Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: PC1Z7c8cZNeMjLf2NaE7VdR5+/rIQZ9pcCMP89fuZ/A=
Subject key identifier: EC:07:27:03:3E:3D:16:12:7B:FF:23:99:69:FC:97:CF:43:78:7F:D0
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 019A4E18C171475767FC53B0F35866AC41C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 09:00:36 +0000
Manifest this update: Tue 04 Nov 2025 09:00:36 +0000
Manifest next update: Wed 05 Nov 2025 09:00:36 +0000
Files and hashes: 1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: xF3WhfRmg3NUaG1Et5/yPsfIfxLUS/tjcSaVzgy1WXI=)
2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=)
3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=)
4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c1:71:47:57:67:fc:53:b0:f3:58:66:ac:41:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Nov 4 09:00:36 2025 GMT
Not After : Nov 5 09:00:36 2025 GMT
Subject: CN=ec0727033e3d16127bff239969fc97cf43787fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:42:92:aa:b2:4c:df:8e:b6:3c:61:93:62:
c3:ee:3a:80:cb:af:d9:0a:b3:51:b6:45:9d:ce:bc:
4b:ab:71:c6:9a:c0:8f:1f:97:56:80:b6:2d:5b:fe:
12:32:83:3a:15:85:b8:1c:81:cf:5c:0b:89:c8:f0:
b2:b8:a0:5a:08:df:3c:05:e8:f5:5d:88:f9:38:dd:
4b:33:f1:cf:21:19:1a:53:12:11:13:6b:48:41:5d:
75:9b:7b:3c:f6:17:44:aa:bc:75:9b:2d:5d:de:7d:
82:a7:df:7a:36:d7:7f:b5:8e:48:52:db:fa:85:30:
a9:b6:01:8b:2c:eb:6d:64:a9:a2:a1:f9:a1:e7:2b:
b7:e9:57:36:dc:a6:bb:bd:a7:99:50:69:69:c2:e0:
ae:9c:2a:17:5d:30:7b:94:fb:2c:df:74:49:a0:98:
bc:09:a2:b2:6d:56:4b:f7:a8:49:b6:75:d6:b2:a5:
9a:9d:5c:2f:77:05:0e:17:6f:98:ff:65:f6:74:8c:
a0:e1:17:1a:ab:3d:32:43:9c:4b:cd:53:d4:ce:97:
10:1d:11:45:b9:62:84:ca:93:00:b4:ad:df:11:72:
5c:c3:c4:5c:dd:a3:02:83:59:07:5e:b8:19:e3:25:
fe:48:b7:df:83:80:ba:5f:30:77:8c:74:60:3a:d1:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:27:03:3E:3D:16:12:7B:FF:23:99:69:FC:97:CF:43:78:7F:D0
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f3:7d:49:53:b9:f8:10:fa:42:cc:0b:29:7b:0e:5e:7b:e8:
cd:a9:c8:7c:2c:c6:ab:93:2b:f4:d7:d5:cd:8e:9e:3e:bb:4c:
ef:99:a4:32:d5:ac:70:db:d3:36:e3:b4:2b:3e:fa:44:a6:37:
2a:0c:d4:c7:e4:5b:e0:bf:02:7a:78:56:66:e9:a7:50:2e:83:
e4:9d:12:2c:70:a3:73:50:09:2e:89:ff:f9:7e:70:96:4e:46:
f2:e1:cd:66:af:f8:89:56:01:77:ad:e1:68:86:71:ce:6c:a6:
5c:2e:c4:86:6a:a4:dd:f4:c3:85:18:62:6d:42:a1:ef:2b:ac:
5a:b1:48:a8:6a:96:a2:1b:93:15:9e:dc:40:fb:ca:68:59:ab:
29:a3:b2:83:ac:e1:e3:86:7c:34:7e:24:06:ee:9f:aa:75:1a:
40:a1:fe:18:80:0d:6c:06:18:91:b8:ff:be:63:48:4b:89:f4:
31:3f:58:47:ea:d4:9d:34:bf:2e:30:62:0d:2b:33:d1:2c:29:
5c:37:c9:94:77:7a:09:3b:61:11:45:c7:5f:d7:3f:cd:82:d7:
42:b0:9e:2c:2e:0f:98:52:5e:43:1e:6c:30:e8:25:d0:21:14:
77:c2:72:27:1e:90:ae:ae:7b:ce:b0:85:4a:64:b3:bb:be:5c:
27:95:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:31 2025 by rpki-client