Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File: DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier: 1StzQJ/Q2hWA5wFMQ6J9Lw69iT1yUustM80j4TRCiYo=
Subject key identifier: 0E:CA:85:65:A3:27:AF:81:00:12:A5:D8:2F:F4:B9:53:4B:F1:55:08
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 019A526377964D635BA5CD3E4A0E7CA80986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 05:00:41 +0000
Manifest this update: Wed 05 Nov 2025 05:00:41 +0000
Manifest next update: Thu 06 Nov 2025 05:00:41 +0000
Files and hashes: 1: 3PndXA_D3bqqZU_dt1ni4TJe5dE.roa (hash: 8PMPMDfbPsDxl+/GYrluB6AWIrxvnE1yub5S0xoxeqw=)
2: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: pgPhSDaLcV8YtO1FSbQiJfpqA+nFJeVyzwfl2pCWqvI=)
3: Rx93K2Anpt2piWgsyT2tCcyOdyU.roa (hash: eSyBVCSKa61zR4IGZNVtQpHulzu9iroOreAyMMq9AtQ=)
4: V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa (hash: zjPqUL5Ps4cQOvmd2x7l8voc2WY0ZgzjWtjc6s/1ibs=)
5: cgZ6WBJvxmkAMdxkhP2wkgGEdL0.roa (hash: Ll3C8wRu25Vic+LtIEvKcAwf1QS+GIVy+0ziubvLeB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:77:96:4d:63:5b:a5:cd:3e:4a:0e:7c:a8:09:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Nov 5 05:00:41 2025 GMT
Not After : Nov 6 05:00:41 2025 GMT
Subject: CN=0eca8565a327af810012a5d82ff4b9534bf15508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:83:2f:17:21:d6:0c:c3:4e:30:45:a1:27:
96:28:0e:cc:b9:97:59:b2:17:a1:f7:20:61:c5:56:
50:51:e2:5f:8c:03:d0:29:30:c2:bd:3a:37:77:a5:
fe:5d:2b:2c:78:64:30:c7:4c:13:39:89:69:5f:9b:
9c:a4:6e:ce:f2:61:e9:60:36:58:6f:bc:5f:86:70:
4d:98:1c:ce:f5:3a:0c:69:2a:3a:64:e5:2a:01:f8:
c7:1f:3c:64:d5:21:7b:05:16:8a:a1:39:82:d5:85:
34:75:87:bf:30:2d:73:00:6b:78:40:2a:ae:df:58:
82:b0:f4:49:ec:4d:45:86:3e:65:4f:74:ec:d4:9b:
0c:7b:1e:4d:be:f4:0f:55:16:41:53:a2:c6:34:0c:
be:44:ac:76:17:9e:12:03:5c:a7:7f:3f:7b:86:f5:
58:70:e4:92:91:80:2e:a7:74:75:05:36:cd:f4:ab:
cd:fb:a5:c8:dd:25:af:c3:93:97:a8:b2:18:54:2f:
6e:12:e0:67:cd:36:8e:93:43:a6:28:69:f8:c8:10:
ac:c5:89:49:f8:0d:f6:ad:ef:b1:ca:2c:f7:9f:65:
79:5c:57:06:db:10:95:7b:0a:8c:f9:08:2a:3f:41:
23:4c:f7:5a:8c:c1:63:6c:33:e0:de:cc:3b:b6:8c:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:85:65:A3:27:AF:81:00:12:A5:D8:2F:F4:B9:53:4B:F1:55:08
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:68:cc:84:f2:41:18:42:d1:a8:20:30:64:db:a1:b5:f6:35:
5f:fd:30:88:8f:8f:ac:5d:3a:c0:5a:e6:38:ce:a3:73:20:64:
6b:c5:b8:b6:93:b0:75:da:8f:be:e2:83:f4:d8:e7:b2:fc:76:
05:41:d8:81:35:11:62:f6:35:d2:54:1f:3a:36:58:23:18:ba:
35:54:e8:7f:ee:3a:be:75:8c:65:19:ed:20:1d:ab:30:d7:2f:
c6:b2:09:85:18:a6:7e:0a:95:0f:ae:50:99:75:04:66:6d:ec:
34:2d:4b:e7:b8:d3:fc:9b:97:31:01:1e:2c:3b:b7:14:ad:b2:
39:ed:0f:86:94:04:2f:db:85:02:bd:e0:be:e5:22:78:ab:9d:
e6:cc:6c:6d:39:91:c5:c1:dd:be:2a:98:2c:c4:82:5e:b6:7d:
07:8d:f7:9c:f7:97:7b:e4:89:05:c1:4f:86:a2:66:eb:da:53:
74:4e:63:35:11:44:ae:0b:0c:aa:af:af:b2:21:de:47:17:1a:
36:00:4a:ef:84:18:5c:e2:31:46:23:7e:47:03:5f:a1:b6:a4:
b6:02:69:71:cc:7e:f9:3f:f8:9f:3d:81:b7:8e:28:c7:28:94:
6b:b1:4d:b8:90:de:4b:78:e0:8e:36:c7:c0:cc:0b:25:69:10:
d2:e1:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:07 2025 by rpki-client