
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: fMNYjja2eNR1saBy3+w8FCqp3GqRP/re1xQ7AevmYg4=
Subject key identifier: 2A:C4:32:6A:CB:48:B2:6D:17:F7:73:0A:DD:2E:6C:6E:4D:56:EB:B6
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 0199FB0F428C7A572B5EFA0D92CD0B9F811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 06:01:45 +0000
Manifest this update: Sun 19 Oct 2025 06:01:45 +0000
Manifest next update: Mon 20 Oct 2025 06:01:45 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: K/axMzEMCR549vgmQDlxelFreaPzPGZzdi9j4Z+mfg4=)
2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:42:8c:7a:57:2b:5e:fa:0d:92:cd:0b:9f:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Oct 19 06:01:45 2025 GMT
Not After : Oct 20 06:01:45 2025 GMT
Subject: CN=2ac4326acb48b26d17f7730add2e6c6e4d56ebb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:48:0b:8b:39:0b:c6:1a:82:26:42:d4:cc:
ce:f3:f3:0b:df:e5:9e:7f:39:8e:f9:74:d3:d8:12:
1b:c4:0e:36:4b:a1:c9:41:78:a6:ee:e5:e4:10:25:
7e:93:14:60:55:b6:07:df:eb:80:57:f2:e0:c2:35:
91:bb:b4:e8:74:5b:dd:23:7a:f6:13:e0:a9:0b:04:
c4:ba:61:1e:91:3f:1e:88:23:a9:61:37:fa:b7:f3:
72:ea:6b:51:de:ee:f6:47:2d:b1:e6:99:db:7a:56:
57:ba:ad:61:28:dd:89:6e:d4:1e:8b:f3:7b:6b:6d:
e5:db:e1:93:65:d1:60:85:f9:36:0d:1a:d4:fc:e0:
b2:70:d1:62:7a:32:e3:20:dd:82:51:09:44:14:3f:
9a:e0:d3:da:12:19:66:9c:77:ff:db:44:0c:9c:ec:
e5:08:67:35:c6:55:be:d3:5c:0a:35:e4:25:ca:4c:
a5:fa:a1:24:a7:b2:c5:8b:b9:ea:01:67:0b:c9:40:
4e:7b:2b:be:94:ae:56:05:46:11:cd:3a:04:dd:b0:
a6:62:c5:41:73:86:a1:f0:da:72:26:d7:34:57:f2:
dd:99:18:e6:4d:3a:df:0f:21:10:ea:8a:dd:c1:29:
97:df:f1:ab:9a:84:6e:d4:30:13:92:b4:33:8d:60:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C4:32:6A:CB:48:B2:6D:17:F7:73:0A:DD:2E:6C:6E:4D:56:EB:B6
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:35:6d:15:99:a3:a0:ce:b6:0f:83:47:03:08:c9:d5:e7:
1b:b5:10:70:cb:df:40:40:df:94:66:10:dd:83:ba:c3:28:b9:
df:77:e4:bd:a6:a1:10:ec:70:3c:91:18:3d:ea:8a:41:43:47:
06:56:0e:08:45:3e:18:f4:27:4b:68:b1:48:7a:ee:12:3a:98:
f9:96:42:3b:ae:51:8e:26:b7:21:ae:8a:d4:4b:37:9c:c2:d4:
98:9e:4d:3b:5b:58:d6:6a:fb:e8:d9:24:2d:d6:65:51:52:f5:
5b:c0:e2:48:b6:45:fc:68:a9:26:af:2c:03:6c:aa:26:db:61:
5d:94:02:6a:4f:2c:22:56:a9:e4:01:3e:b0:f7:05:b1:19:73:
db:0d:cb:99:e7:45:00:30:c1:2b:1b:94:22:1c:ee:83:ce:97:
9d:48:a2:87:49:70:e0:da:ee:82:ba:3d:7a:65:c3:d4:f0:df:
ed:3c:37:96:8c:6d:f5:88:41:83:76:d9:33:f3:63:35:e4:4d:
26:c2:e9:10:2b:4a:90:c7:3d:6a:81:f3:6b:ea:31:33:be:36:
22:66:24:a4:53:77:f5:c8:2f:6d:ad:b3:7c:61:ef:8a:83:ec:
da:e8:46:4c:24:0a:54:3d:e8:d4:28:e8:df:08:15:01:f2:35:
86:00:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:41 2025 by rpki-client