Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: BOcfuqPVDyXaYrzjPLUF4b8PQqHWm6UCQIQq8XQorD0=
Subject key identifier: B9:68:46:FC:7D:01:5C:29:C9:75:6E:AE:AD:5F:23:78:37:B7:6E:A8
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019A53E41BBA6A8C7B80348D3D5641D6F825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0DF7
Signing time: Wed 05 Nov 2025 12:00:49 +0000
Manifest this update: Wed 05 Nov 2025 12:00:49 +0000
Manifest next update: Thu 06 Nov 2025 12:00:49 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: 6FeA+nxH9f2B2sR+1INi6rmiHcer+zslgPvTOHjbuCk=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:1b:ba:6a:8c:7b:80:34:8d:3d:56:41:d6:f8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Nov 5 12:00:49 2025 GMT
Not After : Nov 6 12:00:49 2025 GMT
Subject: CN=b96846fc7d015c29c9756eaead5f237837b76ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:bf:0e:38:34:f1:27:22:b5:d7:45:e2:73:
bd:2d:01:4e:6c:f4:82:a0:bf:66:75:8b:eb:e2:87:
25:67:0c:a2:95:28:7e:66:32:3e:d5:94:c2:be:cb:
33:5f:a1:01:b4:52:9e:e7:27:c2:43:ca:18:85:a9:
c8:d4:0c:1b:11:ee:ea:4a:b2:ae:f5:91:b8:ba:05:
68:13:36:2d:7e:0a:bf:42:23:22:bb:78:f6:43:7f:
8d:21:c5:4d:56:d8:5d:75:03:34:00:b4:55:62:6d:
85:68:14:ac:83:a4:37:c1:04:3f:a4:61:31:31:ad:
f6:af:0e:69:31:cb:a7:43:18:bc:10:1b:ab:db:f0:
34:9a:b2:b9:fb:f4:a8:1f:9a:af:69:7b:61:13:a9:
e3:c6:94:a3:2b:99:0d:f2:f5:71:32:99:f8:53:62:
8d:22:33:8b:6a:3e:0f:03:59:eb:21:11:f3:c3:bb:
8a:25:93:09:b2:13:30:d7:ad:9b:67:83:af:cc:61:
54:51:8c:aa:2d:35:23:a1:2c:e5:b0:38:df:00:03:
34:0d:fa:45:d2:1e:52:2e:5f:7e:cc:ac:01:d3:a7:
5a:cb:b7:02:ee:2b:00:2a:0f:ef:66:8c:ed:a0:b9:
e9:97:64:64:f5:9b:93:b9:f2:81:d2:85:e8:d7:7f:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:46:FC:7D:01:5C:29:C9:75:6E:AE:AD:5F:23:78:37:B7:6E:A8
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:f9:86:78:39:55:7f:b7:95:ad:87:3a:a4:ac:3d:74:f3:
e6:d3:53:c5:98:b9:6c:15:62:76:78:45:4f:35:bb:e7:85:5e:
3c:91:80:9d:69:fe:9c:b3:03:bd:6e:33:53:59:07:f5:8f:d2:
81:4f:e8:23:03:66:ae:87:98:eb:88:32:52:e0:12:b4:30:7c:
63:fe:72:5f:e7:29:b0:3d:c3:a9:fa:d2:44:93:f6:c7:cf:4a:
ea:d8:ce:a0:d7:27:b2:fe:4d:c1:be:bd:f0:c5:35:6e:08:ba:
0a:a0:41:52:27:d7:8e:c6:8a:75:18:cf:c9:7b:94:24:5b:14:
6d:74:ea:16:20:da:91:28:9e:fe:b0:fc:89:75:61:33:cf:11:
b5:86:71:ae:aa:00:53:b8:54:fd:8c:04:78:55:2f:a4:c7:b4:
08:6f:9b:36:3f:41:20:55:35:85:92:d1:21:db:58:7d:fd:30:
38:71:18:20:98:53:68:6f:97:65:68:d0:a8:7a:d3:a2:cf:e0:
76:61:30:1c:27:3b:d1:5e:ed:18:7e:97:3d:10:f4:12:3a:3c:
b8:0a:63:f2:90:f8:b0:ae:51:c2:f1:08:90:a6:31:c7:2d:5f:
76:48:0f:6d:a7:8c:0e:4a:ff:15:6e:3f:92:c6:48:8a:55:45:
53:7b:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:20 2025 by rpki-client