Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: Lep9nOxDU5NtBFEUR1sl2L1vITohuM5b7CKOmCotCRU=
Subject key identifier: B3:D3:52:96:BB:91:F1:94:BB:80:A3:EA:DD:26:3A:00:8B:BB:2B:6A
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 0199FC21A7B2F3B5B878B4625A40F98F1246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: hHhkjCduAhkJM5MLaZvoJNfHaqFJeRKwfhHmYq0kvVs=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a7:b2:f3:b5:b8:78:b4:62:5a:40:f9:8f:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=b3d35296bb91f194bb80a3eadd263a008bbb2b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:74:30:82:fc:c6:9e:83:2c:02:e7:46:cc:
f3:f1:af:63:0f:92:11:d5:7e:8d:51:d6:62:d1:fc:
2d:c9:96:0f:c1:24:1d:f0:50:da:ea:41:a6:92:6f:
c8:8b:70:9e:61:f6:db:41:26:6f:b8:2a:23:b8:6a:
46:5d:f3:20:14:71:dc:ec:0a:24:81:f0:5a:b7:db:
cb:90:14:60:4e:f0:c8:6d:89:f0:17:e6:f0:c0:d1:
32:c0:7b:a5:33:0f:38:27:df:dd:59:5b:8f:70:b3:
45:7a:fa:33:a8:06:d3:a0:b9:e1:a1:26:0d:06:dc:
cc:66:5c:8b:9b:6c:55:87:d9:cc:38:40:22:cf:72:
7e:a5:ab:3e:41:82:c7:96:94:e2:88:63:ea:70:a4:
a0:4a:bb:a5:68:c1:12:20:b1:91:bd:fc:85:d6:b8:
91:bb:51:11:33:55:ef:ac:32:97:e1:fd:5f:50:3f:
01:a7:a0:48:e2:aa:2c:e0:ff:04:76:f0:4d:eb:51:
01:a5:b2:ba:3c:04:d9:5a:f0:b6:e0:da:e0:7c:d8:
59:84:0b:73:8d:80:a5:99:73:0b:66:cd:43:1d:55:
d6:2b:0a:29:27:2d:d3:ee:60:27:79:3b:a7:d3:74:
5d:5a:7a:05:c0:98:20:4d:fb:d4:7c:b5:cc:36:6c:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:52:96:BB:91:F1:94:BB:80:A3:EA:DD:26:3A:00:8B:BB:2B:6A
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:90:26:39:7f:3f:48:4e:55:03:07:95:d8:ac:b9:fe:d2:86:
14:36:aa:8c:8f:ac:7b:f8:79:ac:d5:4b:49:45:97:db:5f:b1:
f8:69:b5:6a:5b:f2:b0:22:1d:ab:b5:77:33:23:c2:cb:67:b9:
b3:78:1a:a9:8b:da:ee:c4:eb:18:1a:81:77:98:65:74:35:4c:
cb:95:d3:b5:f0:44:9a:b3:5c:b6:a4:92:a1:fb:3e:0b:46:d7:
f8:e6:23:33:8c:d7:38:f7:8e:cd:89:11:a8:21:33:d2:f0:b9:
f0:cf:2a:32:a8:ee:d0:51:eb:ae:4b:11:db:7b:8f:d2:3e:e9:
a7:52:34:8f:8d:8f:b5:3a:e6:b9:9e:83:fb:40:38:35:7d:5e:
b8:c0:a8:c0:82:46:2e:4f:ee:5e:2b:78:b0:0a:d4:64:b5:0f:
38:cf:a7:a6:a4:16:e1:ff:d9:5b:8a:b6:31:8a:d8:54:66:e4:
d7:fe:17:e1:4b:94:be:09:e7:bd:8d:c4:4b:51:2a:2d:5b:b9:
87:f9:4f:aa:a5:cb:fe:12:85:58:5e:16:bc:70:52:c2:b5:53:
df:5f:cd:3c:d1:28:c1:ef:82:5b:f2:bd:bb:e4:a1:8e:98:eb:
9d:cc:a0:34:be:38:6e:ad:34:e5:0e:0d:6b:6e:b4:34:ed:64:
e4:c6:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:45 2025 by rpki-client