Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier: YIaevzTbXVcrXFsfXGEfIClAKeofK7dCttHUQ81DtPo=
Subject key identifier: B4:F9:30:99:9A:3A:C4:BF:7C:0C:7F:27:0F:F1:87:F7:4D:A0:97:B0
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 019A71EE80E36A37914C523774A44F00BCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number: 05C9
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: Tx0cEGSE4+Wx5VtGt1UnpdQqnhJ1Ca3xqL6X8inbTkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:80:e3:6a:37:91:4c:52:37:74:a4:4f:00:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=b4f930999a3ac4bf7c0c7f270ff187f74da097b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:92:7b:61:b5:63:59:ef:d7:96:84:63:79:
4d:14:4f:e1:fd:61:ff:6d:62:0a:5b:8f:e7:d8:84:
07:56:5e:f0:4b:f1:4e:75:8a:16:87:5e:ae:79:a9:
cb:b6:3e:ef:ba:57:fe:3f:2f:9c:42:08:c6:62:e8:
82:32:c0:ef:a9:7f:45:43:6b:c7:22:f2:ac:7b:a2:
5f:fe:bd:a9:84:13:4c:9d:71:86:d9:61:4a:7d:0a:
55:3c:fb:82:16:e1:25:1f:56:01:0b:9d:92:66:d3:
e0:97:6b:9f:68:e2:47:33:9c:87:0f:1a:da:8d:90:
06:9f:c4:00:fe:e0:3e:38:7d:d7:61:20:b1:e1:be:
39:dd:dc:df:21:a2:ef:3a:6f:50:0e:b2:c1:d2:1b:
4c:e3:4d:c2:f0:fe:99:86:21:2c:39:85:23:4d:ba:
45:c7:5e:9f:94:69:b6:2f:af:01:44:ea:18:f3:71:
7c:2c:29:57:7c:fc:ee:5c:58:80:c2:2b:39:11:b6:
ce:29:b8:8b:79:92:45:3f:53:6c:b1:d3:1d:de:1f:
7a:12:81:d9:02:f3:19:8a:bf:bc:81:0b:d6:3e:8f:
3c:e3:8f:0d:d3:a0:1b:4e:95:7a:f5:68:af:8a:5d:
2d:5e:af:b3:af:b9:39:4e:f5:5a:f3:2f:a1:49:2f:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:30:99:9A:3A:C4:BF:7C:0C:7F:27:0F:F1:87:F7:4D:A0:97:B0
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:80:ae:c0:64:00:aa:f6:06:3c:b5:dd:b2:ab:47:e7:e6:1a:
72:e1:a2:0c:49:ac:4e:a6:00:51:69:53:3c:93:e5:e4:2e:98:
a4:5e:16:4a:c1:66:9d:38:6e:78:39:ae:aa:ab:b2:39:48:ae:
82:27:c8:22:09:0b:e8:bb:d1:f0:22:a9:7f:8d:ba:30:9e:f5:
07:85:5a:8d:3d:56:ce:65:f7:ea:a0:13:e1:7c:d0:88:67:87:
62:6f:51:be:57:87:99:52:5e:d0:98:34:ef:42:3d:7c:63:30:
8f:77:dc:25:61:c6:da:e4:5f:bf:58:be:7b:04:e5:66:25:28:
13:5b:9d:1f:3d:75:0f:c7:0d:ab:d2:02:9c:67:54:78:e4:5b:
94:ee:b5:72:5e:e2:39:54:e0:e8:64:f4:ec:a5:bc:ae:73:2d:
b3:5d:c6:bd:d3:7e:3e:18:4d:26:33:87:d1:d8:6f:5d:2c:93:
6f:be:0d:fb:28:61:9d:38:31:8a:8b:15:55:61:a4:31:cd:ee:
21:8a:a6:56:a2:7d:63:eb:07:d6:01:78:d7:db:70:39:37:32:
2d:52:ad:58:a2:09:0a:77:ce:da:e5:17:7c:f8:ea:1a:a8:b4:
77:cb:ca:35:8d:ec:77:e9:b5:2e:8f:bb:45:ca:32:3a:b2:88:
f2:e4:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:18 2025 by rpki-client