Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: aKDbaTVKgOCzcwUywk6QtcwtD4svMdZCVsvi+trUdYU=
Subject key identifier: A9:66:D6:A5:8E:55:C9:72:E7:88:FE:2B:BA:9B:82:D6:03:32:AA:3E
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019961D9B715DC9A9C398E19D85B1B036B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1693
Signing time: Fri 19 Sep 2025 12:01:22 +0000
Manifest this update: Fri 19 Sep 2025 12:01:22 +0000
Manifest next update: Sat 20 Sep 2025 12:01:22 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: dxwisuMCrwjY6CumC5k9uTNexdTOyn/pWHdVDj910z8=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:d9:b7:15:dc:9a:9c:39:8e:19:d8:5b:1b:03:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Sep 19 12:01:22 2025 GMT
Not After : Sep 20 12:01:22 2025 GMT
Subject: CN=a966d6a58e55c972e788fe2bba9b82d60332aa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:75:b6:b1:fd:57:50:30:06:a7:d9:4c:e0:
9b:99:9a:34:0e:2d:ab:2a:1b:dc:5d:9a:71:92:7d:
22:cc:10:83:f3:22:9f:1c:23:4e:49:7a:92:f1:d9:
9d:ee:a8:e0:f7:82:97:72:8b:5d:1c:74:06:8c:bd:
a1:e3:fc:04:c3:9c:86:d4:cb:1c:31:db:23:65:65:
7b:99:94:69:3c:cc:94:5c:4d:1f:9e:57:ab:99:20:
28:25:f1:8f:e4:ce:2d:2b:ef:7b:1d:fa:58:b2:58:
4f:36:41:2f:4e:79:b0:36:6d:ba:5a:63:39:b1:d1:
af:0f:7b:95:05:32:92:91:0f:7f:db:ba:74:4e:e1:
2c:c0:d6:a3:6c:79:94:8b:9b:fc:7e:07:51:60:55:
1c:12:f5:dd:a1:a4:f4:e5:d7:c7:ea:09:55:8a:25:
35:7a:f5:e6:aa:47:ee:0f:7e:c5:a6:94:f4:39:91:
5e:e4:ef:78:50:2d:b5:dd:05:36:45:c9:43:b8:e6:
c9:c2:ff:59:e4:1e:49:13:09:6f:27:99:1b:34:f3:
75:fb:79:a6:1c:f8:ca:cd:5f:88:77:77:b6:eb:49:
c0:c9:c3:93:10:b0:e6:71:73:d8:bb:88:8f:a7:ec:
be:c2:01:2f:75:f3:44:18:8b:d8:ef:d7:06:be:99:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:66:D6:A5:8E:55:C9:72:E7:88:FE:2B:BA:9B:82:D6:03:32:AA:3E
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ed:04:ee:67:89:ab:3c:cb:94:42:d1:9c:21:4b:ea:5a:22:
45:24:3c:7a:73:8b:10:53:4f:c6:e3:a8:77:4c:49:02:b5:8d:
92:22:6a:b1:65:31:7d:0c:35:b3:ce:0e:b0:b6:de:d4:c0:0b:
95:ee:37:62:d7:6d:f8:da:54:d6:26:21:ef:39:3a:a4:9e:b4:
22:bc:96:43:8b:47:62:68:58:c1:68:f3:30:e2:bf:3b:0d:ce:
af:d0:63:bc:5b:5e:a0:23:30:99:7e:c1:ba:25:a7:67:0a:d2:
a6:cf:e1:e5:7b:6d:f8:5f:17:3e:1a:09:15:f4:46:6b:a9:7a:
09:14:d6:3f:7a:1f:4e:3e:ee:f5:a8:0e:41:c0:f4:d0:59:dc:
f3:c6:be:dc:97:d1:51:b8:58:d6:85:89:4d:8e:e5:de:68:23:
66:96:96:12:a5:0c:06:8e:40:67:74:f7:ea:53:05:36:e6:aa:
57:89:fc:30:88:bd:6f:05:e5:31:a6:a4:92:36:dd:43:b3:84:
9d:41:ff:86:86:84:5c:70:3f:63:65:b9:5c:55:9d:11:2e:80:
08:84:7e:75:b3:60:7b:e4:ff:44:2c:89:92:56:d0:03:75:61:
9f:07:37:5c:77:51:47:2f:ed:d1:3c:78:b8:61:c1:69:30:e4:
7a:db:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:29:06 2025 by rpki-client