Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: aJWfNjwT68LIXXWDgcZ2TS3L5CxSFvgFhvg0gb4BfqE=
Subject key identifier: F2:EF:08:4D:0A:5E:D4:66:BD:97:D2:94:3A:66:8A:F1:FF:74:EE:1C
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019A4DAB199FE950F8504B3F2053F9A56CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 078A
Signing time: Tue 04 Nov 2025 07:00:50 +0000
Manifest this update: Tue 04 Nov 2025 07:00:50 +0000
Manifest next update: Wed 05 Nov 2025 07:00:50 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: 89yGYBgET8CXzd/HkNOzxa6V6Mb7Ljy1CR3CH9YaWRg=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:19:9f:e9:50:f8:50:4b:3f:20:53:f9:a5:6c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Nov 4 07:00:50 2025 GMT
Not After : Nov 5 07:00:50 2025 GMT
Subject: CN=f2ef084d0a5ed466bd97d2943a668af1ff74ee1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:d2:7e:f9:fb:6c:c5:3b:cc:a5:51:92:60:
c2:0d:cb:56:57:0d:98:6c:98:c1:0b:e4:80:13:62:
53:08:25:ee:93:69:73:9f:11:77:f5:b8:dd:e0:8a:
7c:ac:1a:09:f8:0e:88:a0:c2:b8:a7:f8:ab:37:35:
14:7f:63:5a:b4:8d:52:99:de:67:b7:6a:23:46:c6:
ec:42:2e:66:4b:a3:97:a0:96:be:27:f5:5e:77:15:
52:06:d6:a0:7f:6c:c9:22:d3:24:a7:ef:eb:b7:82:
0e:d0:9d:76:ee:cf:c3:a0:6a:12:24:8a:c5:f8:01:
bf:bd:f1:cd:73:04:8b:04:4c:0f:8e:56:d0:0e:1d:
de:0b:eb:da:84:33:52:ac:60:1a:31:49:8b:ba:d6:
6d:ef:a6:89:4b:f9:8f:cc:05:17:b4:84:25:46:37:
f2:42:a7:a2:a6:78:e8:c7:d3:0b:9a:0f:77:9b:76:
f6:d4:3f:ba:2c:34:44:96:86:17:a7:e9:42:dc:38:
fb:b9:71:ab:cd:d5:62:13:13:10:ca:9d:ec:e0:f9:
35:81:af:07:7f:7f:23:ec:b2:16:60:30:3e:54:88:
da:59:a1:75:a4:f4:a6:77:bc:23:ac:4b:66:2f:a9:
b7:e8:6a:9f:f2:6a:d0:e3:7c:96:8d:e7:aa:15:09:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EF:08:4D:0A:5E:D4:66:BD:97:D2:94:3A:66:8A:F1:FF:74:EE:1C
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ee:24:f7:8f:61:a1:b9:06:89:cb:56:a1:93:6f:22:27:92:
bf:e2:79:4c:4a:2f:40:42:50:7f:0f:f8:cf:0c:07:26:5e:61:
97:5d:18:9e:23:7c:ac:3c:36:6d:43:a7:3d:f2:15:2e:2e:e2:
ab:99:04:89:fc:16:08:ce:e8:14:07:9e:b0:70:f1:3b:ad:72:
22:2b:86:30:7b:52:25:05:21:58:e5:0c:6d:80:f1:4c:07:9d:
d5:9b:dd:a7:93:6a:42:56:19:4e:39:36:a6:aa:ac:18:4e:84:
d8:70:12:f3:90:04:4d:52:39:b6:ce:b8:dc:b3:ee:c7:62:23:
45:62:e4:94:38:a4:01:49:3e:b5:32:20:f0:3c:3e:3a:b8:82:
a5:b1:3e:32:a1:65:ea:46:b0:36:d1:b8:bf:99:17:c7:a2:e2:
dd:29:23:c2:57:c9:99:ba:43:11:22:6d:47:6d:90:dc:d7:92:
c6:80:80:67:92:37:84:8c:72:61:6c:8d:ce:39:57:de:a3:01:
1b:aa:77:9e:50:38:36:7e:ba:87:39:59:76:1c:6f:17:4d:e1:
86:30:08:ad:63:7b:c9:04:47:62:ed:74:2f:19:46:7e:06:47:
a8:75:d6:a3:87:65:33:5f:7a:16:05:87:5b:44:fd:de:be:4a:
a0:d6:e1:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqxmf6VD4UEs/IFP5pWzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGJlNDc0YzE1NWZjMTM4NDdiODU5NTAxYTU1M2NmZmMz
YWM0YjIwHhcNMjUxMTA0MDcwMDUwWhcNMjUxMTA1MDcwMDUwWjAzMTEwLwYDVQQD
EyhmMmVmMDg0ZDBhNWVkNDY2YmQ5N2QyOTQzYTY2OGFmMWZmNzRlZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjzSfvn7bMU7zKVRkmDCDctWVw2Y
bJjBC+SAE2JTCCXuk2lznxF39bjd4Ip8rBoJ+A6IoMK4p/irNzUUf2NatI1Smd5n
t2ojRsbsQi5mS6OXoJa+J/VedxVSBtagf2zJItMkp+/rt4IO0J127s/DoGoSJIrF
+AG/vfHNcwSLBEwPjlbQDh3eC+vahDNSrGAaMUmLutZt76aJS/mPzAUXtIQlRjfy
Qqeipnjox9MLmg93m3b21D+6LDREloYXp+lC3Dj7uXGrzdViExMQyp3s4Pk1ga8H
f38j7LIWYDA+VIjaWaF1pPSmd7wjrEtmL6m36Gqf8mrQ43yWjeeqFQlFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLvCE0KXtRmvZfSlDpmivH/dO4cMB8GA1UdIwQY
MBaAFA2L5HTBVfwThHuFlQGlU8/8OsSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDct
NDg2MWQ0M2UyNGVmLzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDctNDg2MWQ0M2UyNGVm
LzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+4k949h
obkGictWoZNvIieSv+J5TEovQEJQfw/4zwwHJl5hl10YniN8rDw2bUOnPfIVLi7i
q5kEifwWCM7oFAeesHDxO61yIiuGMHtSJQUhWOUMbYDxTAed1Zvdp5NqQlYZTjk2
pqqsGE6E2HAS85AETVI5ts643LPux2IjRWLklDikAUk+tTIg8Dw+OriCpbE+MqFl
6kawNtG4v5kXx6Li3SkjwlfJmbpDESJtR22Q3NeSxoCAZ5I3hIxyYWyNzjlX3qMB
G6p3nlA4Nn66hzlZdhxvF03hhjAIrWN7yQRHYu10LxlGfgZHqHXWo4dlM196FgWH
W0T93r5KoNbheA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:11 2025 by rpki-client