
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: EpmBWI6jK+wyB8C56HTz7ofAuLgu0MPi7pHqgyV9J/8=
Subject key identifier: D3:23:B9:C5:D4:D3:EB:6F:13:49:5F:07:12:BF:7F:87:43:ED:79:98
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 0199FB45E8815C341E884B28A7609B623261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0A66
Signing time: Sun 19 Oct 2025 07:01:26 +0000
Manifest this update: Sun 19 Oct 2025 07:01:26 +0000
Manifest next update: Mon 20 Oct 2025 07:01:26 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: KlYwpchck9LQ60z1w/PAadYzHkybgB/z9vM14Lp/LWc=)
2: LaWeTZCAr-HUhZ4sGwn2UEM8UYc.roa (hash: B2sPWyas3UEyy6EkjCL1gILAFxuUkQj9iQf0YdV0Fw4=)
3: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e8:81:5c:34:1e:88:4b:28:a7:60:9b:62:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Oct 19 07:01:26 2025 GMT
Not After : Oct 20 07:01:26 2025 GMT
Subject: CN=d323b9c5d4d3eb6f13495f0712bf7f8743ed7998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:d3:15:e6:ee:18:ec:a2:e8:8f:90:9e:e0:
b6:19:72:ae:f4:70:fd:a0:8f:4f:2d:5e:83:ef:1b:
a4:a1:5a:99:47:93:7b:e9:ef:e8:90:09:4f:28:ce:
92:1f:58:5f:69:96:6e:a6:e5:20:ed:a9:42:0f:21:
70:bc:e7:2d:09:82:a7:36:ae:53:29:fa:23:6a:e6:
be:55:ce:a4:0b:3a:99:80:9c:c1:43:ad:2e:74:86:
78:eb:84:8d:97:5f:58:90:ad:c9:65:ef:79:9a:00:
6e:c6:26:8c:c5:f1:be:b0:b5:43:80:22:18:31:ee:
dc:bd:91:c3:d4:d9:c8:f3:47:85:44:cc:43:60:f2:
bd:2d:9a:d7:24:93:6a:d5:e7:cd:94:94:2f:21:59:
de:5b:27:0c:48:95:53:a1:da:f1:f1:5a:34:5c:14:
d9:e5:37:c2:dc:86:a0:db:1e:3d:fe:86:0d:af:90:
4c:56:a7:58:14:b5:2f:67:c8:1a:1a:e9:86:92:e2:
c6:61:ca:7e:80:f2:6b:83:e3:d8:75:ff:cb:aa:b6:
1d:b3:18:26:41:1f:c5:e4:33:7a:74:ec:b8:85:68:
ad:93:2d:8c:0a:eb:3f:bb:85:41:fe:d5:be:95:44:
a9:be:7f:c5:7a:18:25:80:b0:bd:f2:c5:7e:7b:39:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:23:B9:C5:D4:D3:EB:6F:13:49:5F:07:12:BF:7F:87:43:ED:79:98
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:89:1d:eb:a8:f0:de:86:1f:c2:83:f1:4c:42:65:aa:e8:8b:
e6:08:23:e3:89:1e:34:91:0f:f7:95:01:02:14:80:d7:63:76:
fb:12:80:c0:07:a8:8a:b6:2b:22:5a:10:44:29:21:1c:a0:c8:
6b:a6:6f:48:fd:90:48:1e:fc:e9:16:b2:46:77:ca:c0:28:83:
29:fc:b3:e2:67:3a:cf:18:d9:67:16:d6:e6:83:e9:db:5c:e2:
9e:40:5c:c4:fe:a0:55:10:5b:00:21:b8:25:01:8a:64:05:8f:
44:1b:40:26:77:e9:9a:c1:a3:00:a5:83:81:bb:57:67:e1:5b:
fb:a4:9c:81:cd:6a:68:72:ad:49:55:ae:4a:53:57:8b:09:c2:
63:e3:c1:f9:fc:45:00:d6:94:2b:e9:8b:12:06:14:18:21:42:
a6:8a:20:36:31:76:20:bd:53:f7:db:27:d1:f9:d6:11:be:28:
c5:2c:a9:bf:3f:7e:76:c1:a7:36:27:e7:b7:48:c7:41:6f:2f:
ee:5b:0d:ab:ec:39:6b:23:17:47:d4:00:31:7b:7b:7f:3c:e7:
be:c5:f5:fc:fb:b0:45:0d:ca:96:36:da:e7:97:62:e1:05:f6:
c4:ba:7d:d8:dc:3e:fa:95:28:c3:f6:12:b5:70:c1:54:10:12:
72:3d:00:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:14 2025 by rpki-client