Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: kZuaLkJGSW4Ag2pRdvua47ijNo+aALKJUsFuC1OXQBg=
Subject key identifier: 65:51:C4:59:8E:21:BE:C6:A6:46:A8:01:50:4B:B9:86:77:F4:25:31
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 0199FB0F309F9CCFE79BC9100E8BE5BEC4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 034F
Signing time: Sun 19 Oct 2025 06:01:40 +0000
Manifest this update: Sun 19 Oct 2025 06:01:40 +0000
Manifest next update: Mon 20 Oct 2025 06:01:40 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: 6Hl+LOUZhMOOuS2V++CQEZ8r+evAGYgKPUyfIIhAvpw=)
2: uMFOgPoc2NWCSxPiOG6b1D8E-ZI.roa (hash: R/unw2gN5aPMxs/UeuzYe+LHJKBGKVUf8WbT/53nntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:30:9f:9c:cf:e7:9b:c9:10:0e:8b:e5:be:c4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Oct 19 06:01:40 2025 GMT
Not After : Oct 20 06:01:40 2025 GMT
Subject: CN=6551c4598e21bec6a646a801504bb98677f42531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:8c:d5:a4:a8:6c:3c:47:76:56:6e:6e:80:
fa:e6:70:6e:6e:b5:ae:21:61:93:12:92:c8:f5:71:
bb:39:18:51:4b:a4:29:ba:6e:bd:97:31:d5:56:d0:
21:4e:0f:2e:15:0a:dc:fc:a8:fb:e7:37:79:2a:e7:
75:77:8c:b1:80:3d:6b:29:72:e1:76:73:70:a6:e0:
09:ff:83:ea:95:50:b8:59:4a:ac:99:6b:1b:63:fe:
b7:64:a3:b9:ba:93:d6:71:78:77:23:a8:e2:f4:1c:
6c:f2:07:34:34:b0:4a:5e:d0:a1:27:28:5c:ce:4a:
d5:b8:0a:a2:5e:1b:22:cf:25:dd:3f:45:0d:9f:37:
ff:0a:53:f7:70:2d:f2:e0:64:4f:00:62:19:5a:f0:
74:9c:03:0e:14:54:9e:16:bb:87:e8:15:e7:ef:cf:
98:61:3f:bc:48:6b:03:bc:37:e1:3f:77:eb:11:a9:
5f:e5:58:b2:24:c6:5a:f7:e0:d1:9a:e2:1e:50:f1:
70:58:06:b1:7c:8b:51:4f:4e:c8:bf:e1:09:80:f7:
17:18:0b:92:a6:1b:87:e4:b1:e7:79:6a:c3:f6:57:
9a:7b:e2:c1:e5:14:a7:54:7e:a7:b6:4b:f6:71:5f:
49:2a:9a:2e:69:73:c3:10:a8:6f:da:a6:5a:88:80:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:C4:59:8E:21:BE:C6:A6:46:A8:01:50:4B:B9:86:77:F4:25:31
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2e:58:c1:b3:75:db:7c:df:42:14:fa:ba:55:e8:a8:28:28:
88:38:a1:d4:dd:d9:64:00:65:08:79:ac:92:ea:f6:f1:66:d5:
2f:85:06:9c:1d:54:dc:b4:a4:2e:4c:72:44:f2:61:cf:6b:2e:
21:d6:f3:1f:b9:53:16:5c:2c:20:81:85:18:cd:1c:94:8a:70:
f6:51:fd:de:45:e8:ec:20:24:17:a5:79:92:e1:17:17:0b:ce:
00:03:e7:4d:d2:a1:23:71:63:ac:56:6e:0d:1a:32:64:13:79:
f0:62:d3:74:a3:dc:75:3b:90:1b:18:f1:58:e4:1e:15:0b:38:
c8:15:e6:e9:1b:ef:ea:28:01:48:d6:67:e4:d6:93:07:07:0b:
5a:b6:9f:92:e6:95:09:e4:7d:9b:92:44:7e:36:aa:5e:da:90:
ef:ae:59:51:1c:cf:dd:f0:05:b5:fa:90:ee:e2:01:b4:98:25:
22:40:1f:41:4f:04:7f:a9:b5:ee:47:35:3d:ba:d4:61:be:f7:
7f:0c:d8:fa:47:80:29:ee:cd:66:79:de:f0:e1:55:e7:6a:97:
4d:77:0e:71:17:4f:13:71:95:7c:d9:ef:17:37:c7:09:60:cc:
f2:04:c2:7d:a9:b6:e3:87:68:52:9d:dd:e0:27:f5:2a:33:71:
c1:7a:50:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:33 2025 by rpki-client