Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: XindGTq2fN2MWNGwsmzY6CXAep+Hc3NgoYWBI6jEK2U=
Subject key identifier: AD:82:AF:79:15:F3:80:A0:7F:46:25:55:CC:39:46:BC:AB:D4:8E:51
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 019A296766F503E730DC465F213F53CD96AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 0713
Signing time: Tue 28 Oct 2025 06:00:33 +0000
Manifest this update: Tue 28 Oct 2025 06:00:33 +0000
Manifest next update: Wed 29 Oct 2025 06:00:33 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: U1gos3KjiRfdSmn/gldAsqNik1L8ys/Fm4iFOANmaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:66:f5:03:e7:30:dc:46:5f:21:3f:53:cd:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Oct 28 06:00:33 2025 GMT
Not After : Oct 29 06:00:33 2025 GMT
Subject: CN=ad82af7915f380a07f462555cc3946bcabd48e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:79:e4:75:5a:4a:d1:92:32:2f:f5:bb:de:
17:cc:64:ae:7a:2e:70:1d:32:b1:1c:b7:49:77:46:
0d:08:84:d9:68:44:1a:7e:4b:0e:dd:ff:c4:1e:9f:
d9:1b:e0:dc:15:07:9a:19:c3:01:43:1e:a6:4d:32:
cd:a7:53:c6:b6:91:5b:fc:80:43:81:c2:a0:b1:bb:
76:cc:76:8c:a6:c3:a0:5e:a5:b8:0b:31:0f:28:80:
e0:7e:d0:6d:89:90:90:99:d0:ca:d7:b0:5e:32:b1:
62:cb:30:48:db:9d:23:f9:e1:a0:9d:b7:75:2f:a8:
cd:61:59:84:59:40:c3:90:45:42:e8:87:51:ae:93:
03:61:a4:3a:84:82:ac:92:92:e3:16:d3:4a:a9:84:
ca:26:f7:87:80:66:f3:e9:ea:7c:3a:f5:39:dd:11:
6c:99:d5:b5:08:e2:f1:92:30:b9:6c:53:40:5d:db:
c5:78:9a:ee:89:50:ac:ca:c4:58:fb:9c:74:91:b6:
5d:6a:3f:f0:83:f1:e8:96:48:9e:15:2c:eb:2f:0a:
94:43:b5:08:80:98:c8:10:6f:87:11:97:9e:d7:78:
7a:af:0a:1e:c1:74:a3:be:d7:33:e2:b9:ae:3b:3a:
27:83:41:8c:c7:d2:7d:c8:fe:4d:2c:3c:3e:89:ca:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:82:AF:79:15:F3:80:A0:7F:46:25:55:CC:39:46:BC:AB:D4:8E:51
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8d:74:69:79:7a:99:65:42:c2:7f:6e:4b:6a:5a:0c:32:10:
67:11:93:c8:43:98:47:eb:f8:e6:08:13:77:d7:a4:63:58:8b:
67:cc:6e:d2:a8:a4:a0:e9:a8:cc:58:79:ce:00:da:07:da:73:
4e:a6:2c:a4:33:31:12:fc:e4:43:0f:8c:40:27:15:7e:d2:e5:
57:08:3e:4d:3e:bd:6b:b8:c0:e9:89:6a:a2:e1:dc:6d:f4:b1:
9a:64:5c:21:4a:7e:ee:86:83:e2:5a:6d:5c:f5:58:86:f9:09:
78:4f:88:16:f2:b7:57:3f:e9:a6:44:7b:59:5f:f0:a4:39:cf:
c9:cd:0a:90:a9:da:7c:58:e7:7f:e7:55:e3:30:2a:55:2a:fd:
b5:28:d3:89:5e:d3:0e:77:97:b8:60:7f:53:ed:7f:0b:23:ba:
7d:21:a3:6b:41:c3:ec:b1:78:46:69:06:59:84:cb:fa:f7:b8:
9e:50:05:7d:b5:61:c1:06:12:64:fe:6a:03:9d:0d:2c:8c:82:
cd:d5:86:9e:50:93:bc:ee:b7:4c:1e:2a:91:39:de:f5:a3:37:
22:ce:ba:65:a8:13:71:ce:f9:94:d7:e9:c6:d9:e4:23:fd:92:
56:03:73:7b:9d:b6:94:be:5b:dd:e9:20:3f:72:a7:2a:c0:2f:
4c:e5:bf:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZ2b1A+cw3EZfIT9TzZatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjkxM2UzMTUzMTAxOWE0MzI4MTkwNjU1YjQ1ZGQ5NmJk
ZDJjOWUwHhcNMjUxMDI4MDYwMDMzWhcNMjUxMDI5MDYwMDMzWjAzMTEwLwYDVQQD
EyhhZDgyYWY3OTE1ZjM4MGEwN2Y0NjI1NTVjYzM5NDZiY2FiZDQ4ZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufl55HVaStGSMi/1u94XzGSuei5w
HTKxHLdJd0YNCITZaEQafksO3f/EHp/ZG+DcFQeaGcMBQx6mTTLNp1PGtpFb/IBD
gcKgsbt2zHaMpsOgXqW4CzEPKIDgftBtiZCQmdDK17BeMrFiyzBI250j+eGgnbd1
L6jNYVmEWUDDkEVC6IdRrpMDYaQ6hIKskpLjFtNKqYTKJveHgGbz6ep8OvU53RFs
mdW1COLxkjC5bFNAXdvFeJruiVCsysRY+5x0kbZdaj/wg/HolkieFSzrLwqUQ7UI
gJjIEG+HEZee13h6rwoewXSjvtcz4rmuOzong0GMx9J9yP5NLDw+icoeywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2Cr3kV84Cgf0YlVcw5Rryr1I5RMB8GA1UdIwQY
MBaAFA8pE+MVMQGaQygZBlW0Xdlr3SyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAt
MTJkMjhkN2Q0MjIzLzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAtMTJkMjhkN2Q0MjIz
LzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao10aXl6
mWVCwn9uS2paDDIQZxGTyEOYR+v45ggTd9ekY1iLZ8xu0qikoOmozFh5zgDaB9pz
TqYspDMxEvzkQw+MQCcVftLlVwg+TT69a7jA6YlqouHcbfSxmmRcIUp+7oaD4lpt
XPVYhvkJeE+IFvK3Vz/ppkR7WV/wpDnPyc0KkKnafFjnf+dV4zAqVSr9tSjTiV7T
DneXuGB/U+1/CyO6fSGja0HD7LF4RmkGWYTL+ve4nlAFfbVhwQYSZP5qA50NLIyC
zdWGnlCTvO63TB4qkTne9aM3Is66ZagTcc75lNfpxtnkI/2SVgNze522lL5b3ekg
P3KnKsAvTOW/FA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:23:57 2025 by rpki-client