Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: 2vRdowK1TRUBAYRlpAgubbS5buomV3UmgPr/OhhBPW0=
Subject key identifier: 0F:A9:A8:5C:25:11:20:00:55:99:30:DD:3E:B9:0D:E8:7E:10:A4:7F
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 01992443D04867A799EC41C086473B0E33FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 06F0
Signing time: Sun 07 Sep 2025 13:00:47 +0000
Manifest this update: Sun 07 Sep 2025 13:00:47 +0000
Manifest next update: Mon 08 Sep 2025 13:00:47 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: D/7+r8zHFFpyYIIpaOnjowTbIJVcJY9vX5coBkF63GE=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:d0:48:67:a7:99:ec:41:c0:86:47:3b:0e:33:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Sep 7 13:00:47 2025 GMT
Not After : Sep 8 13:00:47 2025 GMT
Subject: CN=0fa9a85c25112000559930dd3eb90de87e10a47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:48:7d:eb:8b:ea:1c:e3:22:43:60:8c:f3:
88:4e:5f:bd:1d:86:db:87:14:c2:86:95:ac:f8:cf:
76:2f:d2:a9:23:6a:4c:43:30:bc:87:80:c7:20:18:
bb:f1:f8:83:9a:e3:ae:bb:5b:f8:38:aa:4b:71:03:
ac:ab:5f:22:43:01:67:82:45:0c:6c:a0:d5:81:42:
2c:6b:86:7e:a2:eb:d8:35:76:68:72:f2:4e:43:15:
87:e8:67:6f:20:92:05:30:cc:6e:5e:5b:bf:27:0f:
8b:5b:1c:88:2b:16:40:ad:85:21:91:80:aa:a8:ce:
10:44:c2:0b:2b:b7:ae:8a:1b:9a:55:35:29:dc:0e:
e2:a3:0d:2b:4b:f4:ec:f9:a7:71:f4:cb:b3:1a:e7:
52:68:6f:7a:d5:0c:a3:77:43:26:4b:a6:5a:cb:c4:
e5:57:67:9a:2b:ee:ef:63:a9:c3:2f:70:27:7b:d1:
50:26:9f:57:59:d6:3d:db:8f:b0:7a:3f:31:67:85:
97:99:83:7e:56:79:e8:bf:18:be:8a:29:27:58:92:
06:e4:95:08:f2:1b:22:17:b6:26:3a:23:87:28:b7:
1f:1a:fa:39:8f:7e:06:57:34:fd:e3:bc:09:2a:1f:
cc:e6:b1:a2:a6:53:90:9a:b8:c4:77:04:76:43:1b:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:A8:5C:25:11:20:00:55:99:30:DD:3E:B9:0D:E8:7E:10:A4:7F
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:15:14:50:b5:08:2e:35:fe:6a:68:5c:ed:ca:25:54:69:ad:
ab:e4:d0:b9:54:03:0f:40:80:d6:25:b9:98:a7:93:58:69:e4:
fa:7d:b6:39:e8:1e:07:6b:2c:5e:d0:39:a9:41:cb:2e:0f:4c:
52:a6:a3:11:a5:b0:15:d8:e6:9b:a9:96:66:a9:87:dd:f5:91:
9a:7f:fb:b4:95:aa:59:53:80:f5:da:ff:e9:1e:11:50:0e:84:
5e:54:ad:59:cb:85:0b:41:c2:a4:d1:bb:7b:c3:c0:7e:87:bc:
0d:6a:54:ff:3f:95:01:75:29:f8:f1:31:25:ae:36:67:df:d2:
e2:03:46:d2:4e:27:3c:90:aa:99:58:c6:61:83:83:5f:27:9a:
5e:6e:a9:3d:7c:c3:fe:88:33:2d:f9:8d:ac:b0:bb:17:c2:f5:
54:bc:a9:2b:06:d9:b6:8e:18:58:1d:af:26:6a:6c:12:1c:52:
f2:b6:65:73:ee:9a:f5:76:f7:66:20:62:f7:5c:24:d5:68:0a:
da:6f:42:91:7f:cd:25:0e:9e:68:00:6c:f3:86:63:8a:f0:f5:
9d:a5:11:23:34:5c:60:05:b2:0b:5e:e6:14:9e:24:de:b1:42:
c1:23:16:4a:2b:6f:c3:09:35:e6:46:f5:20:45:71:93:22:2f:
61:79:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:08 2025 by rpki-client