Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: yZr/FAVUP0kKUYWVVZ6An2FZRX0EevFvuT0TTMLdqpE=
Subject key identifier: EB:74:B6:7D:DA:41:BC:ED:A0:51:F8:5D:02:DA:8C:F4:0C:17:64:91
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 0199FAA15CB4056E6DFF35837A0F0E033E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 04:01:42 +0000
Manifest this update: Sun 19 Oct 2025 04:01:42 +0000
Manifest next update: Mon 20 Oct 2025 04:01:42 +0000
Files and hashes: 1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: W2I7OI/1jPr3H10JTkf/4SPEBnVklJjvfFyy/Rx8WCg=)
2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:5c:b4:05:6e:6d:ff:35:83:7a:0f:0e:03:3e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Oct 19 04:01:42 2025 GMT
Not After : Oct 20 04:01:42 2025 GMT
Subject: CN=eb74b67dda41bceda051f85d02da8cf40c176491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:f7:ff:aa:06:ac:19:fb:4b:46:5c:4c:19:
7f:ae:95:49:bd:23:f9:da:49:7e:b0:24:a6:84:68:
62:ba:c9:29:42:d7:ce:7c:a8:63:7e:ef:c3:13:61:
69:36:06:6e:92:b5:d8:5f:ee:b6:f3:b2:58:d0:65:
3d:83:a6:93:a8:bc:24:24:7c:c3:24:25:f7:d6:16:
c1:67:d6:12:93:b6:67:68:1d:04:8c:9e:f3:f1:c9:
fc:fd:41:45:09:df:35:45:a6:0b:8c:6f:73:3c:78:
94:52:b7:4d:c5:7c:53:57:43:ce:ea:5b:b1:c2:c9:
7a:ca:6f:af:bd:0c:18:cf:51:8f:a6:02:b7:da:ac:
87:f3:4f:7d:1f:89:62:4e:e2:85:54:5b:e3:ad:86:
25:b7:09:5b:0b:fd:77:24:b6:24:94:d7:0c:72:63:
9d:b3:7b:61:bb:88:04:1b:1e:ee:12:d3:22:6a:fb:
dc:42:ac:c5:6b:20:80:01:61:d6:a2:13:33:58:7a:
4c:0c:e0:94:89:6c:d5:09:ed:42:ce:fc:4a:0f:68:
a4:62:19:7f:72:04:1f:a7:f1:43:8e:dd:e7:30:3b:
cc:78:a9:68:6e:5c:4c:47:c3:f7:56:26:f6:8c:eb:
30:35:c1:60:3a:8f:b9:27:84:5a:e2:13:e8:5d:4d:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:B6:7D:DA:41:BC:ED:A0:51:F8:5D:02:DA:8C:F4:0C:17:64:91
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:07:8c:19:03:c2:1e:20:8a:c0:3a:e9:f1:a8:02:66:05:a0:
a8:d5:c5:ab:26:e6:f4:ae:ac:79:fc:d2:7f:67:88:a4:01:f7:
2c:16:48:45:a8:87:eb:e9:18:e5:1d:e2:3b:b1:ad:e9:6e:36:
b9:18:d5:66:e4:43:3e:4b:65:f8:f1:00:3c:95:49:07:b2:25:
fd:23:de:35:68:b3:24:38:28:0c:c4:62:c2:23:a4:f3:da:81:
c6:c1:6d:cc:00:54:43:09:31:0e:c1:8a:8f:21:4f:dd:08:4a:
ed:b5:91:db:35:d7:38:14:fb:52:78:01:e4:c2:96:93:e6:5c:
40:d4:35:d6:7b:b5:d7:52:64:ef:b5:59:0e:8b:b2:7d:7e:fb:
e0:e3:a8:87:30:15:6c:c2:f0:77:d0:7a:7f:7b:7e:a2:a8:8c:
a7:af:cf:c4:0e:91:7a:e6:16:2d:f3:16:61:d9:18:68:09:ce:
55:ec:12:ba:c9:e7:82:e2:09:62:5c:ab:63:8b:8b:13:e4:09:
34:e9:9b:4f:93:35:68:76:60:44:a6:18:12:b1:da:3b:ff:5b:
8e:f8:ed:47:8b:fd:e6:5b:d7:bf:bf:77:a1:e7:f8:b0:fc:cd:
a4:8e:58:db:d0:33:d4:e8:72:41:a9:df:59:1d:1f:54:5b:4b:
89:dc:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:22 2025 by rpki-client