Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: E/Ae86NDMjxPBzt+IXWsOxyAVdOsYcDYIiKa1OCr9bE=
Subject key identifier: 8E:DF:3D:39:5B:B4:B2:F9:6F:DE:6E:FA:FA:45:80:2E:9B:3E:48:13
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 019A72CA8825CB821A879426D57BDDCAB568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 16B5
Signing time: Tue 11 Nov 2025 12:01:07 +0000
Manifest this update: Tue 11 Nov 2025 12:01:07 +0000
Manifest next update: Wed 12 Nov 2025 12:01:07 +0000
Files and hashes: 1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: YPPFZ+rbD4xXm3+5OROHF4ygiHq+s2LqcyxDYn9ROow=)
2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=)
3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=)
4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:88:25:cb:82:1a:87:94:26:d5:7b:dd:ca:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Nov 11 12:01:07 2025 GMT
Not After : Nov 12 12:01:07 2025 GMT
Subject: CN=8edf3d395bb4b2f96fde6efafa45802e9b3e4813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:33:50:8d:0e:b3:35:df:ee:b5:9e:e3:c2:
f2:16:43:06:4c:fe:0c:6c:c9:58:c7:ab:51:10:09:
0d:8f:ba:b3:b6:4b:2a:33:06:fb:55:d4:0e:d6:a5:
b1:b1:37:d9:82:fc:05:93:7f:38:e1:cb:a9:97:6b:
12:fd:4c:d0:98:55:fb:b2:1b:e1:1c:c0:36:4e:ec:
4c:80:72:5f:e2:b1:6c:85:8b:0d:55:f7:de:0e:f1:
5e:ed:fd:5c:34:c5:d2:96:36:6c:3c:24:49:b0:ae:
3b:6c:96:46:ba:de:59:f0:11:8f:74:41:96:0e:27:
ef:01:98:42:f5:b8:a4:95:dc:b6:1c:ae:3f:43:e3:
03:12:1a:c1:3e:89:15:7b:6b:35:51:8f:e3:dd:90:
30:53:00:c9:75:c2:26:2d:43:88:70:a6:ce:fb:2d:
56:2a:fd:31:a0:60:c7:bc:ec:53:06:f0:b5:a3:dd:
d4:af:c2:fc:05:9a:46:99:36:21:70:0d:c5:b1:d0:
b6:37:37:49:08:bc:38:5a:e0:4e:22:cf:dd:df:e5:
a6:43:12:f7:40:49:0e:20:bd:10:db:8e:68:9f:7b:
cc:c2:16:f4:c2:63:1d:0d:cf:07:9e:16:df:ef:8d:
3d:be:fd:0e:5e:64:74:3f:30:9f:01:30:26:96:3a:
da:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:3D:39:5B:B4:B2:F9:6F:DE:6E:FA:FA:45:80:2E:9B:3E:48:13
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:da:35:23:9e:1c:4c:ef:66:d2:ed:a0:1c:79:1d:ad:1e:aa:
b5:8b:2d:1d:74:d4:fd:80:62:f5:67:66:f9:60:50:ce:ca:a6:
49:44:0d:fc:d4:f1:a8:0e:04:2e:b9:fe:74:16:19:18:fb:6a:
be:d4:78:d8:7d:ed:58:0d:23:6c:9f:8e:ae:d4:6e:88:cc:e0:
08:e6:fa:3e:21:fd:a0:b1:61:20:64:be:f1:ff:c8:f0:a1:1a:
fa:89:5c:bb:55:07:59:62:97:5c:44:c3:32:59:45:c5:8d:c9:
a6:c4:bb:c4:cd:4b:f5:b7:f9:d5:4f:31:31:15:05:82:e9:1e:
2d:b7:8f:0b:ce:ae:77:73:a8:84:27:31:a9:16:f3:11:9a:39:
9f:95:41:c7:a9:a3:54:8f:00:e7:5d:cb:0b:31:2d:16:0f:78:
91:74:de:81:a6:93:c1:97:74:6a:19:db:65:09:f6:a8:04:19:
0f:95:43:47:2e:82:82:96:9c:bd:5e:e2:e8:5e:83:11:35:e5:
2a:b0:b6:9c:0f:51:ab:41:dd:12:65:08:75:91:e5:68:a2:68:
16:d6:df:58:9f:70:18:a5:8e:ef:95:3d:6d:1e:66:14:e0:5a:
b1:c7:f0:2c:e5:ce:8c:cb:d9:50:78:3c:6d:23:a9:1e:62:8f:
b9:1e:1f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyogly4Iah5Qm1XvdyrVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi
ZWE4ZTUwHhcNMjUxMTExMTIwMTA3WhcNMjUxMTEyMTIwMTA3WjAzMTEwLwYDVQQD
Eyg4ZWRmM2QzOTViYjRiMmY5NmZkZTZlZmFmYTQ1ODAyZTliM2U0ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMYzUI0OszXf7rWe48LyFkMGTP4M
bMlYx6tREAkNj7qztksqMwb7VdQO1qWxsTfZgvwFk3844cupl2sS/UzQmFX7shvh
HMA2TuxMgHJf4rFshYsNVffeDvFe7f1cNMXSljZsPCRJsK47bJZGut5Z8BGPdEGW
DifvAZhC9bikldy2HK4/Q+MDEhrBPokVe2s1UY/j3ZAwUwDJdcImLUOIcKbO+y1W
Kv0xoGDHvOxTBvC1o93Ur8L8BZpGmTYhcA3FsdC2NzdJCLw4WuBOIs/d3+WmQxL3
QEkOIL0Q245on3vMwhb0wmMdDc8Hnhbf7409vv0OXmR0PzCfATAmljracwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7fPTlbtLL5b95u+vpFgC6bPkgTMB8GA1UdIwQY
MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt
ZGRiOWU0ZGI5OGM2LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2
LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdo1I54c
TO9m0u2gHHkdrR6qtYstHXTU/YBi9Wdm+WBQzsqmSUQN/NTxqA4ELrn+dBYZGPtq
vtR42H3tWA0jbJ+OrtRuiMzgCOb6PiH9oLFhIGS+8f/I8KEa+olcu1UHWWKXXETD
MllFxY3JpsS7xM1L9bf51U8xMRUFgukeLbePC86ud3OohCcxqRbzEZo5n5VBx6mj
VI8A513LCzEtFg94kXTegaaTwZd0ahnbZQn2qAQZD5VDRy6CgpacvV7i6F6DETXl
KrC2nA9Rq0HdEmUIdZHlaKJoFtbfWJ9wGKWO75U9bR5mFOBascfwLOXOjMvZUHg8
bSOpHmKPuR4fUA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:35 2025 by rpki-client