1d:e0:c4:7f:cc:ab:09:22:
c1:a7:79:33:82:3c:e8:be:6d:9e:72:27:fa:09:19:96:21:b2:
69:00:0d:e6:72:31:f7:a2:95:8e:62:ed:ee:7b:fb:c0:cc:39:
84:cf:00:6f:04:7a:56:ad:b7:ec:cf:3f:6b:e1:ec:5e:45:f5:
6a:73:5b:80:85:73:63:c7:a2:09:ab:9e:84:a7:f6:a6:72:b4:
4f:b4:61:f1:0e:43:d2:c7:ff:56:91:38:52:6d:09:02:a8:f3:
8d:68:7a:4a:d9:91:a8:6c:fd:0f:00:b2:d2:9a:55:a1:36:24:
25:73:17:f1:6b:62:ea:1c:eb:96:65:5a:78:e9:50:2d:1f:0e:
cf:fa:70:f7:24:f0:6f:1d:62:df:45:a3:7d:4e:3a:a6:26:08:
ad:2e:f3:d3:93:5b:a6:a9:a3:e1:0d:96:87:3b:f2:95:f3:87:
74:68:d4:87:31:23:dd:cc:98:0d:76:b9:00:3d:a7:f3:e3:07:
2d:2a:f9:db:cb:db:b2:9f:cd:ad:bf:d7:ee:f7:61:71:5e:c3:
3a:46:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:03 2025 by rpki-client