Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: 9vMJWBa36yQlkmoVz8nOLq5DDzU9ybzwdz7n1nafWXU=
Subject key identifier: D8:C4:09:D0:92:47:81:59:BE:52:F6:62:88:D8:64:79:45:C2:B4:12
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 01985569D2D933204F894D679AD9A6312D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 09:00:55 +0000
Manifest this update: Tue 29 Jul 2025 09:00:55 +0000
Manifest next update: Wed 30 Jul 2025 09:00:55 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: feB9SygS7HvQOvII7NEoEC88sX61gVdZ95zvRKYPxHA=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:d2:d9:33:20:4f:89:4d:67:9a:d9:a6:31:2d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jul 29 09:00:55 2025 GMT
Not After : Jul 30 09:00:55 2025 GMT
Subject: CN=d8c409d092478159be52f66288d8647945c2b412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:72:0d:c0:b6:7f:51:34:80:b4:58:62:64:
56:e7:c1:5a:87:77:50:67:16:89:37:7d:c4:bb:0f:
c8:2d:52:b5:98:b5:ff:fe:b6:fe:f0:f6:e2:d5:92:
6b:93:67:7d:06:50:98:58:bd:e8:9a:d4:a0:f9:6c:
97:ec:c8:2b:5e:99:19:ed:56:dc:06:64:eb:d7:55:
e5:f6:5d:23:23:48:8a:b0:9a:89:70:ab:16:0c:d3:
4d:17:88:5b:2d:2c:b4:d9:1d:e6:95:51:76:28:43:
db:b3:be:68:2e:7e:e2:79:34:05:98:c0:e4:3e:00:
f6:37:4d:53:95:d6:c0:f9:da:77:7c:89:e0:6f:df:
bd:06:81:6c:27:5c:57:c5:7c:93:9c:be:b0:38:99:
b6:f3:70:a7:97:dc:be:21:4c:ec:6e:3c:6a:2f:3e:
fe:1d:98:4d:b9:d6:d9:39:36:f6:c5:3a:25:9a:bc:
8a:e7:29:90:f7:ed:37:ca:c8:f9:58:a2:e1:e7:7e:
4d:dd:51:a5:fc:08:86:d8:bb:fb:fd:e9:7f:de:16:
4c:da:e2:8f:eb:a3:16:9a:9c:1d:aa:66:f7:55:5e:
5d:04:54:91:8d:71:6c:d3:44:93:c0:58:cd:65:f4:
2a:37:42:c1:3e:8e:7f:aa:3b:76:20:e9:d2:b8:10:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:09:D0:92:47:81:59:BE:52:F6:62:88:D8:64:79:45:C2:B4:12
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:38:b8:b1:41:18:84:0b:5c:a7:34:f2:0a:c1:8e:cb:be:f9:
f2:43:bf:91:dc:00:8d:73:9d:6c:2c:e5:41:32:26:62:67:99:
9d:7e:63:36:c2:b4:1a:37:3b:1b:b7:25:b1:bc:e7:93:f0:35:
57:12:34:75:af:67:d7:48:00:ae:c6:33:7f:aa:e0:f9:e8:9b:
b5:db:2d:ad:94:a6:56:c9:d9:e0:82:0b:fc:21:f9:5b:07:3f:
91:63:6a:80:0c:60:c8:aa:9e:39:1b:fd:70:d6:ef:e7:47:e3:
8a:3c:92:ee:7f:ac:3a:1f:56:ba:f8:8a:7d:85:69:1b:2f:53:
1e:5e:bf:28:05:7e:1e:0d:56:33:cf:95:35:c7:15:f5:14:f6:
f2:2a:bc:37:e4:22:07:47:2b:ef:81:21:5a:38:c0:eb:5f:57:
8b:5c:34:9e:6b:19:0b:58:00:66:fa:f2:84:c4:f7:1f:9c:a7:
ae:16:bd:2b:2b:7f:66:ed:7a:9a:d5:3c:4a:e8:89:bc:a8:89:
ff:74:5b:0d:d7:f2:99:0a:c7:03:12:6b:57:d5:9b:74:d2:77:
71:c2:42:85:71:0f:ed:94:7f:6a:6f:33:7d:cd:fc:b6:1b:8a:
d4:b4:e5:9f:7f:1c:aa:99:71:ec:69:10:b9:48:ca:a2:91:51:
cd:c2:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:26:57 2025 by rpki-client