Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier: XjbkNqKO+8J79+neD1uYcTxBexEn/tA9LGWvQ+wezhE=
Subject key identifier: C2:13:93:F5:3C:00:DF:8A:F9:54:56:DF:FD:54:60:32:6E:57:38:0B
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial: 019A5564638D007D2C7F798394D964F17CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number: 0294
Signing time: Wed 05 Nov 2025 19:00:33 +0000
Manifest this update: Wed 05 Nov 2025 19:00:33 +0000
Manifest next update: Thu 06 Nov 2025 19:00:33 +0000
Files and hashes: 1: IRnn9ORtzivUx2TGUOWiZn2YmA8.roa (hash: Xk0n7E/wui7qwpm2gqzzeQ3XkyXcylQYY0mSQoyL7gs=)
2: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: k75rnGc6kXgvKGUDjGBFB7XgmClz55K7iYylb2yzH9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:63:8d:00:7d:2c:7f:79:83:94:d9:64:f1:7c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Validity
Not Before: Nov 5 19:00:33 2025 GMT
Not After : Nov 6 19:00:33 2025 GMT
Subject: CN=c21393f53c00df8af95456dffd5460326e57380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:08:99:3f:7e:61:bb:a9:4b:bc:94:22:6c:
ad:26:68:b5:64:70:8f:2e:c9:81:b5:bb:b0:97:13:
a7:26:66:59:26:fa:3d:64:34:53:18:b1:c1:b9:a6:
6d:6d:22:a6:bc:f4:b2:7a:86:ce:19:e6:bb:53:56:
75:62:d0:79:3c:fa:00:50:52:af:8b:80:1c:5b:d4:
aa:28:6f:c2:c0:04:76:fe:a7:8c:d2:58:22:cc:5a:
ae:66:f0:ff:96:4c:7a:73:75:4e:77:54:8a:66:1a:
d1:10:10:13:87:88:51:04:e6:ca:16:df:1b:ac:5a:
9e:6d:22:99:bc:49:68:be:d5:20:53:89:25:76:92:
40:d8:3a:4e:92:eb:a4:56:59:e8:24:cc:ad:df:3e:
fc:c1:ed:1f:50:de:12:fe:63:7f:32:83:e1:55:a5:
6e:bb:74:9e:fe:6d:da:2a:19:3c:c0:26:07:3f:99:
48:3f:1f:0a:9e:01:0e:ac:f7:a5:a7:48:d5:6d:0c:
67:1d:c1:a4:3f:a7:13:fd:d6:e6:5f:e6:b2:c0:5b:
73:c1:96:7b:2e:95:a7:82:cc:9b:2e:b9:86:b3:e0:
da:8c:cd:4e:7b:d2:1a:0f:21:20:a7:ee:88:b8:3a:
21:f8:af:3a:fe:89:65:56:cb:9c:cc:37:42:d7:7e:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:93:F5:3C:00:DF:8A:F9:54:56:DF:FD:54:60:32:6E:57:38:0B
X509v3 Authority Key Identifier:
keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:d1:96:f2:7d:fc:b2:f4:8c:76:8d:8c:b6:45:64:4b:09:
40:df:06:b1:02:40:92:67:f1:4c:68:23:5a:10:b0:63:a2:bf:
d9:4e:d0:db:a5:60:10:6d:4c:a9:ce:3c:00:01:2f:cd:6c:db:
0d:66:06:9e:74:79:80:a8:e9:75:68:e7:d0:b8:0b:d1:85:86:
6a:69:de:80:38:8a:b3:5f:fa:18:db:d9:59:d3:5e:32:99:a1:
88:18:65:52:53:c5:8f:90:d0:50:ac:c5:b7:65:bb:00:33:05:
69:1a:13:ac:fd:4b:ad:55:54:9e:50:b9:5f:37:c9:16:52:72:
35:5f:ea:00:26:9d:81:73:a2:ee:d1:96:6b:cf:72:db:81:20:
65:01:ef:2b:b2:c0:0d:6e:6d:12:6e:c3:f6:15:3c:b2:cc:3f:
86:ca:d9:35:4f:b6:8b:2d:ba:f7:13:25:49:13:64:27:2a:19:
61:71:a6:86:f1:6a:27:78:0c:ed:65:b5:b6:ba:a8:23:f0:61:
af:05:d4:81:5f:0d:96:b4:a5:ed:35:7b:7f:a8:ab:75:04:b9:
b5:28:31:81:c6:92:4c:bd:99:3f:b3:73:b7:a6:f8:34:3c:f5:
1b:4e:80:93:ae:2e:39:e2:32:43:0b:ea:b6:64:74:fa:94:e6:
bf:13:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:27 2025 by rpki-client