Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: Q+2Rt6T712lOeq0401eVMLRQG93SLXw9Zv6KfPaWhu4=
Subject key identifier: EB:BF:1C:A2:E8:57:C9:81:48:D3:E4:77:4A:1F:D7:C7:8B:11:EA:30
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 019A4E4FE50418294068AC7055F7BA6EA61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0A69
Signing time: Tue 04 Nov 2025 10:00:50 +0000
Manifest this update: Tue 04 Nov 2025 10:00:50 +0000
Manifest next update: Wed 05 Nov 2025 10:00:50 +0000
Files and hashes: 1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: mPIi7yH5OXu/xQ5Ue6Z7A5yQtmt99hYiDh5i+uB/DII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e5:04:18:29:40:68:ac:70:55:f7:ba:6e:a6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Nov 4 10:00:50 2025 GMT
Not After : Nov 5 10:00:50 2025 GMT
Subject: CN=ebbf1ca2e857c98148d3e4774a1fd7c78b11ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:fd:e7:e5:85:0a:01:e7:3e:03:e4:fc:bc:
3c:fa:de:ca:5f:ab:cb:e5:c5:e2:1b:06:c1:6c:09:
e3:d3:4c:aa:cb:5b:2c:31:d9:2f:85:78:69:7f:2e:
c5:6f:2a:40:e7:ec:54:76:99:b2:65:6c:96:2d:63:
cf:06:da:3c:4a:43:38:83:36:4a:17:9e:85:8c:5b:
b3:39:a4:bb:0e:56:9e:a4:6e:e4:e3:94:3e:29:ca:
82:7d:b6:d5:09:a2:08:5f:2f:be:6a:6c:86:c7:b1:
67:a6:38:60:95:3a:59:65:02:3c:c1:73:3d:3b:bb:
99:bd:f2:8b:cf:b7:1e:0c:3d:3c:4d:64:cd:56:1b:
8b:fb:06:45:e1:d5:ce:31:e9:0c:01:77:5c:8d:f2:
82:03:48:8d:0e:e4:bf:0a:5c:b9:cb:a5:b2:42:38:
ec:e2:7b:e5:72:26:70:4a:56:55:7a:0f:9d:dd:0b:
0b:36:ad:4f:7c:98:a4:8d:90:29:eb:c4:d6:8d:3f:
89:c8:34:06:89:f2:8f:dc:af:0c:93:c9:2b:df:ca:
60:25:bf:c5:c2:bf:56:62:28:ca:55:cb:0e:95:60:
3f:f5:42:68:f3:a0:ef:5f:c1:e5:b4:97:a2:c4:35:
6b:fd:b6:21:c4:a6:2a:ef:7b:20:a9:10:42:02:27:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:1C:A2:E8:57:C9:81:48:D3:E4:77:4A:1F:D7:C7:8B:11:EA:30
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:af:e2:3c:fe:6d:bc:24:f1:bc:f3:f0:86:d9:a2:28:42:d6:
3d:3a:2f:4b:39:c7:df:26:06:53:e6:b3:63:61:74:69:50:ab:
2d:a1:53:10:ef:6a:dd:a4:a6:a1:09:f8:03:41:3b:22:c3:03:
9a:e8:8d:b0:63:be:4a:a8:9a:88:65:a6:1e:f4:c4:c6:27:51:
06:91:6f:51:22:14:ce:dd:6a:28:e5:70:c4:fd:a8:28:8d:0a:
4c:6b:8d:7e:93:bf:54:12:d7:1c:a4:90:f2:3c:42:59:a5:97:
93:e0:9d:6b:cc:cd:85:2e:25:c2:11:bb:bb:25:9a:76:55:75:
05:e2:15:52:e7:b0:bc:f7:7d:d1:17:bf:df:dd:d7:56:06:7b:
30:77:fe:29:e3:ef:6f:9d:5c:51:9a:2d:e3:ff:c6:ed:2b:4a:
5d:a8:67:18:41:75:2a:e6:03:98:df:6e:64:c8:db:9c:2a:a3:
e1:e3:e7:f0:3a:4c:7e:85:fe:8a:bd:63:60:db:96:c8:58:9c:
dc:28:69:df:af:60:b5:67:f7:9f:d5:c8:d3:9b:c8:94:ab:6c:
09:aa:89:3c:ba:16:ac:d1:90:21:68:81:0c:8b:77:af:75:28:
6b:af:42:c1:a7:a2:57:94:cd:c4:bf:a8:06:f7:3e:5b:3c:3e:
33:2b:4f:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT+UEGClAaKxwVfe6bqYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4
NThlYjIwHhcNMjUxMTA0MTAwMDUwWhcNMjUxMTA1MTAwMDUwWjAzMTEwLwYDVQQD
EyhlYmJmMWNhMmU4NTdjOTgxNDhkM2U0Nzc0YTFmZDdjNzhiMTFlYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdj95+WFCgHnPgPk/Lw8+t7KX6vL
5cXiGwbBbAnj00yqy1ssMdkvhXhpfy7FbypA5+xUdpmyZWyWLWPPBto8SkM4gzZK
F56FjFuzOaS7DlaepG7k45Q+KcqCfbbVCaIIXy++amyGx7FnpjhglTpZZQI8wXM9
O7uZvfKLz7ceDD08TWTNVhuL+wZF4dXOMekMAXdcjfKCA0iNDuS/Cly5y6WyQjjs
4nvlciZwSlZVeg+d3QsLNq1PfJikjZAp68TWjT+JyDQGifKP3K8Mk8kr38pgJb/F
wr9WYijKVcsOlWA/9UJo86DvX8HltJeixDVr/bYhxKYq73sgqRBCAicIOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu/HKLoV8mBSNPkd0of18eLEeowMB8GA1UdIwQY
MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt
MDJjMzdmZWI4YTllLzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll
LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcK/iPP5t
vCTxvPPwhtmiKELWPTovSznH3yYGU+azY2F0aVCrLaFTEO9q3aSmoQn4A0E7IsMD
muiNsGO+SqiaiGWmHvTExidRBpFvUSIUzt1qKOVwxP2oKI0KTGuNfpO/VBLXHKSQ
8jxCWaWXk+Cda8zNhS4lwhG7uyWadlV1BeIVUuewvPd90Re/393XVgZ7MHf+KePv
b51cUZot4//G7StKXahnGEF1KuYDmN9uZMjbnCqj4ePn8DpMfoX+ir1jYNuWyFic
3Chp369gtWf3n9XI05vIlKtsCaqJPLoWrNGQIWiBDIt3r3Uoa69CwaeiV5TNxL+o
Bvc+Wzw+MytPIw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:58 2025 by rpki-client