
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier: FUYcGvoUZq/JSnrAMgJ9f67DK+yUcA/j0iRd+vWUjUQ=
Subject key identifier: 9C:DA:A2:58:FE:30:48:5F:96:76:5E:22:9E:AD:36:9F:20:D7:06:87
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 0199FB45E774551DD9027A72B98C99C42DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number: 0DB6
Signing time: Sun 19 Oct 2025 07:01:26 +0000
Manifest this update: Sun 19 Oct 2025 07:01:26 +0000
Manifest next update: Mon 20 Oct 2025 07:01:26 +0000
Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: QKaIM8vW6fppXvOxYYUmPpAXXpe05pGiNBTECGdjGhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e7:74:55:1d:d9:02:7a:72:b9:8c:99:c4:2d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Oct 19 07:01:26 2025 GMT
Not After : Oct 20 07:01:26 2025 GMT
Subject: CN=9cdaa258fe30485f96765e229ead369f20d70687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:07:07:76:90:f9:6f:b1:e5:63:22:68:a2:
7f:a9:eb:b0:07:96:46:99:12:13:b6:fa:2c:53:b3:
fc:2f:3e:d0:a4:6b:37:89:11:55:8d:1a:96:a9:67:
d8:11:ca:58:88:c5:05:8b:24:aa:a3:c8:af:9b:4c:
be:f5:d9:3f:ba:fc:63:1d:39:0c:5c:5f:35:83:86:
38:b6:70:6a:93:7b:1b:ea:f5:a3:fd:c5:c8:0e:e8:
01:a7:e6:1a:51:c6:85:fc:66:92:8f:5f:e1:09:a7:
d0:70:5a:82:ac:66:cc:d3:14:22:f2:b6:ce:66:5d:
80:24:50:3b:9e:1d:80:f5:05:79:01:20:c2:e7:3f:
6d:3e:37:5c:c2:ca:28:5d:16:30:ff:ca:af:42:e2:
11:c4:03:e7:47:c3:83:58:d2:b9:53:6d:bd:f1:b0:
62:7a:1e:68:4c:7a:96:b6:ac:9c:95:1a:77:a3:7f:
1f:27:1e:0f:e7:df:04:9a:12:c2:8a:38:4b:d0:a9:
b3:7f:0a:fe:2e:40:10:22:72:b2:9f:b1:ef:7e:ca:
1a:a4:7a:d0:60:b1:6e:14:9d:5e:0f:be:30:88:8b:
6e:cf:87:22:9d:7b:5a:e7:e4:f4:32:67:2d:f2:f5:
16:72:eb:7b:6a:bc:ce:16:4d:b9:c7:1e:6e:50:27:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:A2:58:FE:30:48:5F:96:76:5E:22:9E:AD:36:9F:20:D7:06:87
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:92:54:5e:5f:00:d5:8c:90:f6:3e:d2:cf:70:6a:49:a3:dd:
6e:06:87:56:cd:a8:83:26:44:03:e7:b8:9d:fb:cd:43:52:0f:
57:c6:84:71:91:c1:10:fb:03:6d:35:03:b4:7c:60:b5:24:a2:
a5:aa:03:c1:bd:03:02:cb:db:24:7c:51:36:65:c1:ae:49:f9:
61:0d:d7:9f:9e:69:fa:d3:57:45:96:99:d5:c3:03:8b:2e:0a:
70:7f:6f:fa:d0:52:dc:7a:7d:16:35:20:f4:6b:24:89:30:cf:
1b:cc:5e:20:a2:64:09:ff:1a:17:8b:a6:c6:5f:02:94:ea:2b:
0d:89:38:ad:fd:ce:06:48:b7:8a:cf:ff:47:0e:8d:0c:cd:18:
07:b3:c2:55:42:d3:8b:2e:b4:4b:c3:e6:ae:65:fd:4d:d4:38:
08:b9:72:35:a7:02:28:e5:d6:a2:c9:58:ff:0c:49:ee:03:05:
02:c7:4e:9e:ce:60:3d:ef:d4:96:31:b1:74:31:be:26:3a:a4:
d7:a2:3f:e7:b7:08:d1:28:00:8e:3f:35:a4:00:29:c1:5f:50:
fb:70:ea:7f:0a:ae:94:c0:36:a5:25:09:0d:96:66:e3:06:b3:
06:0e:72:2c:c6:d1:a7:8a:2a:fc:5f:a3:fd:33:be:00:d2:f0:
18:97:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:10 2025 by rpki-client