
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: n0NLtu+6i0nBnJmTSv1ITpfWAcMC8yZ5BwFjkrP1yag=
Subject key identifier: 9D:78:E3:CE:E1:68:7A:FC:E9:01:E9:CA:4F:43:34:EE:25:9F:FF:24
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 019889FBFBFA454569ED5FB359322F289723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 0E65
Signing time: Fri 08 Aug 2025 14:00:49 +0000
Manifest this update: Fri 08 Aug 2025 14:00:49 +0000
Manifest next update: Sat 09 Aug 2025 14:00:49 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: TrY41Aj3JHVBwUQwwi2zXdVICgKkEmCtQ9CPyMK30ao=)
2: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (hash: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:fb:fa:45:45:69:ed:5f:b3:59:32:2f:28:97:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Aug 8 14:00:49 2025 GMT
Not After : Aug 9 14:00:49 2025 GMT
Subject: CN=9d78e3cee1687afce901e9ca4f4334ee259fff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:20:30:84:31:70:33:c8:80:8a:14:e5:7d:
3a:d5:da:87:c8:77:bf:b0:6a:37:ea:73:60:22:01:
67:91:5b:3c:6e:ad:52:57:89:de:41:cc:29:77:c2:
fb:52:c6:b2:7f:9d:3c:a4:e1:86:b6:69:e4:46:c3:
b0:06:4c:44:67:2a:8d:ad:16:1e:a8:8d:da:9c:5a:
5c:20:b4:cf:9b:6c:f0:d7:ab:7b:a4:83:c3:13:ff:
e0:21:ab:5a:4a:cb:54:29:89:d8:5a:0e:81:0b:d4:
9b:43:ba:5b:49:fe:45:12:b1:f4:3f:9f:6b:66:a2:
b4:1a:8f:83:2f:08:8e:0c:cc:c9:6d:df:8c:22:20:
83:20:23:54:cc:1e:f8:5c:5b:17:a3:ac:d3:a8:b2:
86:6f:94:f2:ed:7b:04:41:39:c8:ea:43:41:a9:0b:
6c:fe:9d:a7:ac:b3:2e:43:2d:a4:eb:6c:71:6a:27:
da:b7:31:79:f4:f9:e0:6d:29:79:9e:5b:45:f4:60:
b5:bd:1a:11:97:fa:6e:96:3a:3c:0e:b0:01:d6:15:
26:4f:9a:4f:f2:a2:e0:43:a9:01:a1:e1:df:1e:07:
1d:f3:7a:ab:fc:b2:a0:2f:d9:d6:01:55:4e:2b:fc:
d5:ce:89:05:d2:be:35:16:c0:45:9d:d6:7c:14:30:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:78:E3:CE:E1:68:7A:FC:E9:01:E9:CA:4F:43:34:EE:25:9F:FF:24
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:71:3b:75:6f:6f:c1:43:c8:b2:07:a6:ea:f6:dd:62:f1:e9:
f7:69:85:6c:37:21:63:a2:1f:04:ee:65:25:5e:62:44:78:20:
31:36:bf:40:fc:71:af:84:9b:2d:df:44:36:9b:0c:0a:d8:ee:
a0:52:18:5a:d1:1b:de:18:d5:ab:34:55:10:59:a5:ef:b9:0e:
78:d8:47:fb:a3:d5:1c:d8:35:9c:e7:50:4a:68:10:7d:e0:2e:
64:62:a5:37:81:db:ad:20:5c:6e:48:60:28:98:22:c1:b1:c9:
a1:52:fb:ea:c2:1f:27:e2:f5:c2:25:7b:28:7c:2e:ad:b6:f2:
aa:73:3f:fa:42:58:38:1a:a4:cb:22:a4:8b:b8:21:b8:95:44:
bb:81:37:66:c8:0c:46:69:12:31:06:e5:6f:93:e4:8c:6a:82:
86:00:14:93:d5:d7:49:8b:c4:32:d2:b4:a5:52:11:ee:e2:f1:
6e:42:bb:7e:87:cc:a8:c9:32:62:df:cf:ae:19:51:00:ec:44:
30:50:d4:21:f5:34:82:bc:42:28:32:4d:c5:06:3e:3f:35:47:
47:10:40:e8:41:c7:64:df:20:65:0d:e7:c8:ee:e8:52:d3:e3:
55:89:fb:f1:72:75:3c:30:ff:0b:91:92:b3:4b:2f:23:b2:7a:
c1:ac:ff:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJ+/v6RUVp7V+zWTIvKJcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjBjNjcwNDM0ZGE1MTAyMjYxMDk5ZGExMDFmMjVkZDNm
N2FhZGEwHhcNMjUwODA4MTQwMDQ5WhcNMjUwODA5MTQwMDQ5WjAzMTEwLwYDVQQD
Eyg5ZDc4ZTNjZWUxNjg3YWZjZTkwMWU5Y2E0ZjQzMzRlZTI1OWZmZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBUgMIQxcDPIgIoU5X061dqHyHe/
sGo36nNgIgFnkVs8bq1SV4neQcwpd8L7Usayf508pOGGtmnkRsOwBkxEZyqNrRYe
qI3anFpcILTPm2zw16t7pIPDE//gIataSstUKYnYWg6BC9SbQ7pbSf5FErH0P59r
ZqK0Go+DLwiODMzJbd+MIiCDICNUzB74XFsXo6zTqLKGb5Ty7XsEQTnI6kNBqQts
/p2nrLMuQy2k62xxaifatzF59PngbSl5nltF9GC1vRoRl/puljo8DrAB1hUmT5pP
8qLgQ6kBoeHfHgcd83qr/LKgL9nWAVVOK/zVzokF0r41FsBFndZ8FDCOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ14487haHr86QHpyk9DNO4ln/8kMB8GA1UdIwQY
MBaAFHcgxnBDTaUQImEJnaEB8l3T96raMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUt
ZDg0NTk5NTk5MWFjLzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUtZDg0NTk5NTk5MWFj
LzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHE7dW9v
wUPIsgem6vbdYvHp92mFbDchY6IfBO5lJV5iRHggMTa/QPxxr4SbLd9ENpsMCtju
oFIYWtEb3hjVqzRVEFml77kOeNhH+6PVHNg1nOdQSmgQfeAuZGKlN4HbrSBcbkhg
KJgiwbHJoVL76sIfJ+L1wiV7KHwurbbyqnM/+kJYOBqkyyKki7ghuJVEu4E3ZsgM
RmkSMQblb5PkjGqChgAUk9XXSYvEMtK0pVIR7uLxbkK7fofMqMkyYt/PrhlRAOxE
MFDUIfU0grxCKDJNxQY+PzVHRxBA6EHHZN8gZQ3nyO7oUtPjVYn78XJ1PDD/C5GS
s0svI7J6waz/xA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:29 2025 by rpki-client