Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
File: DycDq41ZdUqyeopRaFRZG_sPLbc.mft (raw, json)
Hash identifier: MYSRulEjzxAab3nsq7zG0aWDer4dm6XYuMsycUBqI7M=
Subject key identifier: E0:66:28:41:D4:C4:94:C2:88:4D:F5:FD:AC:DF:C7:23:BE:06:C4:9F
Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
Certificate issuer: /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Certificate serial: 019A7225F4DC1886C27DF57414449BF39C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
Manifest number: 012F
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: DycDq41ZdUqyeopRaFRZG_sPLbc.crl (hash: uf/IJJiJeTwFFAXyCTqtVVvtF0lmuCdoD563gX0zHF4=)
2: EvvE5cYylw_MjstUmUy-jk4YLrA.roa (hash: gBE8rDGiUuVhCkWL45jKVIjPxTgyeFG4wEdX18IeEVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f4:dc:18:86:c2:7d:f5:74:14:44:9b:f3:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=e0662841d4c494c2884df5fdacdfc723be06c49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:bc:1c:f8:da:eb:16:20:0c:02:5c:e5:a2:
f9:34:b1:91:af:e2:b9:4d:1a:75:5b:8b:f9:30:45:
3e:55:19:69:20:40:4f:10:a8:ba:14:cc:27:79:49:
f3:28:bc:99:1f:25:ec:1b:b3:cc:d9:95:da:23:95:
cf:33:42:3f:59:1f:81:f6:83:b6:1c:ce:5c:1e:7a:
97:6d:b4:8a:be:e9:50:a0:f5:46:24:9b:86:62:c4:
ed:47:4b:a7:4d:3a:7b:b4:27:6a:31:9b:3a:61:36:
7d:ab:9e:dd:b3:75:90:be:55:05:31:a3:79:b4:ce:
d7:79:c5:6b:5a:8f:69:11:83:9f:fa:32:cb:4d:45:
64:a8:a3:08:9f:dc:a3:c7:83:99:a0:a0:95:74:cd:
50:ba:f0:7c:6b:db:e4:f8:b9:78:c6:75:1b:e2:e1:
24:f8:88:2c:3b:3c:52:0c:e3:f5:2a:ed:23:34:4c:
dc:17:dd:cb:7b:e0:76:52:86:af:f9:6c:bb:a2:0a:
8c:f9:ab:24:12:5f:a0:1f:e8:bd:e9:d3:3a:77:e5:
42:6b:7d:d4:77:05:b2:99:b9:c3:df:3b:5b:b2:cc:
3e:ef:b0:78:ce:8f:1b:38:fd:4d:c4:cb:2a:dd:f5:
18:b7:34:e2:b3:ee:71:91:06:6c:0a:b6:2f:5b:1b:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:66:28:41:D4:C4:94:C2:88:4D:F5:FD:AC:DF:C7:23:BE:06:C4:9F
X509v3 Authority Key Identifier:
keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c8:65:39:14:c2:07:33:55:b8:18:13:3f:5f:61:44:7b:38:
b1:05:a2:f5:9d:44:95:e9:2c:da:cc:9e:64:2b:b7:eb:e1:ce:
c9:0e:65:db:74:a0:98:12:dc:d5:35:28:6a:42:bd:64:6a:99:
9a:24:7c:6e:d5:9e:f2:49:e3:e1:e6:6b:85:af:de:f5:49:1c:
de:0e:5b:30:d5:38:fe:d5:5b:b7:ad:52:60:87:04:21:b0:8d:
ac:32:5c:0c:cc:91:af:3a:89:de:51:b3:c9:fc:d0:28:28:f8:
94:13:2d:22:fa:38:f6:2d:bd:b4:ee:83:a7:76:d4:75:11:4c:
a4:82:2a:89:3c:4f:7c:01:b3:97:b2:78:ef:e1:eb:72:33:c9:
ed:b2:96:56:b4:e3:34:b6:7f:c7:b8:4a:bf:b0:85:84:08:68:
c3:bb:eb:e9:8b:e7:e4:72:93:26:c0:56:5a:c5:79:61:61:b3:
e1:14:22:20:66:6e:96:aa:5a:51:59:fc:a4:08:53:c7:8c:cb:
8e:4f:1e:d4:fc:63:0b:71:c3:99:2f:c9:f2:c2:46:4f:70:99:
19:f0:d9:50:df:63:7b:49:34:5d:8c:4c:77:09:2d:96:fb:1b:
ea:91:72:52:02:9a:a8:f7:a6:32:04:1b:b2:ba:0a:e0:ea:ea:
c0:67:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:08 2025 by rpki-client