Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: eyzuwuImkAMUqcRl7R74Rexllv08QNjHS22F+I0aPGo=
Subject key identifier: 7C:FA:D8:9D:BD:4B:C0:99:5C:1A:B7:05:32:13:A1:0B:D2:F4:04:25
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 019A711379CF336EA69ABB8E9196F6436B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 1663
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: 6SJCkfQDPzfTgx16iaJU0YHp1fBAW/O/OzM2ij3yRqw=)
2: WodU5gDNw3cjAmLp67NGPeKWzm4.roa (hash: YXZKSjPXGmgzYL0wl21TgIMvnXm5A4XUDZj4O/e7fR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:79:cf:33:6e:a6:9a:bb:8e:91:96:f6:43:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=7cfad89dbd4bc0995c1ab7053213a10bd2f40425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:bc:3c:50:ae:f9:1e:fc:ac:0a:98:f0:b0:
1e:26:78:cc:0f:2d:c4:c7:bb:09:cb:b2:1e:9d:08:
8b:4e:59:52:0b:79:e8:72:28:aa:55:94:fc:3f:0a:
95:64:91:85:b4:0a:06:c5:fd:c2:6e:21:e9:85:5e:
03:35:89:64:c1:d2:c2:6f:94:94:45:ce:92:e9:28:
8a:9d:d9:05:22:b4:4d:82:6c:50:92:0e:27:0f:e1:
f3:9d:a6:c0:ed:e1:46:af:9a:42:44:e4:f7:cf:88:
d6:e9:59:24:d1:33:09:0d:55:fb:e5:50:bc:5b:bb:
f1:4a:6d:7e:d2:cc:2c:50:1a:26:32:02:f0:a5:3f:
97:0e:2e:b2:c8:67:70:8c:d3:d1:18:08:d5:01:58:
e5:4b:4d:50:98:82:42:87:b6:3a:7f:96:46:31:f4:
e8:e5:64:29:45:18:9e:07:42:38:8b:db:0d:a5:79:
cf:8b:a3:a9:4f:b0:db:d9:f3:1b:c7:67:7f:4d:dc:
14:e7:09:27:39:91:99:5b:20:0a:5a:5c:3d:34:72:
b7:6a:18:f4:d7:ff:5c:00:50:b5:61:c1:e0:97:e3:
f7:6f:4f:68:7a:b9:8d:ae:ea:77:02:3f:69:88:b1:
c1:cd:79:89:69:98:83:03:ac:92:4e:72:99:bb:42:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FA:D8:9D:BD:4B:C0:99:5C:1A:B7:05:32:13:A1:0B:D2:F4:04:25
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:40:f9:6a:ee:d4:2b:f4:f7:fa:5e:74:f4:48:86:ee:97:12:
5e:ee:ed:0b:3b:c3:42:31:f8:81:d7:57:ac:df:a4:d3:f1:32:
8d:32:d1:b5:8f:27:4f:89:e5:69:29:4c:d4:fb:d0:30:4b:26:
2a:42:3d:ee:77:dd:eb:20:6f:7d:3f:44:2a:ca:3d:de:eb:93:
a5:12:77:ce:13:f9:91:f4:67:6b:be:44:55:c7:e9:5b:3f:bc:
ab:5a:a2:6f:72:7a:80:82:72:6a:41:b9:d0:ed:e6:ca:20:f5:
89:4e:84:7d:26:10:4a:59:4f:3c:9d:ca:3e:0b:c9:4d:6e:0c:
e4:38:40:38:ad:b7:f6:fa:9b:3f:18:22:12:fd:bb:2a:d5:8f:
99:f6:d7:76:8f:59:50:de:c5:ac:28:87:54:61:8f:39:bf:08:
bf:46:06:ca:67:a5:1d:83:da:89:11:60:e8:d0:e5:06:dd:8e:
30:f8:1b:72:0e:73:14:78:05:44:f2:5d:69:12:27:11:f3:67:
e7:d7:ad:f9:1e:54:10:81:1f:a3:e3:57:08:3d:15:be:a8:44:
de:bc:5c:d7:02:a3:fc:9b:42:ab:20:47:2b:b7:9f:71:8b:dd:
7c:62:d2:76:14:be:4d:b7:0e:81:f6:95:08:6d:9d:36:88:79:
75:68:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:10 2025 by rpki-client