Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: InLnTqeV3spLo0gp9mOE/wvk2/BYC3xLv2hCuqjKDyM=
Subject key identifier: C5:EA:13:39:10:37:E3:36:A9:43:F7:13:02:B2:9A:11:7B:9C:B5:01
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 0199C6453C804E85C8DBE9820DC94D23D4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 0555
Signing time: Thu 09 Oct 2025 00:00:50 +0000
Manifest this update: Thu 09 Oct 2025 00:00:50 +0000
Manifest next update: Fri 10 Oct 2025 00:00:50 +0000
Files and hashes: 1: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: ZYalloL5d7AgBydR4vbOq2O2bFvDrCqRo8lTkAntZno=)
2: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (hash: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=)
3: sllzpkHFh9mOLjlCML4tbQK0pwU.roa (hash: E6feljoCdpMR0hz/J2bpGEFeQDlLz1z/a780M0tQTGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:45:3c:80:4e:85:c8:db:e9:82:0d:c9:4d:23:d4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Oct 9 00:00:50 2025 GMT
Not After : Oct 10 00:00:50 2025 GMT
Subject: CN=c5ea13391037e336a943f71302b29a117b9cb501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:de:27:d0:92:27:a4:a3:c5:82:57:f1:f9:
26:51:53:a5:d1:20:fd:6a:41:ba:d9:c5:4e:7c:36:
73:a7:5c:74:48:66:cb:f1:c2:de:00:58:84:cf:ac:
66:06:af:d0:03:6c:28:08:9d:b7:14:dd:97:d8:d5:
f1:44:d8:68:43:30:77:e6:40:ba:71:b9:0d:38:51:
4b:06:b3:ab:4d:5e:c8:3b:39:a0:b4:87:25:1c:81:
01:ac:55:84:10:35:1a:66:dd:1c:8a:59:3b:31:80:
3a:90:bc:ac:8d:36:03:93:a5:49:87:01:ba:af:9c:
02:5f:cd:8f:0d:11:a8:57:ed:6d:00:d4:73:cb:ff:
d2:35:b5:72:a2:51:a2:cb:b4:d8:e0:5f:ed:50:bf:
81:28:9a:1e:8e:09:51:b1:e6:c4:8f:7c:eb:74:d2:
aa:36:62:25:7a:e3:3d:df:62:17:ba:22:fd:5e:c6:
70:1b:31:4f:e8:81:9e:e6:c9:08:9b:c7:66:c3:87:
81:60:94:ff:af:79:16:4d:6b:39:39:d1:01:fd:be:
0c:3f:6a:32:91:cd:26:b8:45:95:cd:2f:7e:e9:0d:
aa:52:7d:fe:0a:01:36:0a:1c:cc:6b:6f:d5:ed:ff:
c1:37:7f:37:a9:88:33:3a:02:f4:f0:61:39:8f:f4:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:13:39:10:37:E3:36:A9:43:F7:13:02:B2:9A:11:7B:9C:B5:01
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6d:51:6d:15:8c:78:32:42:77:5d:94:9a:bd:4c:8c:3b:a2:
31:6f:0b:98:19:b8:64:ec:4b:85:5a:f4:f2:a8:2b:fd:d8:f4:
f1:b2:00:d1:62:ea:da:3a:75:97:69:03:cf:46:7f:ed:40:41:
6a:8f:7e:74:f5:1b:72:31:3f:7c:c7:9f:09:9c:f7:3b:d2:40:
77:16:ed:c5:91:6b:2e:7d:bc:1c:c1:01:bb:60:2d:2f:07:79:
5d:f0:ce:76:d0:49:02:8a:82:05:f3:06:f8:e7:8a:08:aa:9c:
aa:96:94:60:4e:f6:33:a9:4d:a8:dc:95:6d:bd:b4:59:2e:26:
f9:5e:5f:be:c6:4a:fe:f4:74:f6:0f:f1:21:e7:d1:17:1c:99:
28:8e:6c:82:76:c8:8e:db:8c:56:9c:15:ad:36:11:36:64:10:
cc:43:7f:4d:dd:c3:85:8a:23:63:9e:77:f1:79:97:48:f4:f7:
20:74:04:af:b1:4c:66:59:7f:a8:29:1a:93:25:c1:e7:ea:33:
27:fc:fb:9a:23:48:94:ec:e4:b9:3a:56:90:ed:60:62:a0:eb:
d5:c4:e9:b3:8e:c0:7e:8a:32:42:47:0e:13:cb:48:c1:bf:09:
3d:31:a2:51:5f:72:40:4c:85:1e:55:63:d6:fb:ea:19:6d:df:
37:d2:61:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:55:16 2025 by rpki-client