Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: 1ZKhp1zUFw/cYr+fryhOxXcBkGwmzbLwXu+Ebe3QLcU=
Subject key identifier: 81:10:2A:9E:B9:F5:FF:15:D7:E4:AC:E7:CD:48:AE:0F:5C:B9:31:A9
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 019A3F8197EC8763A72CD304D0E1230CF5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 06BD
Signing time: Sat 01 Nov 2025 13:00:48 +0000
Manifest this update: Sat 01 Nov 2025 13:00:48 +0000
Manifest next update: Sun 02 Nov 2025 13:00:48 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: Yb76Lay4+35jHzhdgPBlsQ0i6Ag7k85j5CxKJMvclxs=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:81:97:ec:87:63:a7:2c:d3:04:d0:e1:23:0c:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Nov 1 13:00:48 2025 GMT
Not After : Nov 2 13:00:48 2025 GMT
Subject: CN=81102a9eb9f5ff15d7e4ace7cd48ae0f5cb931a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:14:10:85:23:0c:83:0a:ad:76:14:e6:21:
e9:f1:5f:8a:43:11:b3:e6:65:6e:51:2b:53:1c:8e:
5b:be:97:ac:6e:76:84:6f:a5:fc:be:55:a7:93:75:
6d:e6:30:a5:a5:69:5c:5c:44:83:1c:03:c3:35:c6:
64:e1:11:76:3c:3f:86:c3:70:db:7b:4d:74:36:49:
e8:c2:74:07:84:75:e4:37:a8:a7:93:67:08:5a:13:
ba:11:a2:0e:14:fe:72:a8:91:b0:88:01:f1:c0:df:
75:54:4b:92:d2:55:50:a5:50:b6:4c:f5:f7:e1:eb:
6d:ef:23:82:b6:91:75:33:71:c0:59:86:11:49:9c:
96:86:24:14:d0:69:90:80:99:a6:b1:d3:c9:e0:04:
6c:d9:79:85:43:27:7f:d2:40:d9:d5:2a:ea:90:88:
af:d9:54:1d:8d:98:bd:f9:1d:0e:43:96:57:78:52:
34:cf:f1:6c:dd:e2:93:a4:39:03:bf:3d:34:59:91:
83:a9:51:61:88:e8:86:96:9f:5a:0f:b1:e9:77:82:
9b:1e:97:4c:be:7a:8c:90:c9:75:8e:22:a3:14:6e:
d1:d7:6e:9e:c3:e8:d3:45:b8:a1:85:b4:26:a5:24:
1a:41:c3:3d:7c:a6:52:0f:b3:04:b5:d8:08:65:95:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:2A:9E:B9:F5:FF:15:D7:E4:AC:E7:CD:48:AE:0F:5C:B9:31:A9
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:76:ca:08:45:74:5e:92:a4:6f:ac:4a:e5:2c:a1:45:b2:aa:
45:c2:41:8c:6c:8a:c2:9e:3e:46:06:99:0b:6a:52:fe:08:9d:
1e:1c:30:11:14:9f:42:ee:95:b4:bf:86:e8:1f:07:02:9b:bb:
28:2c:2f:fd:0b:69:eb:c6:e2:7e:f3:df:5d:13:f8:e4:19:e3:
76:86:80:99:4c:8c:a8:11:77:c3:8a:d8:9c:42:3c:1f:84:3f:
29:14:b1:13:d0:5c:c5:e6:20:53:36:b4:39:d6:6a:1b:0f:03:
5a:39:91:50:0b:1a:c8:7c:22:12:c2:10:0e:0e:01:e6:25:38:
3b:3c:83:cf:d8:7f:d7:6a:9c:be:09:f2:cf:12:24:95:4d:22:
72:2e:dd:99:76:cd:77:e2:e1:1f:ca:13:15:f1:8c:76:32:95:
e1:7f:bd:a3:73:19:fa:d0:2f:1c:0a:c8:66:3e:fd:75:95:05:
5c:d6:46:60:d3:b1:34:13:29:c0:df:72:a1:47:fa:33:29:fa:
a3:6b:d2:73:bc:cf:dd:21:9e:2d:86:67:d2:4a:e9:2c:e2:d7:
92:27:03:be:8f:17:e9:6c:af:bb:d6:19:c4:76:41:b8:e1:1b:
7c:9b:17:81:bf:1a:26:ec:a7:42:08:69:65:54:65:7d:ab:5c:
5d:38:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:19:51 2025 by rpki-client