Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: EKNtgKSByl0dIIkAnCEXxwK0FVUSjJp3c1Z5fk2eXuM=
Subject key identifier: 36:D4:BC:C5:E2:61:54:BE:36:65:A5:CD:A8:2B:4D:11:E3:F9:3E:5D
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019A54C10658C68A3BBB6E7CAFC7978B419D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 01E8
Signing time: Wed 05 Nov 2025 16:02:07 +0000
Manifest this update: Wed 05 Nov 2025 16:02:07 +0000
Manifest next update: Thu 06 Nov 2025 16:02:07 +0000
Files and hashes: 1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: iHx2cjs4RDGvWAAf9SG3qV9GW/wRlbNrhZcZih+rWLc=)
2: U1RYzEbHmiXutqW8M0GkGkDLUKA.roa (hash: 8576dkRYk3dW0Y6uWzvcN1Y2+IXW0jM0HiarzKgHeX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c1:06:58:c6:8a:3b:bb:6e:7c:af:c7:97:8b:41:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Nov 5 16:02:07 2025 GMT
Not After : Nov 6 16:02:07 2025 GMT
Subject: CN=36d4bcc5e26154be3665a5cda82b4d11e3f93e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:db:53:bf:02:a3:ff:3a:c5:6b:fd:be:d1:
41:67:5d:1d:e7:c0:03:e2:9d:c1:d8:a4:09:3d:dd:
33:fa:5f:f8:fc:6a:84:db:99:f5:83:ac:77:86:4c:
77:c7:9d:aa:e0:18:06:c6:2e:b5:39:88:65:5c:31:
4c:64:7b:44:32:a2:d0:b9:26:a2:3f:75:bb:bb:60:
83:ef:9e:8f:e2:78:a1:65:1b:9b:b2:3b:63:f7:40:
53:31:ff:b3:a6:9f:b5:1f:eb:2c:1d:ec:0d:c4:f7:
3e:83:6e:bb:9c:8a:9e:12:04:75:58:98:52:65:08:
48:f9:e7:61:0c:3f:4b:da:c1:6b:92:27:6b:69:cf:
10:8a:cd:2b:2a:77:58:43:01:d2:af:3e:eb:6c:8c:
26:97:f4:f8:7f:ee:3f:20:a1:af:b9:11:38:88:d9:
1f:2c:6d:8d:28:8d:6f:e4:6b:4f:24:dd:a6:a2:34:
19:36:99:0c:29:39:6d:09:db:10:b8:80:9d:f4:0e:
f8:6c:ae:05:75:bb:c7:7d:cc:55:86:81:39:3c:7f:
b7:aa:11:49:20:5b:c0:94:21:9b:90:0a:a7:ef:eb:
82:46:f3:df:22:ce:85:60:34:5b:8e:ee:a2:c7:ec:
88:11:4b:2f:2e:0c:98:e7:a6:25:68:09:f2:72:d7:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:BC:C5:E2:61:54:BE:36:65:A5:CD:A8:2B:4D:11:E3:F9:3E:5D
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7b:5a:ef:d4:b3:a0:a0:4d:f0:f3:ef:d6:98:f6:8b:57:67:
41:9c:72:a7:4f:8c:e2:3e:f0:94:46:df:02:e4:26:b6:8f:f2:
2a:b0:51:ae:cf:2d:11:41:3f:d6:86:0a:2e:db:66:ff:46:cb:
85:c3:84:27:36:e7:05:f7:65:06:ae:48:b1:4d:9f:60:03:f4:
23:2e:82:72:ca:19:8f:98:f9:88:04:33:78:e8:8b:29:ff:c9:
75:98:61:25:e8:00:6b:d3:29:ff:30:a2:23:fe:1c:ed:7b:fa:
d2:41:f8:7f:34:25:fd:ce:47:95:08:2f:27:88:f6:36:40:e7:
fc:87:4b:ad:8e:de:6c:9d:1e:c0:ea:7f:05:4c:51:98:33:4f:
6d:d3:eb:49:d1:96:63:5f:f1:df:79:ed:54:d7:d8:42:52:a7:
96:9f:e4:62:1a:5f:61:a1:9f:dd:ff:eb:35:cd:ca:35:9d:a0:
c9:1c:37:c2:bb:31:e9:16:4b:c0:10:0f:4c:78:9e:f2:16:0a:
4f:aa:e6:70:37:b2:4d:60:92:48:5f:29:01:58:f1:5d:a9:6d:
07:2a:79:2a:d2:e0:c0:59:8e:19:a2:0a:1a:8b:89:c3:87:6d:
18:84:9e:b7:c2:3f:03:1a:b3:cf:55:d1:9c:38:6c:08:09:3b:
6d:51:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:30:48 2025 by rpki-client