Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: ejjCm06gDSV5KakUHTCZVquo88S7O7deG2ZWASOivks=
Subject key identifier: 88:B3:80:5C:D1:58:3A:6A:2D:C5:B9:20:9F:2A:0F:82:4E:0A:D6:70
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019A725CD9CB06A90267432A9E03DCCFD278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 167D
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: 5vtWNfKKTVF3rr3QwrMAOZ3EJLLHprXRNEiILuNMwQ4=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d9:cb:06:a9:02:67:43:2a:9e:03:dc:cf:d2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=88b3805cd1583a6a2dc5b9209f2a0f824e0ad670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:3d:00:ef:ae:bb:ff:ac:36:61:16:cc:67:
04:c3:40:6b:b2:b3:2b:af:fc:a6:57:2f:0d:2b:f7:
35:97:3d:4e:32:bb:83:60:01:56:df:f5:45:ca:d9:
5b:84:41:d9:f0:17:cd:cd:eb:87:68:0c:0a:d7:b5:
55:5a:73:6c:88:9f:a6:c6:2a:9f:d1:f3:e8:63:63:
88:dd:2a:c5:93:6a:ec:03:66:fd:ec:5b:d1:71:cd:
75:5a:40:54:6d:10:14:d3:0b:1d:4d:fe:57:86:42:
51:62:8d:9a:d8:2c:a3:61:51:41:13:ee:fc:94:14:
14:83:f9:93:cf:8b:5d:20:c6:74:c6:36:81:05:95:
67:cd:c4:44:00:18:66:b4:ff:bd:ac:01:2b:e6:0a:
55:8a:6d:c6:70:46:37:f2:a6:ef:de:9e:ff:bc:57:
7f:dd:db:96:a3:73:c3:5f:46:48:e0:76:1b:72:1c:
df:e1:dc:d4:0b:c9:78:4b:c7:5e:cb:81:cf:f3:18:
e4:f2:42:bb:4f:0f:df:2f:d7:67:24:e0:1c:81:12:
5a:1a:1e:9f:da:82:b7:67:47:1c:a0:5f:79:38:15:
db:17:9c:ee:4c:ae:fd:70:d2:b7:87:17:fa:97:f2:
00:ed:5d:b7:23:6d:02:06:a3:20:6c:fe:95:a4:fe:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:80:5C:D1:58:3A:6A:2D:C5:B9:20:9F:2A:0F:82:4E:0A:D6:70
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5e:49:1c:10:a8:ca:64:fd:5c:79:75:5c:cb:8c:4d:da:fb:
ec:5f:97:0d:d3:68:2e:d5:f3:cc:3e:50:69:ba:e6:0d:26:96:
b6:ff:50:80:6d:bc:fc:c3:c6:8d:16:c0:5a:04:25:18:2a:c6:
e4:fb:7f:1b:be:d7:56:db:4f:7e:33:db:50:4b:f9:22:75:65:
55:e2:ab:58:d8:3f:9d:9d:56:74:a3:b0:54:84:a5:3c:04:e9:
ab:2d:c4:69:66:64:6f:37:c8:46:a9:80:0c:36:81:94:7f:16:
7a:4a:d8:f2:7a:92:0a:cc:dd:2c:7c:b9:94:e2:ad:48:45:24:
59:a1:44:1b:05:98:83:ad:34:77:67:4a:b1:23:ab:37:e2:02:
7d:1e:d2:36:3b:48:1f:a6:f2:3c:a7:d6:96:3a:08:7c:e3:0c:
5b:0a:c5:44:d8:4d:17:37:8c:fc:39:4f:67:51:02:76:06:79:
94:8c:09:49:f5:a8:f7:78:9a:ec:84:d2:9a:08:81:47:cd:a5:
09:e0:0d:cd:04:37:77:4c:58:f4:37:16:56:a2:42:c2:c1:3a:
28:8d:80:22:f3:9a:d7:cb:ac:fb:41:3f:ae:2b:48:f5:5c:33:
55:55:d2:30:53:d0:95:71:d1:3a:68:7f:3a:a8:a8:77:31:16:
cb:21:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:31 2025 by rpki-client