Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: ea5YBcLFpyJAmu6iHHIBuWSL2UXJrSqMZMfozHUGOeE=
Subject key identifier: 7F:BC:98:AE:38:95:53:61:5B:C4:51:B8:A1:C3:A1:CA:CC:BC:B5:E4
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 0199FC21625900190EB8971B385D78BE4F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: y0A4kEON13F5DdSwUgaHaUn0RupJlsRfZD8ghAxiwO0=)
2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:62:59:00:19:0e:b8:97:1b:38:5d:78:be:4f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=7fbc98ae389553615bc451b8a1c3a1caccbcb5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:3d:6f:48:84:b5:94:cf:25:bc:38:c8:57:
a3:f0:bd:41:fe:73:6e:b4:e7:42:ff:5c:ef:66:24:
06:3c:f0:d3:e3:f8:a7:5a:a9:05:91:4a:5a:01:c8:
18:6b:a9:17:e9:4e:15:38:8b:ff:0f:28:44:87:41:
2f:64:20:8e:2a:5e:9a:99:b3:4f:77:fc:01:21:5d:
97:aa:a0:6f:73:90:b6:76:c9:2a:7d:dd:8d:47:a9:
96:33:8b:3e:f4:01:d0:0a:a6:e3:e6:80:e9:6a:ef:
f5:01:4c:df:01:bf:88:e0:5e:8b:65:9c:6e:42:61:
0e:8e:14:e4:a0:6a:ef:a2:49:2e:59:6c:60:72:6c:
83:4e:95:10:05:1e:b3:7f:63:7c:48:3c:cf:00:e8:
44:d1:63:18:dd:03:f2:ad:ca:20:eb:de:90:07:13:
ec:86:50:02:62:3f:26:86:02:01:b7:41:34:d7:d1:
3f:66:57:61:05:07:3f:28:e3:c5:8c:d7:e3:79:09:
d8:de:9f:26:46:da:78:da:51:51:bf:55:3d:0e:1b:
28:4f:6d:cc:23:d1:48:59:90:39:f7:e5:16:bc:52:
2d:2a:e9:cc:3b:d3:8b:5b:f7:0d:4a:4e:05:6d:ef:
05:90:31:83:50:a7:c5:59:51:14:24:a2:2d:7f:2c:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BC:98:AE:38:95:53:61:5B:C4:51:B8:A1:C3:A1:CA:CC:BC:B5:E4
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:96:86:fc:a5:b5:01:da:6e:9f:23:ec:24:81:32:86:a2:cb:
ad:a9:7d:8b:bc:44:55:34:d4:d2:22:ff:1c:f9:2e:60:8d:74:
3f:ee:67:ad:65:cd:d6:60:eb:fa:ad:ca:94:27:08:68:2e:1f:
7c:10:33:ca:d6:30:89:bc:8a:b2:db:41:7c:5c:7d:51:0c:15:
8b:16:eb:9b:7b:a1:7b:21:e1:26:66:e2:d9:46:e8:ff:a7:60:
b3:fe:7e:a6:ae:e2:d2:0c:50:e6:63:83:c7:cd:f9:6b:10:46:
7d:51:ce:ad:53:f8:5c:83:fb:3b:ed:af:36:31:b2:92:99:27:
56:96:52:38:66:bf:f7:a3:6b:cc:c7:16:96:7a:6e:15:9f:24:
55:36:8e:7f:9f:7e:78:ea:45:ae:d9:d0:6e:05:86:38:77:89:
b7:50:27:ac:d5:b4:9f:27:4d:a2:2a:8d:d3:a9:51:6f:15:d1:
27:66:2e:c7:c8:94:d9:f3:d0:f5:a8:19:05:46:22:c1:31:c7:
fa:b9:4c:d4:46:16:51:5a:7f:cb:a4:57:e6:76:d7:91:9f:cd:
29:18:51:7d:13:75:82:26:46:4d:ab:79:b5:aa:bc:38:dd:8c:
07:bf:07:39:da:3c:bd:16:9a:39:ba:22:19:16:ec:ef:50:17:
7b:32:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:22 2025 by rpki-client