Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: 473zAwsnj7QyodjLuvwfWKwcYmvtkU5F9w99DFc0dYI=
Subject key identifier: D1:51:0D:B9:AA:C4:2E:4C:4B:DD:F5:15:D6:DB:50:99:44:E6:C5:CA
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 0199FCC671F769EC5F6EA8AA20B4751E3F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 0F25
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: sJc8MyJwS+VCdNlphV6KxOrvb1e7CJAbTo37VZ+71fA=)
2: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (hash: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:71:f7:69:ec:5f:6e:a8:aa:20:b4:75:1e:3f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=d1510db9aac42e4c4bddf515d6db509944e6c5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:71:78:79:d3:76:21:5e:c2:68:d1:df:b9:
20:86:da:78:0a:e4:28:a7:9e:21:b7:2b:03:d5:7c:
83:39:7e:c6:34:66:16:fb:9b:f1:10:77:dc:7d:74:
8e:ec:7e:91:e7:07:13:c9:15:f8:5a:f4:d4:78:a4:
2e:2c:dc:61:ae:4a:77:31:75:7d:c0:62:22:bc:e8:
1c:74:ab:6e:4f:12:9d:65:40:ff:2b:4a:78:14:5e:
3e:c1:35:4b:86:d5:cb:9e:ce:e1:85:b3:b9:ce:18:
29:48:e1:4d:a7:7c:f6:fd:fe:23:fd:7a:5f:ad:b1:
99:e0:cd:59:7f:74:e6:94:5a:01:9e:ea:5b:f1:dc:
c4:f2:de:a3:77:c0:5f:80:af:5b:0b:42:69:ad:39:
c5:57:7c:ec:c5:6b:cf:80:c2:5d:05:50:c4:49:1a:
c9:00:8a:a0:dd:8c:d0:fd:40:6e:41:4e:15:53:72:
cf:56:21:03:b6:46:db:55:67:d1:ca:5a:f5:f2:9a:
b7:b8:63:bc:5c:4f:d9:0d:75:e0:11:c0:5f:c7:97:
03:73:cc:4c:fc:f1:1c:a8:29:a2:b4:5a:a9:ee:0b:
5f:5c:9a:9f:26:d8:96:29:48:55:a0:d4:ed:fb:b5:
73:4b:ea:49:31:f7:f8:bb:23:33:49:28:2c:33:5c:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:51:0D:B9:AA:C4:2E:4C:4B:DD:F5:15:D6:DB:50:99:44:E6:C5:CA
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4f:bd:34:22:cd:22:e3:9a:7f:e9:70:67:45:e2:69:d1:c2:
31:5b:c4:e1:0f:5b:27:3c:e0:cb:b3:07:94:3c:df:aa:33:09:
a3:c3:eb:e1:ed:bb:94:22:fe:72:b4:6b:9a:8d:5f:ea:3a:32:
f9:ec:30:2b:4c:c0:39:16:5b:57:47:78:94:ee:b0:de:dd:43:
f0:e1:0b:01:ce:5a:8c:f6:81:1b:0f:26:4a:e9:2b:63:58:5a:
a7:b4:33:0c:c3:41:cd:0f:32:60:78:b3:c8:3e:d0:b0:06:8f:
0b:12:a0:3b:ce:63:03:dc:b8:00:bc:15:1f:9e:e0:15:26:16:
a4:84:fd:1b:26:b2:80:f2:b0:b4:72:df:90:e4:b9:d2:66:de:
3a:d5:00:4b:ce:93:54:e3:a3:e2:c5:9e:ea:e8:ea:81:dc:11:
94:43:3c:88:ec:7b:2e:da:c7:f5:d0:f8:c2:32:de:de:6f:6e:
7d:f3:97:f8:24:dd:33:0d:6e:df:e8:84:31:da:39:a5:5e:68:
2c:fa:51:cb:2c:3d:7d:a8:dd:06:25:f6:d9:4e:36:21:8d:ba:
7d:55:94:e1:3f:4f:13:29:a8:f0:37:1a:44:28:7a:b1:39:ce:
fd:cf:9d:9d:e3:02:f8:10:e3:be:2c:3a:a7:c3:dd:88:d8:33:
7b:62:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:46 2025 by rpki-client