Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: EkXRdia7QLuH7hP2t5NYQrkCUPbHQfBOo0Xo9rNyuxg=
Subject key identifier: 91:85:D2:28:91:D8:4B:FD:07:4A:92:E3:53:14:6E:77:2B:E2:4B:CF
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019A00DA5D96266CBC7CCD853C77A9D0B186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 0796
Signing time: Mon 20 Oct 2025 09:01:42 +0000
Manifest this update: Mon 20 Oct 2025 09:01:42 +0000
Manifest next update: Tue 21 Oct 2025 09:01:42 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: NGWW2XimMS0mWRd8CVfNsXaP1BSs06sDq/ErYgUnAZ8=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:5d:96:26:6c:bc:7c:cd:85:3c:77:a9:d0:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Oct 20 09:01:42 2025 GMT
Not After : Oct 21 09:01:42 2025 GMT
Subject: CN=9185d22891d84bfd074a92e353146e772be24bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:b1:9a:a4:32:1c:2e:dd:4e:51:94:31:d6:
ab:06:b7:f3:2f:7c:11:03:c5:3e:6a:50:53:cf:dd:
af:90:f7:39:0d:97:9f:28:b8:74:23:46:45:c7:02:
e1:e6:f1:8b:d3:86:ce:ca:0e:47:46:b2:a6:8d:5b:
21:58:79:8b:fc:9e:4e:0c:e4:b9:2b:ad:af:2c:fd:
e6:f3:38:36:06:80:6f:87:67:e3:2b:b5:8b:98:e8:
ea:ec:99:b0:7b:b0:52:56:a4:6a:34:6f:91:07:58:
81:ab:fa:41:f6:75:12:07:a2:c6:4a:ac:c2:17:40:
80:27:63:a6:c8:e5:a8:a4:b1:f7:50:49:4a:35:bf:
a3:9c:22:7e:48:5c:c2:f0:09:11:cf:d5:c1:cb:98:
2c:ca:aa:96:96:ea:22:68:36:ea:4d:3a:0a:dd:49:
fc:35:a7:8d:c0:1a:13:b3:ba:8c:97:6c:65:6c:34:
8d:8f:a4:48:f1:91:1e:62:1e:af:77:96:92:6c:9b:
2c:31:a7:85:a2:c8:91:c9:0c:ef:c9:fa:15:4a:ac:
46:89:a1:3c:44:e5:7e:03:c3:f7:e9:ee:79:09:0c:
57:39:1e:eb:c9:82:8f:1e:fe:bc:24:2f:67:0a:5d:
20:b8:67:5f:fe:27:dc:50:c6:aa:18:b5:0c:de:a5:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:D2:28:91:D8:4B:FD:07:4A:92:E3:53:14:6E:77:2B:E2:4B:CF
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:db:d0:d6:aa:2d:89:00:21:34:ba:76:69:f1:e4:4f:15:36:
47:92:75:47:73:fa:a8:48:ff:02:ee:40:75:75:63:85:ea:3f:
d7:59:81:5d:ed:7f:01:72:c1:2f:cf:fd:7f:50:ed:de:ec:c4:
05:55:ea:37:3a:38:b7:1e:b0:62:54:f1:3e:4d:e8:96:87:c5:
a7:35:67:62:f7:35:be:65:93:dc:fa:aa:5e:c6:20:c7:84:34:
92:d9:c6:b1:e4:67:87:c0:cc:6a:10:d8:0e:28:5f:5a:b1:a2:
c4:2d:3c:a9:f5:59:68:f5:ea:cd:2d:c7:5e:82:c4:f0:1c:19:
3c:8a:4f:36:7d:fc:5c:b2:70:b7:ae:34:bc:ea:22:94:d0:e6:
0e:63:ad:d4:19:7a:96:e6:55:99:50:a6:70:79:a6:ba:28:c9:
66:92:75:06:ce:03:d5:bd:56:db:0c:49:62:07:58:ed:20:4d:
12:c5:cc:e3:f2:01:dd:79:1f:7e:07:bb:4a:43:00:94:53:6e:
90:07:b6:65:68:84:b3:26:51:29:e3:07:80:b4:63:03:30:cd:
c7:ad:1d:c3:47:31:2a:b8:8b:dd:4a:a8:8e:0a:ba:54:40:aa:
1d:b7:73:7e:db:12:c4:48:84:87:a8:da:14:38:65:ad:41:be:
b7:5b:c8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2l2WJmy8fM2FPHep0LGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Y2I5MWI1MzlmZDdkZThhYzU1MzhjYWY1M2JiZjJmYWMx
YmIyNTkwHhcNMjUxMDIwMDkwMTQyWhcNMjUxMDIxMDkwMTQyWjAzMTEwLwYDVQQD
Eyg5MTg1ZDIyODkxZDg0YmZkMDc0YTkyZTM1MzE0NmU3NzJiZTI0YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluuxmqQyHC7dTlGUMdarBrfzL3wR
A8U+alBTz92vkPc5DZefKLh0I0ZFxwLh5vGL04bOyg5HRrKmjVshWHmL/J5ODOS5
K62vLP3m8zg2BoBvh2fjK7WLmOjq7Jmwe7BSVqRqNG+RB1iBq/pB9nUSB6LGSqzC
F0CAJ2OmyOWopLH3UElKNb+jnCJ+SFzC8AkRz9XBy5gsyqqWluoiaDbqTToK3Un8
NaeNwBoTs7qMl2xlbDSNj6RI8ZEeYh6vd5aSbJssMaeFosiRyQzvyfoVSqxGiaE8
ROV+A8P36e55CQxXOR7ryYKPHv68JC9nCl0guGdf/ifcUMaqGLUM3qXfBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGF0iiR2Ev9B0qS41MUbncr4kvPMB8GA1UdIwQY
MBaAFHXLkbU5/X3orFU4yvU7vy+sG7JZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQt
MTdlMGE2ODY5Y2VkLzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQtMTdlMGE2ODY5Y2Vk
LzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdvQ1qot
iQAhNLp2afHkTxU2R5J1R3P6qEj/Au5AdXVjheo/11mBXe1/AXLBL8/9f1Dt3uzE
BVXqNzo4tx6wYlTxPk3olofFpzVnYvc1vmWT3PqqXsYgx4Q0ktnGseRnh8DMahDY
DihfWrGixC08qfVZaPXqzS3HXoLE8BwZPIpPNn38XLJwt640vOoilNDmDmOt1Bl6
luZVmVCmcHmmuijJZpJ1Bs4D1b1W2wxJYgdY7SBNEsXM4/IB3Xkffge7SkMAlFNu
kAe2ZWiEsyZRKeMHgLRjAzDNx60dw0cxKriL3Uqojgq6VECqHbdzftsSxEiEh6ja
FDhlrUG+t1vI6g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:55 2025 by rpki-client