Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File: DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier: 9kqUyWrR9QVaV45CJKRPalR/nPaH4tZVOftYY7Rhqzo=
Subject key identifier: 8D:D5:90:1A:E6:77:84:89:E1:3C:0D:BB:88:29:F6:02:20:CF:FC:93
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer: /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial: 019A5074DDFA88B9B0495F3B93B569E3FD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number: 0ED7
Signing time: Tue 04 Nov 2025 20:00:27 +0000
Manifest this update: Tue 04 Nov 2025 20:00:27 +0000
Manifest next update: Wed 05 Nov 2025 20:00:27 +0000
Files and hashes: 1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: jH/0nFr5TJ+tZ3yootwJX8i+rJv59xzSzUzTueuIkYA=)
2: _mseEGqhmjk5DbDhY65kEG9l3Do.roa (hash: 4EKC+djlGJVTHQZoZJyp3llh1Qpa/Gw18st2TTUCkbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:dd:fa:88:b9:b0:49:5f:3b:93:b5:69:e3:fd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Validity
Not Before: Nov 4 20:00:27 2025 GMT
Not After : Nov 5 20:00:27 2025 GMT
Subject: CN=8dd5901ae6778489e13c0dbb8829f60220cffc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3a:31:4a:7d:ce:af:e6:e0:e9:a8:85:bf:fa:
03:66:d5:b1:47:ac:97:af:b8:21:d0:1e:69:b2:64:
1d:2a:5e:ea:41:9e:de:51:c9:e5:44:2f:15:ee:36:
ec:f1:4c:e0:df:d3:76:17:31:0b:74:4c:0f:24:50:
42:b7:09:53:dd:f5:77:ce:8e:54:20:e6:7d:b8:76:
cb:27:47:43:a6:84:db:64:8f:f6:95:c9:01:fa:90:
f2:60:74:21:48:6f:8e:9a:29:d1:42:7b:91:49:0f:
c0:88:1f:e9:fa:a2:d3:cc:f0:02:7f:01:d2:95:12:
5f:8a:2b:bd:fb:69:35:3f:e0:bd:81:2a:59:ca:cc:
dd:13:28:eb:9b:07:f3:f6:ef:35:15:37:7e:3a:00:
e6:5b:92:1f:1e:a2:cd:1f:44:30:32:d0:b7:01:26:
ed:7f:2d:42:a4:4c:79:2e:63:f4:b3:d0:4a:27:53:
47:34:33:08:e6:3d:64:1b:c8:0e:62:b3:ac:db:a7:
c6:bf:70:f3:e7:2e:13:05:d6:1c:c3:24:4b:14:4f:
8a:52:2a:a2:22:b0:e4:6e:b7:7f:ae:d7:33:9c:b0:
43:b0:bc:e4:3b:2f:e4:4f:cf:10:ab:d5:fb:59:93:
69:d8:da:b4:93:28:a2:db:70:b7:f7:a2:35:89:32:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:90:1A:E6:77:84:89:E1:3C:0D:BB:88:29:F6:02:20:CF:FC:93
X509v3 Authority Key Identifier:
keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:72:09:8c:56:bd:35:40:78:24:ba:7b:a6:bd:29:2b:ff:a5:
68:e8:40:6e:e2:fe:3e:8c:5a:ff:f0:c4:3c:57:44:49:00:eb:
c9:d0:a1:eb:02:39:60:95:6f:95:02:85:56:ac:83:78:81:2f:
cd:37:3c:53:42:ab:81:4f:4a:e5:44:cc:41:77:bf:48:86:52:
70:af:c0:d6:4e:6c:11:32:5c:f8:52:c6:23:ed:a9:58:68:8f:
bb:65:1b:5c:d1:3a:07:b1:40:2b:57:5f:f8:79:db:57:45:9a:
75:a0:9c:ea:4a:10:b9:05:aa:28:7a:e6:fb:a2:68:f6:6f:29:
22:97:6b:59:de:79:ba:8d:b6:ac:b0:2a:2c:17:bc:39:76:63:
59:3b:e0:65:85:25:49:5d:45:9c:f0:19:83:12:65:ac:e6:df:
1f:2c:08:41:17:b3:f5:28:cd:93:36:ef:5a:9b:eb:47:34:ba:
43:b7:1a:4e:02:fc:de:08:79:97:2a:23:74:fd:09:7c:14:06:
85:79:4f:56:20:12:92:52:b9:bd:d3:86:24:71:ae:ec:9d:32:
95:7e:07:86:46:c5:f2:88:76:d7:87:8a:ec:a4:50:89:ad:72:
0a:80:d9:1e:14:71:bd:d9:ed:e8:c8:ed:ef:75:54:7a:18:3d:
84:cb:94:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdN36iLmwSV87k7Vp4/2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjNmNzNkNjRmNmRiZjgxZDUxZDM1ODA1NDgxNTY4Y2Rk
ODE4NzUwHhcNMjUxMTA0MjAwMDI3WhcNMjUxMTA1MjAwMDI3WjAzMTEwLwYDVQQD
Eyg4ZGQ1OTAxYWU2Nzc4NDg5ZTEzYzBkYmI4ODI5ZjYwMjIwY2ZmYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ToxSn3Or+bg6aiFv/oDZtWxR6yX
r7gh0B5psmQdKl7qQZ7eUcnlRC8V7jbs8Uzg39N2FzELdEwPJFBCtwlT3fV3zo5U
IOZ9uHbLJ0dDpoTbZI/2lckB+pDyYHQhSG+OminRQnuRSQ/AiB/p+qLTzPACfwHS
lRJfiiu9+2k1P+C9gSpZyszdEyjrmwfz9u81FTd+OgDmW5IfHqLNH0QwMtC3ASbt
fy1CpEx5LmP0s9BKJ1NHNDMI5j1kG8gOYrOs26fGv3Dz5y4TBdYcwyRLFE+KUiqi
IrDkbrd/rtcznLBDsLzkOy/kT88Qq9X7WZNp2Nq0kyii23C396I1iTL8MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3VkBrmd4SJ4TwNu4gp9gIgz/yTMB8GA1UdIwQY
MBaAFA8j9z1k9tv4HVHTWAVIFWjN2Bh1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wMzQ3N2MtMTBhNC00NTViLWJlNmIt
YjNhMDk0MzBjNjY1LzEvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wMzQ3N2MtMTBhNC00NTViLWJlNmItYjNhMDk0MzBjNjY1
LzEvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnIJjFa9
NUB4JLp7pr0pK/+laOhAbuL+Poxa//DEPFdESQDrydCh6wI5YJVvlQKFVqyDeIEv
zTc8U0KrgU9K5UTMQXe/SIZScK/A1k5sETJc+FLGI+2pWGiPu2UbXNE6B7FAK1df
+HnbV0WadaCc6koQuQWqKHrm+6Jo9m8pIpdrWd55uo22rLAqLBe8OXZjWTvgZYUl
SV1FnPAZgxJlrObfHywIQRez9SjNkzbvWpvrRzS6Q7caTgL83gh5lyojdP0JfBQG
hXlPViASklK5vdOGJHGu7J0ylX4HhkbF8oh214eK7KRQia1yCoDZHhRxvdnt6Mjt
73VUehg9hMuULg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:16 2025 by rpki-client