Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: yA4DniPCpLA9ZffIDUizx5Eh4kPgFxT0iglCj0/I4vk=
Subject key identifier: 5B:A5:C9:B6:05:3D:32:43:E5:CA:FC:D3:98:5A:28:1D:04:63:45:A1
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 019A25C1D17A8874165BD644D83446570C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 168B
Signing time: Mon 27 Oct 2025 13:00:50 +0000
Manifest this update: Mon 27 Oct 2025 13:00:50 +0000
Manifest next update: Tue 28 Oct 2025 13:00:50 +0000
Files and hashes: 1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: p8meWErNn8VTu8Z5+S9dKz9vWcQ5UM5wNiu/9POvDZQ=)
2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:d1:7a:88:74:16:5b:d6:44:d8:34:46:57:0c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Oct 27 13:00:50 2025 GMT
Not After : Oct 28 13:00:50 2025 GMT
Subject: CN=5ba5c9b6053d3243e5cafcd3985a281d046345a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:26:b0:8c:cb:ba:f8:8b:23:75:47:d5:03:09:
d5:e7:de:aa:9e:bb:5e:dd:93:40:c4:3e:7b:6b:bd:
a7:77:d9:77:18:2b:28:22:4e:95:90:c3:07:2a:c4:
33:c7:a9:6a:60:5c:ad:8a:b8:74:34:8a:bf:7a:7e:
94:ae:0d:8c:25:1b:42:36:ba:e9:5d:72:0f:3f:36:
98:ac:42:a3:a3:bc:72:c3:d8:14:62:0a:7c:fc:21:
59:13:b4:cf:43:40:29:51:1a:9a:de:4f:ce:4c:26:
ac:ac:67:3f:e0:68:bd:95:76:7d:74:9c:cb:e5:c5:
07:19:d3:e0:b8:b7:6e:f3:d9:f0:56:0d:67:11:dc:
41:3d:77:02:fa:47:05:55:74:d1:b8:41:67:a6:d6:
3e:7d:a2:32:f3:44:c1:95:c9:f3:c8:88:b2:00:e7:
0a:9e:12:82:ab:b3:0f:38:0c:f4:9f:aa:57:7b:64:
a0:f2:4d:ec:75:a5:6b:74:38:3d:4b:d7:db:03:35:
cc:d0:3f:3a:f7:b9:53:50:83:e7:b6:10:7b:d4:7b:
d1:27:d5:6a:79:db:ff:d1:e0:1d:95:93:3e:d9:57:
a1:61:3a:00:82:9a:35:8b:05:d4:f7:ff:76:e4:14:
29:da:a7:3f:81:6d:36:d5:f0:a9:a4:a8:f5:a2:ac:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:C9:B6:05:3D:32:43:E5:CA:FC:D3:98:5A:28:1D:04:63:45:A1
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ff:0a:fc:78:de:b5:0c:7e:8e:b0:f8:05:99:1d:a0:8a:f0:
b8:8d:bd:e2:8b:64:fe:2d:57:f8:28:5f:94:00:f4:22:3a:4d:
0f:01:48:db:c4:3d:64:1f:56:80:d9:16:4a:6f:90:47:5c:a6:
df:bf:97:78:bd:a5:72:63:47:f3:de:99:30:2d:26:f0:a9:02:
b7:53:67:bd:e4:82:18:97:ec:ac:72:a4:b8:e0:49:57:36:75:
d4:d9:f7:9a:d2:2e:bb:a8:5a:48:86:a0:45:b5:2c:29:f4:fd:
7c:83:04:c4:b1:cb:9a:72:f8:37:5c:71:1b:63:f9:a6:26:9c:
46:45:4a:a3:60:76:64:9e:95:40:8d:31:f4:81:b6:e0:ca:56:
96:1e:14:8b:05:1e:40:b6:98:23:9d:35:fc:c8:98:31:5a:92:
fb:43:e9:28:74:70:07:ee:64:8a:c8:d5:58:1b:63:c8:41:93:
2c:4b:93:3a:9e:c6:d9:b8:ef:4b:0a:dd:94:91:fe:f4:3e:0b:
d5:57:ee:49:ab:9d:e5:0c:ed:77:96:be:ba:17:5c:73:f2:3c:
82:d0:cb:50:69:97:53:67:19:80:ee:99:3c:da:03:d4:06:48:
bc:7e:c1:51:4d:79:96:8a:d5:0c:de:26:e8:ee:fc:3b:fb:24:
0c:fb:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:06:01 2025 by rpki-client