Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: Nr5vI5oyYw37ARCetru8/VNaPf4XCQpaJBLD8hxXaG8=
Subject key identifier: 08:4D:A6:C1:5A:B0:03:21:B3:53:70:00:ED:03:26:DF:34:CD:B8:A8
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019A4170C81379A489B57787267EBF640C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 01DE
Signing time: Sat 01 Nov 2025 22:01:41 +0000
Manifest this update: Sat 01 Nov 2025 22:01:41 +0000
Manifest next update: Sun 02 Nov 2025 22:01:41 +0000
Files and hashes: 1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: U7x4nazXXIYlG7QaHpx4n15qJS/wsi44rS/oJUu5z9M=)
2: U1RYzEbHmiXutqW8M0GkGkDLUKA.roa (hash: 8576dkRYk3dW0Y6uWzvcN1Y2+IXW0jM0HiarzKgHeX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:70:c8:13:79:a4:89:b5:77:87:26:7e:bf:64:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Nov 1 22:01:41 2025 GMT
Not After : Nov 2 22:01:41 2025 GMT
Subject: CN=084da6c15ab00321b3537000ed0326df34cdb8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:6e:b9:26:d3:54:de:8a:07:ac:31:05:49:
31:53:6f:c5:0e:b0:58:26:4c:b4:e0:76:ba:13:84:
0a:1b:98:d4:54:81:70:b3:9f:25:fd:31:3c:f2:27:
16:38:cd:4a:3c:74:d1:fc:85:25:fc:6b:04:3f:07:
70:ad:44:2c:e8:e5:d8:e8:4c:16:3f:41:19:e6:08:
c4:6f:2a:42:0b:9b:ef:7c:37:11:35:5a:9c:4a:53:
b9:b1:78:9b:1a:9f:02:d2:d1:17:dc:22:cc:a0:84:
f6:05:6e:f9:0a:6f:b2:ec:94:e5:9a:fd:89:d3:0b:
9c:3b:0d:b4:fb:9f:78:30:32:f7:0e:a6:53:cd:b6:
06:65:e3:a2:d1:8d:1b:ab:c8:4f:9e:0a:6a:b7:af:
bd:44:5d:fd:27:fe:32:4d:dc:18:ee:8f:ce:49:39:
26:ac:59:dc:e7:4a:0d:00:ba:0c:7a:bc:0d:24:04:
17:11:dc:63:4c:95:b3:7b:d3:0b:4e:6e:d1:70:df:
a8:6b:35:85:0a:41:45:35:59:9a:95:c7:a4:a9:88:
4c:55:0a:a6:d1:c4:df:3d:38:84:fd:39:6f:7a:9a:
d8:e1:e5:46:ef:a4:58:77:65:8c:59:7a:83:51:f0:
8d:0e:c9:51:5a:6f:62:44:ca:07:49:2d:3f:60:6b:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4D:A6:C1:5A:B0:03:21:B3:53:70:00:ED:03:26:DF:34:CD:B8:A8
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:51:97:78:08:72:88:8d:97:26:e9:22:88:42:6c:cb:46:
ba:58:bc:ed:99:9c:60:90:05:38:14:14:a1:48:2b:5d:26:a7:
0a:85:f4:39:88:c9:cd:29:d3:0d:5c:b5:ce:73:74:91:0e:5b:
e5:5e:f1:1c:83:9b:1d:89:3e:69:6b:ff:74:1c:25:61:77:ae:
b1:d6:e5:79:78:45:49:67:aa:84:b3:0c:70:b1:10:84:b0:25:
ee:a0:c7:d6:f4:5a:c4:9b:09:ee:fd:b3:81:1a:a1:18:0c:cc:
cd:5f:9b:dc:ab:26:18:a7:ff:b4:87:ae:26:f7:d9:78:88:d8:
a4:1e:f4:6e:59:a7:17:52:4d:fe:07:89:04:2f:5b:f4:5b:41:
ce:76:f2:25:2c:8a:b7:65:85:55:3d:73:c6:e9:5e:ab:61:03:
82:3a:74:3c:35:aa:f0:86:c5:27:79:52:e4:ac:b7:54:89:4a:
81:d6:2a:9b:0d:55:b3:dd:a8:25:e7:6d:c9:6b:09:d9:f4:36:
9d:20:0f:67:32:72:6e:c8:94:39:52:45:03:29:b9:22:ff:75:
98:12:49:77:d0:3f:47:3e:0d:be:28:ba:4c:f7:3c:e1:c2:b8:
8d:80:57:da:53:1f:c7:9d:a7:c3:e7:0f:98:d0:aa:28:fa:dc:
e6:94:f5:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpBcMgTeaSJtXeHJn6/ZAyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGQzY2VkMzJlMzYwZmNkNDZjMTYzNTU2ZGUyOGFhMjgy
NGIxOWIwHhcNMjUxMTAxMjIwMTQxWhcNMjUxMTAyMjIwMTQxWjAzMTEwLwYDVQQD
EygwODRkYTZjMTVhYjAwMzIxYjM1MzcwMDBlZDAzMjZkZjM0Y2RiOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L9uuSbTVN6KB6wxBUkxU2/FDrBY
Jky04Ha6E4QKG5jUVIFws58l/TE88icWOM1KPHTR/IUl/GsEPwdwrUQs6OXY6EwW
P0EZ5gjEbypCC5vvfDcRNVqcSlO5sXibGp8C0tEX3CLMoIT2BW75Cm+y7JTlmv2J
0wucOw20+594MDL3DqZTzbYGZeOi0Y0bq8hPngpqt6+9RF39J/4yTdwY7o/OSTkm
rFnc50oNALoMerwNJAQXEdxjTJWze9MLTm7RcN+oazWFCkFFNVmalcekqYhMVQqm
0cTfPTiE/TlveprY4eVG76RYd2WMWXqDUfCNDslRWm9iRMoHSS0/YGuYcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhNpsFasAMhs1NwAO0DJt80zbioMB8GA1UdIwQY
MBaAFA2NPO0y42D81GwWNVbeKKooJLGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMt
YTQ5N2I4Y2JmMTc3LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMtYTQ5N2I4Y2JmMTc3
LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf9Rl3gI
coiNlybpIohCbMtGuli87ZmcYJAFOBQUoUgrXSanCoX0OYjJzSnTDVy1znN0kQ5b
5V7xHIObHYk+aWv/dBwlYXeusdbleXhFSWeqhLMMcLEQhLAl7qDH1vRaxJsJ7v2z
gRqhGAzMzV+b3KsmGKf/tIeuJvfZeIjYpB70blmnF1JN/geJBC9b9FtBznbyJSyK
t2WFVT1zxuleq2EDgjp0PDWq8IbFJ3lS5Ky3VIlKgdYqmw1Vs92oJedtyWsJ2fQ2
nSAPZzJybsiUOVJFAym5Iv91mBJJd9A/Rz4Nvii6TPc84cK4jYBX2lMfx52nw+cP
mNCqKPrc5pT1tQ==
-----END CERTIFICATE-----
Generated at Sun Nov 2 07:04:02 2025 by rpki-client