Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: vvedbhp7El/lH4XY5wyJGOtKePGFNPyMxAC4R4ASJ5I=
Subject key identifier: 2D:01:5F:75:16:2F:CB:05:69:89:8C:43:0D:AE:4D:21:86:A7:33:47
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 0199FC587841C658647567AB0C64794335D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 0571
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: XznWiEIrxtLm7315mACrCbUakcrIkgYeSc7iX47Ca9g=)
2: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (hash: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=)
3: sllzpkHFh9mOLjlCML4tbQK0pwU.roa (hash: E6feljoCdpMR0hz/J2bpGEFeQDlLz1z/a780M0tQTGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:78:41:c6:58:64:75:67:ab:0c:64:79:43:35:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=2d015f75162fcb0569898c430dae4d2186a73347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:ab:26:e1:75:ac:fc:f6:7c:99:f4:39:29:
69:6b:83:7b:b5:43:ac:82:1d:c7:b5:08:3e:55:98:
3e:bf:17:10:de:6b:b8:32:9f:6f:00:b9:2d:24:6b:
40:9f:17:b0:cf:d2:b7:53:0d:1c:62:33:da:4f:37:
4f:42:22:01:66:a8:aa:ae:94:8c:cb:0b:36:b2:6a:
da:3e:73:e1:6f:c6:fb:e3:61:f3:b8:71:e8:6d:0e:
02:29:cc:c8:83:c5:91:0c:a0:69:a0:ac:fa:23:f7:
09:4e:20:1a:9d:32:46:c8:05:6f:f8:b9:dd:c6:99:
f5:a9:0c:dd:ac:46:df:4c:92:5f:eb:33:25:39:74:
d8:68:6a:a2:20:ba:74:57:99:92:cb:cc:b9:aa:b1:
ee:e4:80:8b:03:69:fe:6c:d8:b3:de:7d:60:45:1a:
ce:0e:dc:ee:b5:db:a1:1d:e8:e5:fd:af:b2:2c:10:
4a:f3:65:98:0d:1b:60:43:f5:24:f9:55:48:0f:fa:
74:6e:57:96:35:a3:cb:da:48:53:a3:d0:13:ff:a1:
42:83:24:57:db:45:8c:51:ad:38:e1:44:f3:da:9f:
f7:36:e3:66:54:47:b7:69:43:22:0c:65:1d:b8:f3:
8e:9f:24:33:b1:2a:bd:da:7f:e0:8f:07:47:b9:2a:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:01:5F:75:16:2F:CB:05:69:89:8C:43:0D:AE:4D:21:86:A7:33:47
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:56:b5:09:94:a2:aa:b4:a1:96:23:f8:28:e3:bb:b5:d3:11:
38:e2:b1:78:40:93:33:a5:84:6e:ce:6a:55:aa:ec:ed:df:cc:
9f:c4:e2:f6:c7:c7:18:7f:fe:d9:39:4f:e0:a2:b3:fd:3c:6f:
ef:77:fb:fe:b3:eb:72:89:74:55:a3:87:92:9f:70:84:43:fc:
83:1c:3d:3e:df:fb:58:a6:33:7d:bc:b0:6e:4a:c5:ea:b8:8a:
59:57:dd:af:5c:b5:19:d1:1a:d5:3a:5f:61:73:5d:8e:19:0e:
26:b1:4f:11:d8:99:9f:17:66:43:cb:0d:20:67:8f:10:94:f7:
a7:57:b8:82:e2:5a:0c:f2:f9:1b:2f:a9:bd:af:39:4c:8d:1e:
4b:42:8d:ab:05:ca:df:9a:1e:14:a6:04:7e:f1:71:d5:44:c8:
68:99:b6:7f:6f:81:90:bd:0d:5d:89:0c:96:f6:3f:91:dc:64:
9c:f0:4a:de:a5:2a:8c:ac:36:e9:bb:58:b6:fb:26:0e:3b:a2:
bb:14:68:12:fb:96:f9:de:44:c7:8e:6b:99:2f:a6:c2:04:2e:
62:74:18:43:39:09:26:b5:cb:7f:05:67:42:dc:26:da:64:a4:
89:67:be:c0:d9:90:d1:a1:14:00:02:8a:b3:04:f4:fd:70:2c:
ce:53:b2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:50 2025 by rpki-client