Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: c7h62O5CuO4ogfRLaLgGg87zL82Wsh4D1CID0IhamzE=
Subject key identifier: 1C:53:43:D6:41:2E:20:1A:60:7B:A8:4D:F5:A6:88:75:E9:0D:32:9C
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019A71EEC7E3A0B721385A7A961A95673712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 0EF8
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: P9l9Fz+o0L1l9JbF2PMemWAUuTX/KJGAU7tB6YheFK8=)
2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c7:e3:a0:b7:21:38:5a:7a:96:1a:95:67:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=1c5343d6412e201a607ba84df5a68875e90d329c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:3b:c8:18:3c:db:4c:49:f9:8b:e0:35:7b:
ba:df:54:1f:95:09:36:26:4b:e0:54:d1:e7:e1:6b:
9a:31:cc:a9:9b:1a:61:54:36:ce:f4:2d:e1:2e:b0:
52:a3:5f:27:40:26:78:b9:82:c2:74:96:74:3a:9f:
33:ca:8b:2e:48:77:ee:73:ca:c1:2a:00:1f:64:f0:
22:9d:4a:87:6d:1e:37:01:9a:cd:6e:4e:ee:61:96:
7a:7a:be:83:b2:b5:b0:6e:7a:63:a4:aa:2a:17:36:
4d:0e:4a:4e:d4:69:05:84:6b:37:59:c9:fe:a3:a5:
1d:02:2b:b8:03:84:15:c4:8b:91:10:5b:b9:b3:f1:
f2:e9:70:2a:b8:8e:84:87:ab:67:90:9e:0c:0e:5c:
c4:48:db:87:e1:4b:60:85:52:29:ed:b0:8b:eb:24:
fe:9c:21:4c:66:5d:e0:de:31:93:43:a7:c9:3f:2f:
16:30:5a:68:e1:0e:e4:84:e6:80:32:78:71:2a:ea:
07:75:d4:88:23:be:e3:e9:c9:fb:ea:f1:55:48:99:
18:a8:29:34:07:93:3f:16:a7:18:e1:5c:96:ea:ad:
0f:3d:cf:b9:0d:36:bd:b2:ff:69:77:a6:ee:02:4f:
d0:dc:06:6f:de:f2:7f:3d:2e:ca:95:ea:ee:ae:1c:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:53:43:D6:41:2E:20:1A:60:7B:A8:4D:F5:A6:88:75:E9:0D:32:9C
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:56:38:6e:60:8e:99:80:d1:d2:05:01:c2:b5:69:2a:da:49:
94:05:70:36:b1:a5:2e:ca:c4:c6:25:0b:11:82:40:81:4b:2e:
74:e1:88:c4:b1:ee:76:ea:4d:23:70:34:22:b0:11:d0:e4:bc:
4e:bb:8c:17:ef:fd:dc:9c:a6:47:ed:76:be:c5:59:fc:7e:3b:
04:35:70:6d:be:4b:b7:43:e7:7a:49:1e:8a:ab:87:33:9f:e1:
12:21:bc:e1:90:ac:56:09:01:3e:e0:aa:b9:6a:98:64:7c:68:
4c:69:ea:6a:8f:9d:3a:df:e5:56:bc:a2:8d:87:1a:7b:ea:45:
0d:22:16:59:25:09:cf:d1:c7:27:b7:4b:ad:59:b6:fb:9c:2e:
d0:ba:69:e2:13:be:2f:c5:81:7a:b4:e7:8f:8b:89:4e:09:2a:
f7:c2:5f:0a:18:00:51:a7:2c:9d:e2:84:9f:22:02:d0:90:32:
40:e4:79:40:15:96:a8:9d:f6:16:96:70:53:05:1c:ce:fc:51:
9e:ab:a3:f3:a8:cb:69:4a:d1:02:65:aa:cb:61:07:0f:f6:d0:
a0:a9:54:25:b8:c5:a9:7b:3b:c0:61:fe:e7:46:16:d3:48:d2:
af:9b:53:5f:39:45:51:66:da:d9:fc:57:15:14:34:2f:03:d4:
c7:2b:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:14 2025 by rpki-client