Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: q0Hbfu0jG2NqOGocOqBgmNF712fCgWcnCisDIzoBEPs=
Subject key identifier: F0:47:74:7F:34:C5:23:6F:4E:ED:0A:D6:BB:05:E2:79:14:8C:12:E0
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 019A4EF5ED3C567D9BCA0FA041855F259A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 06C5
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: d170lpVvJxfN0wmzaiOS3CF3npITZ2cee0odXyGOYLA=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ed:3c:56:7d:9b:ca:0f:a0:41:85:5f:25:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=f047747f34c5236f4eed0ad6bb05e279148c12e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:e2:b9:6f:25:76:b6:e5:3c:94:3f:c6:eb:
fd:46:0a:7b:59:0f:1f:f0:a7:f0:7c:71:21:bc:c5:
12:75:26:99:7a:80:1e:22:18:e1:4e:8d:40:ca:6a:
fb:94:8e:92:a3:f9:a4:09:d2:94:ea:52:45:f8:92:
c9:58:eb:f0:28:b3:05:05:a8:09:a5:57:55:5b:bb:
50:24:f2:d8:7e:b4:41:4e:e0:09:e8:c4:c7:96:5b:
de:81:9c:6b:c5:53:f9:a2:74:1d:5c:ac:19:77:15:
37:52:41:32:ef:2b:1b:b8:e2:34:19:ff:13:cd:3c:
2b:bb:85:2e:55:e2:d3:a8:dd:17:5a:c1:44:35:00:
b5:18:04:92:7b:38:4f:ed:27:c5:a1:29:5d:e0:71:
4e:bf:5f:81:4c:18:32:ce:78:e5:60:74:4c:2c:e4:
a5:61:27:3f:37:8a:e8:6c:21:d8:c2:66:5a:94:01:
ef:2a:01:b3:2c:59:bd:02:3d:51:a3:86:d1:b0:cc:
29:8f:65:21:4c:ff:b9:64:fa:7e:84:64:99:e9:a2:
34:e8:37:a4:65:ce:ab:ac:a8:8a:fc:53:88:f4:e1:
47:6d:1d:4b:d9:65:7e:31:65:9f:4d:10:48:79:cd:
1c:28:c2:bf:cd:4d:eb:cd:01:d9:25:cf:02:36:87:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:74:7F:34:C5:23:6F:4E:ED:0A:D6:BB:05:E2:79:14:8C:12:E0
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:28:fd:9e:74:a7:d0:09:83:9c:90:08:59:42:49:53:1f:
de:fd:a1:39:ea:d7:4b:5c:f7:d1:58:46:27:6d:67:98:30:05:
df:cc:47:e7:42:c1:9c:dc:33:ec:0a:ef:7c:6c:10:4b:54:1e:
42:3a:90:0c:1d:ea:73:fa:aa:72:24:4d:3c:2b:e8:07:73:0d:
01:80:8a:96:49:96:2d:3b:d2:13:25:95:56:61:96:5c:9a:ea:
ba:47:09:40:e2:71:12:f0:d9:18:6d:65:49:58:51:f9:77:0e:
f7:4b:1a:d2:46:15:75:f3:41:50:b4:4d:48:0a:df:b3:59:0a:
b6:ec:9e:31:f1:23:c4:be:4c:4b:c6:9f:a7:5c:70:22:6d:a2:
2c:8c:12:a8:3f:32:f6:e4:7d:16:c2:48:3a:93:a6:35:bc:8a:
c3:b9:a0:5e:bc:d8:aa:7f:42:87:32:c4:71:37:70:86:28:7e:
ed:fe:be:99:db:d9:fd:d2:0c:0e:b2:0d:ab:de:4c:9f:e8:bc:
fc:d8:c4:c0:34:26:d3:f0:d0:13:35:5c:b6:d8:37:2e:1d:be:
5f:ab:e1:8c:96:6e:c8:0e:de:bd:3b:9d:00:7a:a4:8e:65:d0:
db:9b:63:a9:ca:7e:21:a9:86:94:6d:1b:1f:e0:f4:c9:11:49:
81:cf:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:07 2025 by rpki-client