Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: 4FElgKOgcXDQU28mJtT1ODpX0Dq7UbtjQvEi8HlfYwo=
Subject key identifier: D1:F5:05:09:F8:67:0D:0F:03:45:32:74:A6:44:E9:44:CA:F6:7D:3E
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019A71B80A6AF428F1EDDB3D66231BB962BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: Ceu7QYtT6upx3dbHvUEh4EiuxMjUO5iVOJoNAEnKlwQ=)
2: rGd99voSzroleDeVrTNABeoU6Jg.roa (hash: UJYK4rx2XvhMh0V5UdV9K0pusDUwS3V+qxXywUzqr98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0a:6a:f4:28:f1:ed:db:3d:66:23:1b:b9:62:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=d1f50509f8670d0f03453274a644e944caf67d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:9b:8c:07:80:cc:20:c9:c3:92:82:5e:c3:
52:b5:20:8e:41:1a:99:91:d1:c6:e6:03:88:35:4b:
f7:fa:09:fc:dd:87:03:5e:3c:46:84:af:30:ef:78:
70:7e:38:7b:d0:f2:e2:e7:35:57:f4:bc:6e:51:b8:
c3:65:60:9d:44:af:f0:8a:91:2f:e6:3c:6b:bc:bf:
27:a6:dc:a2:32:b4:37:74:dc:93:b6:c7:4a:db:4f:
7b:1e:8b:c5:c3:d3:0c:02:7d:9e:67:7a:47:a1:a8:
c3:3a:03:54:d6:9e:f0:7d:76:9b:45:7b:12:44:77:
a9:03:b4:e6:88:59:da:54:59:c6:9d:92:57:c9:c4:
cd:f3:91:4f:1a:d2:68:06:e8:18:cb:59:4e:4c:80:
89:0c:3b:7f:8b:1c:03:f6:49:dc:27:95:23:8c:00:
a0:1c:7c:ae:ee:d7:b8:f0:94:73:5f:82:3e:eb:a1:
b8:33:77:bc:01:6e:f6:61:78:95:db:5d:2c:13:3e:
98:a1:97:90:7d:c4:b7:ce:c5:de:ad:74:67:d6:47:
e4:15:71:1f:e0:c7:fb:d4:b2:24:29:d3:bd:c1:fd:
aa:8f:c6:5a:d0:6f:70:38:e0:03:38:b7:48:5c:e2:
fb:35:75:db:78:74:da:64:0d:61:76:4b:ab:7e:43:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F5:05:09:F8:67:0D:0F:03:45:32:74:A6:44:E9:44:CA:F6:7D:3E
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fd:ae:37:73:c6:a2:d3:f8:bb:da:b5:b4:bb:7e:8d:19:f9:
99:14:43:bb:4b:52:92:14:f0:b2:b9:ab:fe:8f:00:65:8a:cf:
84:19:16:e3:46:4a:cd:c2:bc:2d:e1:88:cc:d0:69:45:6d:83:
01:53:7c:57:e3:53:51:09:48:0e:2f:99:ef:83:7c:75:70:b6:
3e:20:4a:a2:d3:35:2b:3c:67:f6:e5:f3:02:d8:79:7f:ae:00:
9e:39:97:95:bc:db:f7:3e:5f:9d:5c:d0:16:74:15:51:00:78:
d9:7b:a2:4a:33:66:e4:51:5a:ca:86:ad:22:07:2d:b4:5d:32:
ab:0b:c4:30:5c:52:91:77:23:81:4c:78:00:1e:4a:7e:7c:ff:
47:6b:d0:cd:7e:e5:ba:b3:2c:15:86:5c:d8:a7:5b:dd:47:20:
66:50:d3:89:e1:0b:30:e9:3e:a6:cb:25:a9:34:d1:cb:14:ff:
dc:fa:42:67:10:a6:3a:4d:20:26:36:eb:10:11:1c:a7:60:f2:
ac:b2:cc:ad:ff:13:2a:a7:6a:86:92:2d:e4:bb:50:70:08:bc:
03:98:f9:58:f8:d3:8e:ad:2f:cc:54:7a:c9:99:1a:2b:66:4e:
de:a4:10:ca:16:59:92:7e:e9:88:49:f5:96:4a:db:b2:bb:4d:
89:9d:bc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:29 2025 by rpki-client