Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: nQYVcqUcB7qAbynjzUr2ibl7e2PoOOh/VKZSctQ07So=
Subject key identifier: 0B:71:0C:39:21:15:02:AF:4D:4B:85:4B:F6:63:BA:8E:BC:0B:5D:82
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 01993312595C8E229CD1833FC88CC4081706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 0632
Signing time: Wed 10 Sep 2025 10:01:04 +0000
Manifest this update: Wed 10 Sep 2025 10:01:04 +0000
Manifest next update: Thu 11 Sep 2025 10:01:04 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: wkh3W9vdWLfIewrUkKJP+Pz3Ue5JeR5+XIkZygaqKVo=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:59:5c:8e:22:9c:d1:83:3f:c8:8c:c4:08:17:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Sep 10 10:01:04 2025 GMT
Not After : Sep 11 10:01:04 2025 GMT
Subject: CN=0b710c39211502af4d4b854bf663ba8ebc0b5d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:1b:e6:8d:99:f2:f2:aa:3b:c7:73:6e:ee:
eb:dd:d1:82:f5:06:ed:5e:f4:2b:d3:55:82:70:e8:
48:b4:e9:3f:cd:2d:47:be:f6:da:3b:be:b1:c4:28:
9c:2a:a2:a1:5a:57:0e:5a:fe:a7:55:47:47:bf:a6:
79:60:f2:b8:46:8c:17:09:e6:0c:24:d3:0a:f1:a8:
76:dd:17:60:15:6a:d9:8a:1f:ce:b7:6d:d2:7c:0c:
c7:5e:41:fd:02:ff:5a:71:d8:35:19:8b:74:6e:38:
0a:08:d7:80:fd:58:e8:d4:f7:dd:31:f9:13:0a:20:
e6:28:1e:5f:e0:aa:f2:b8:05:bd:24:b0:11:ad:ad:
97:14:6a:39:39:09:6f:4b:35:87:56:10:90:12:a1:
8d:80:df:f5:bc:b9:9a:d2:98:14:2f:de:16:da:85:
00:47:00:f9:a6:4a:15:01:a5:05:e2:a2:4c:72:e8:
23:c7:57:18:5d:98:84:69:96:71:97:b2:38:53:26:
57:37:29:20:a3:a1:92:f0:ae:3e:b4:61:1d:e9:bb:
aa:30:02:61:52:de:51:eb:e1:49:bb:b4:16:c5:e3:
92:b1:08:d4:4c:98:7c:e8:f8:e4:bb:82:8c:16:83:
d3:e7:77:36:1e:40:89:90:8d:55:f3:0a:b0:70:39:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:0C:39:21:15:02:AF:4D:4B:85:4B:F6:63:BA:8E:BC:0B:5D:82
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:32:10:72:af:6e:2f:86:4f:c5:35:e4:88:3b:e2:a9:07:3d:
08:1e:15:2f:99:cf:68:7e:da:c6:e4:3f:81:79:8f:33:ca:66:
9b:54:ae:23:7c:40:68:a3:e5:a8:09:b7:72:6d:c0:b0:37:03:
71:70:dc:54:86:d1:73:9b:5f:50:b2:93:ac:ad:33:cb:a0:87:
da:03:9e:de:09:49:e4:87:7a:bc:8e:fc:25:37:72:f8:51:fd:
68:98:e6:a6:ec:fa:aa:d4:49:25:06:72:fe:00:41:12:e7:da:
0d:5d:5f:5b:b5:2b:d6:ef:5a:4d:64:9a:93:78:46:77:b4:1f:
ba:ec:0f:df:f6:31:e9:f1:76:b5:d1:55:8b:4f:ec:84:6f:23:
0d:e8:fe:5e:b0:f0:6d:fa:c1:8e:eb:f0:24:ef:4d:16:d8:36:
c1:14:fb:d0:3c:ad:0f:79:65:9e:8c:64:23:4d:44:1e:c2:b7:
37:a7:38:e7:7c:f3:a7:5e:ae:34:68:f2:fe:c9:8e:85:7b:51:
ac:14:b3:54:52:43:2c:ed:66:f2:32:4a:ae:b9:50:de:50:f1:
2e:a6:7b:27:20:94:0b:24:ec:73:30:00:e4:4b:96:23:9c:d6:
7b:f9:ba:9c:49:f5:9d:85:db:80:85:a7:84:01:24:8d:cf:00:
47:0f:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:27:02 2025 by rpki-client