Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: VG/cnVVngmC/Y6FMSnjUK38LgO7GcefBQcwTOe6+2Tk=
Subject key identifier: BF:02:4A:54:CA:33:F7:BD:7E:01:6C:23:25:85:59:58:B0:22:D4:E2
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019A706E7F73215F1C577CCEB83DB73283C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 079C
Signing time: Tue 11 Nov 2025 01:01:21 +0000
Manifest this update: Tue 11 Nov 2025 01:01:21 +0000
Manifest next update: Wed 12 Nov 2025 01:01:21 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: a5cpt7psGZuycU/mdIQQsjCeeL09EM4hsp1j0oQR638=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:7f:73:21:5f:1c:57:7c:ce:b8:3d:b7:32:83:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Nov 11 01:01:21 2025 GMT
Not After : Nov 12 01:01:21 2025 GMT
Subject: CN=bf024a54ca33f7bd7e016c2325855958b022d4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:8f:df:54:40:80:22:1f:f7:b9:f5:04:d5:
d9:cc:1b:05:54:3b:31:7d:ba:89:ad:8f:12:f8:5b:
6d:c1:0e:c6:8d:27:2b:98:b9:1f:8b:18:7f:0a:e7:
88:28:6c:d1:4d:0f:ee:2b:92:3f:99:6e:af:23:b1:
b6:00:67:c3:f1:41:86:9e:93:bb:e8:f7:86:bf:6d:
b9:d7:10:f2:f0:27:cd:4f:a6:44:32:f8:ea:44:df:
6c:4f:af:3f:6b:35:cd:50:d7:15:bc:8a:4d:89:bf:
7c:c1:50:4a:ab:f0:45:f4:e3:88:e6:f6:be:de:ab:
71:c8:23:26:5e:cd:00:d6:b9:76:48:68:4f:91:52:
99:03:0c:66:89:48:4f:81:40:e0:30:32:68:6b:b6:
31:8c:d0:94:3b:b4:d8:44:a6:45:ae:dc:c1:9e:73:
b5:86:d0:66:9b:65:ee:e5:9a:96:10:cd:9c:22:41:
97:b7:40:c0:36:ad:52:0e:ec:a4:85:70:68:06:e0:
e1:a3:bd:29:74:55:a4:62:89:ad:86:b5:b9:08:5b:
ca:1b:d7:28:81:c7:d2:20:79:7c:2d:a8:02:d3:95:
50:69:ee:c1:34:7a:a4:3c:33:dc:80:bd:38:ec:15:
56:74:8d:fe:fe:e1:5e:83:32:53:16:b7:b8:8a:83:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:4A:54:CA:33:F7:BD:7E:01:6C:23:25:85:59:58:B0:22:D4:E2
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:11:6c:15:2b:28:ca:e4:d6:5d:6a:07:f4:2b:7e:49:fa:10:
7b:7c:ea:87:15:04:0d:3d:f6:86:55:98:41:1d:95:11:c6:22:
28:f7:68:00:ec:a0:97:02:94:a4:ec:f2:10:40:cb:67:75:e0:
07:49:99:85:90:fb:a3:fe:62:31:54:6c:81:fe:fd:3d:2e:c5:
1f:5b:f1:36:ea:ac:c4:b7:1c:dc:e2:ca:5b:02:e5:51:0b:cf:
10:db:28:57:43:f2:04:60:15:72:77:6b:76:6a:ac:f5:d6:30:
a6:9d:35:9f:80:7b:17:64:02:0f:db:5c:c6:19:11:9d:02:c1:
1f:8c:f6:f1:f9:33:93:05:83:58:7f:ae:5e:70:26:e5:ee:fb:
b3:7a:03:ed:06:dc:86:40:b2:ff:6d:71:58:a2:f0:9a:52:da:
04:3e:ba:68:ee:cf:02:d6:ec:b8:02:ca:f3:25:27:ea:4c:2a:
d9:f5:98:44:28:43:df:d1:af:a9:b7:22:61:80:80:c1:05:ab:
00:41:4d:7d:44:48:47:a2:dc:f9:55:56:6f:68:55:e4:57:57:
af:11:64:18:f5:0e:cf:70:38:ca:37:15:9f:c5:71:56:91:f7:
a7:80:19:00:82:ff:8e:67:17:12:31:ee:57:ed:78:62:16:a8:
45:18:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:14 2025 by rpki-client