Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: ikFeCXavHzxtsa4ae+T/Cvx1pxS+as+FQ6ljviLhRcY=
Subject key identifier: 4B:0D:71:D4:DE:E8:DD:8B:6D:D4:A1:5F:D6:AA:47:55:AA:27:AF:7D
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 0199FD6AD988AD7BC5CBF0EFDBEE6FCEDE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 115D
Signing time: Sun 19 Oct 2025 17:01:01 +0000
Manifest this update: Sun 19 Oct 2025 17:01:01 +0000
Manifest next update: Mon 20 Oct 2025 17:01:01 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: hr8ud290GW18STywnRjc3bz7wJFRSIVJXIkczrW608U=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d9:88:ad:7b:c5:cb:f0:ef:db:ee:6f:ce:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Oct 19 17:01:01 2025 GMT
Not After : Oct 20 17:01:01 2025 GMT
Subject: CN=4b0d71d4dee8dd8b6dd4a15fd6aa4755aa27af7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:3c:8c:0a:32:a3:fd:ae:4b:23:f2:2c:35:
87:f1:6c:b1:9e:3c:7c:5e:47:f0:a4:43:37:0d:3d:
67:da:8c:ac:ea:dd:3d:11:58:22:6d:04:bc:d9:77:
ba:58:0d:22:38:02:ae:b8:2c:ab:73:01:d9:8e:ed:
0d:ef:d5:11:58:30:72:f3:0f:05:90:f0:df:9c:64:
cb:41:79:0f:5b:e7:f1:61:a0:d8:94:c9:f7:71:76:
cd:4e:fc:bd:da:50:a0:8a:fe:49:7b:58:9f:16:e5:
28:70:f8:f6:ae:0d:37:b5:54:36:1f:e6:be:fe:7f:
67:a6:c9:6a:dc:62:d1:8c:2c:ea:b3:e8:91:98:4b:
38:8d:0e:20:43:05:8b:fe:f7:7c:8c:6f:b9:ca:5f:
9a:98:19:15:c6:24:a2:45:75:8c:c8:e2:23:63:4c:
a3:e6:45:eb:82:b0:88:bc:12:f0:c4:ba:57:61:19:
61:e9:31:7d:cb:c0:cc:8a:74:c1:cc:57:fd:e1:56:
a5:88:9d:8a:bd:60:c9:0b:56:b3:ae:62:28:4b:60:
8d:dc:31:36:d4:a1:3f:d1:93:66:af:89:f8:a3:93:
fe:5f:06:7b:a2:c7:ef:2d:19:46:a6:92:7b:3d:11:
a3:32:db:58:d5:11:ce:b0:b9:6f:db:d3:16:76:62:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:71:D4:DE:E8:DD:8B:6D:D4:A1:5F:D6:AA:47:55:AA:27:AF:7D
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c0:b8:88:67:c8:be:a4:a9:52:21:a6:2e:ce:d5:1c:7f:63:
1d:f0:74:4d:29:30:cb:56:44:13:fb:17:43:a9:06:03:66:00:
64:cc:f5:7c:04:b5:40:cd:0d:fc:75:63:36:30:05:e5:6e:ab:
4a:2d:93:52:27:ed:6f:0d:40:4f:0d:42:79:94:67:99:fa:16:
b9:23:f5:6c:4e:7a:ac:d4:81:b9:88:71:23:a2:cd:b4:91:e2:
9f:a9:70:ed:ad:90:a5:dd:37:41:6b:86:9e:63:02:a3:e0:8b:
f6:2d:3b:91:b5:0d:4e:d4:83:de:62:c1:a5:c2:78:5f:6c:89:
42:57:32:fc:ea:6e:f9:75:59:91:11:ab:6c:40:f6:da:93:71:
0e:0c:54:80:fb:d1:e2:1c:6e:f1:80:f1:78:31:c4:58:8d:41:
b9:db:fc:1e:09:a3:5b:46:ca:a1:23:27:e4:cc:3d:09:14:91:
da:2a:e9:d9:a9:7b:c1:48:17:2a:db:68:14:1c:2a:6a:26:5e:
39:68:8c:c3:1b:5e:28:4e:9f:61:9a:1c:f8:da:91:32:3b:e2:
0c:79:89:fd:68:61:3f:3f:ab:08:12:9f:99:d8:e2:e1:17:3b:
33:c9:32:d0:68:bb:94:b7:57:12:8f:58:db:53:fa:5f:53:5b:
ab:ac:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:29 2025 by rpki-client