Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: smRKkLcUyLAcwwIJHCpc2I+BAESffFjOM6Iv9u/alSk=
Subject key identifier: 2A:23:6F:8A:39:12:36:BE:D3:8B:97:DB:03:83:5B:34:61:25:1F:0B
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019A72CA708A91EC2CCAA9C93F03BAE4E107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0E07
Signing time: Tue 11 Nov 2025 12:01:00 +0000
Manifest this update: Tue 11 Nov 2025 12:01:00 +0000
Manifest next update: Wed 12 Nov 2025 12:01:00 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: T50N23DMpKXiWRC4s+qTBLafwv8BDrT4kemjZOUtX/k=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:70:8a:91:ec:2c:ca:a9:c9:3f:03:ba:e4:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Nov 11 12:01:00 2025 GMT
Not After : Nov 12 12:01:00 2025 GMT
Subject: CN=2a236f8a391236bed38b97db03835b3461251f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:05:79:09:6b:12:f3:55:75:bd:fa:2c:71:
a8:4c:3e:f2:4e:58:50:a0:10:63:84:64:51:7e:0c:
ec:64:2d:2f:64:f4:57:92:67:2f:7e:ed:aa:44:b2:
be:74:47:b5:d4:87:c9:58:a1:30:40:a4:9d:56:81:
15:8c:88:42:de:94:5e:f1:a1:76:d0:bf:24:f6:20:
75:f2:0b:6d:06:e0:5c:50:05:d4:5b:53:e1:28:1c:
38:d0:15:87:c4:1f:65:d7:d5:bd:b8:4a:2e:8b:5b:
97:fa:a3:ef:01:d9:c6:42:e0:74:88:60:a7:35:c3:
88:22:c4:00:b7:22:bd:1d:84:57:3b:30:f9:3f:1a:
69:0c:b7:25:65:bc:c9:a6:7c:a8:af:d2:87:1e:08:
0d:5f:1b:70:ed:59:7a:4c:95:ee:62:58:ed:c0:db:
6f:c7:fd:b6:50:2e:da:95:60:cd:40:6a:de:82:d7:
c1:e8:fe:2c:c8:2f:54:3c:1c:88:2d:6c:e5:1b:d6:
ef:cc:23:02:b4:97:c8:03:f4:8b:fa:3e:cd:c1:2a:
9f:5f:40:68:a4:2a:96:7e:9f:aa:da:95:f0:d1:fa:
ff:ce:8b:68:fa:4f:55:c4:4f:61:e0:3c:27:38:f9:
be:3a:55:cc:bc:fe:69:70:4d:df:a6:96:ad:f9:3b:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:23:6F:8A:39:12:36:BE:D3:8B:97:DB:03:83:5B:34:61:25:1F:0B
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:24:93:51:1c:14:ef:c0:a3:a5:c5:a0:c0:06:12:85:7e:48:
f2:ad:61:7d:59:f4:3b:fe:e0:f9:12:c0:d3:4f:c6:8b:11:99:
70:11:1f:cb:0c:94:e7:f8:1f:53:90:b7:8c:91:f4:bc:ee:a7:
cb:37:48:1b:2b:ef:ab:5a:7f:e2:a4:52:96:e8:aa:91:5b:85:
e5:8f:50:eb:75:02:7d:df:ed:81:fc:95:11:6e:71:70:53:36:
04:c7:5d:a7:b1:b1:33:fb:74:b9:ec:db:ac:6a:a8:1f:2d:af:
b0:bd:c9:73:e4:02:37:b0:9d:98:8c:07:e9:75:48:89:dd:c0:
2c:83:5d:fc:95:8f:1b:22:b5:fc:30:63:b3:02:76:7e:ad:87:
47:5e:3c:de:d3:cc:dc:d7:06:5c:f1:23:35:92:bb:5c:9a:95:
04:e7:93:da:66:57:07:58:c3:25:47:23:ea:19:3a:0f:f9:3c:
c1:8c:ef:2a:50:61:96:40:29:59:49:52:7e:01:1d:3f:59:57:
b9:a6:b3:91:16:ad:d1:ec:8d:a2:a2:4e:60:e2:a1:94:93:fa:
b4:19:0f:79:91:a9:0d:56:43:b9:ae:fc:26:38:c4:2c:dd:c8:
fd:d1:58:2e:6e:2e:2c:88:af:36:4f:cc:a9:c6:68:b2:80:71:
15:a2:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:07 2025 by rpki-client