Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: a8d0VwFxquHmqa2fNMD0MTf7wXlyfHEfQN5UXs1ERtQ=
Subject key identifier: 76:83:A7:70:DD:E2:86:0C:63:C2:F2:5F:BC:E2:2D:F6:BC:7F:CE:31
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019A54F649E60A34AF63274960D3AD855194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 0EE9
Signing time: Wed 05 Nov 2025 17:00:18 +0000
Manifest this update: Wed 05 Nov 2025 17:00:18 +0000
Manifest next update: Thu 06 Nov 2025 17:00:18 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: QlA92+FJsSaTmTGvHOIWjygjDqI/AbJxt9O2KNi91Q4=)
2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:49:e6:0a:34:af:63:27:49:60:d3:ad:85:51:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Nov 5 17:00:18 2025 GMT
Not After : Nov 6 17:00:18 2025 GMT
Subject: CN=7683a770dde2860c63c2f25fbce22df6bc7fce31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:0c:88:ed:7f:76:7d:78:36:94:68:c5:e5:
5e:67:0a:6a:11:41:ea:e2:31:f4:3f:9c:88:a5:39:
eb:09:ce:f1:4d:b3:e4:11:68:eb:e2:ea:62:e4:fd:
21:17:f3:da:1e:b5:8a:54:9b:7a:bd:1e:bb:5b:ee:
ef:3c:59:ea:64:be:2a:58:7f:3b:4a:02:22:b9:9f:
13:94:83:e1:1f:17:75:db:57:5f:61:f7:54:ac:23:
9c:a8:1a:51:a1:48:51:1c:5b:15:bc:44:bf:32:1e:
fd:f5:02:80:01:7d:4c:2d:93:92:2a:5b:63:b2:9e:
f2:7e:0a:7d:95:9a:d4:dd:d9:f2:91:fd:b1:16:e4:
ea:4a:17:bf:d6:a3:b7:a4:5c:38:9e:8f:78:4d:a9:
70:8d:19:1c:ce:af:93:23:db:5a:f4:dd:02:e5:7d:
ad:e7:b1:b8:f5:fa:91:18:3b:70:9e:53:13:6b:8a:
a2:e3:2a:ef:5a:52:30:ec:bd:c3:95:3e:c2:2f:6b:
ac:37:e2:7e:97:96:cf:79:a9:92:c1:f4:77:e0:c4:
13:5a:09:b6:86:94:74:9f:b1:aa:49:c9:dd:ed:6d:
b7:d0:da:2c:d7:f0:40:b8:18:5a:4e:97:0a:6d:0f:
9c:84:43:07:3e:0d:02:7c:0a:cc:7c:78:bd:9a:b9:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:83:A7:70:DD:E2:86:0C:63:C2:F2:5F:BC:E2:2D:F6:BC:7F:CE:31
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:11:9d:bf:d9:85:37:70:33:62:a4:f3:8c:25:6a:9a:b4:bc:
98:fc:be:f7:3c:03:83:57:49:d8:d2:60:d6:16:36:2b:55:71:
83:f5:7e:fa:af:d5:bd:9a:ba:6a:bc:12:05:01:13:87:be:c3:
62:94:0e:8e:dd:00:09:2c:a7:3b:81:fc:8b:07:94:f2:8a:85:
bb:0c:95:f3:ad:22:95:4b:b1:83:da:83:e5:62:67:6e:30:4d:
8e:f4:b7:ce:cc:fa:76:ad:1b:7a:dd:3e:9d:c3:1f:e0:5a:d9:
9c:24:5b:9c:85:3f:9e:e3:74:78:b7:77:27:8f:57:bc:b8:a2:
f3:bf:58:23:9b:cc:13:0d:ac:66:f6:c8:c3:e8:ef:c1:18:43:
46:ce:43:a0:9a:4d:9a:ef:2c:03:2d:0b:f2:d2:f8:13:ea:54:
a4:d3:df:3c:67:4c:18:e2:c3:25:24:e2:64:21:83:82:e1:be:
8b:60:92:76:db:d3:b9:c3:7b:41:43:d4:d9:b7:ad:d0:39:ca:
75:e3:61:df:0e:b9:92:da:b7:c4:ea:e9:5b:02:31:e0:d3:b2:
9c:55:87:0c:d3:46:f9:54:e7:90:e4:f4:9e:d0:08:5b:ac:ff:
33:18:6f:98:dd:2f:c5:1f:81:23:03:fb:e0:c1:97:2b:22:8a:
df:76:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:55:07 2025 by rpki-client