Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: SGjhFfNc7yWqtnkVLOv4iOrpeMRmcsp/jfYYpjwavvY=
Subject key identifier: 5F:61:7D:D8:90:EF:A1:59:20:02:17:EA:94:52:80:AB:2E:98:E8:C4
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 0199FCFD8BB325D22399E600D7D37000972E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0DCA
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: a6NwxNhjfvYaumH5vc2hppnqRHkfazu/+Prt6wQrqpo=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8b:b3:25:d2:23:99:e6:00:d7:d3:70:00:97:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=5f617dd890efa159200217ea945280ab2e98e8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:de:9c:01:88:42:1c:82:85:3f:83:06:b7:
ad:0b:96:44:47:52:58:1a:9a:d2:38:21:5c:40:c9:
bb:44:f0:78:1e:e0:5d:c1:cb:7e:b5:e8:c8:15:b9:
8a:91:43:b0:6e:80:fd:cb:37:9d:f9:87:5e:2c:18:
af:4b:97:27:1c:10:ce:82:e5:1e:68:38:41:bd:c0:
ff:78:b4:3d:04:62:83:61:c7:46:3b:1e:c7:a2:fb:
ac:c0:de:c1:59:40:e2:a3:49:be:d2:02:3c:85:fd:
80:12:fb:6e:9f:ea:7b:f0:58:90:16:b9:48:59:b0:
2c:b5:af:af:24:bb:f3:21:9c:86:98:1b:68:ee:59:
8a:e9:9b:01:3f:b4:dc:bb:c6:e7:69:5c:ba:00:4c:
96:6f:2b:e1:e5:1f:67:e0:ef:c8:3b:77:e9:78:f2:
c7:d6:ad:bc:4b:58:91:8f:f6:5b:a6:13:e6:4b:20:
90:dd:c4:48:a7:38:b8:ee:0a:f9:8f:fb:a9:0c:c0:
77:5a:00:48:45:c3:65:ba:63:79:10:e1:16:4c:36:
2f:f4:d9:f3:b5:e9:a1:e0:03:82:ea:9e:da:2c:2c:
07:06:4a:96:d8:5c:36:26:5c:3a:68:d3:c2:4a:9a:
62:51:2e:d2:df:ef:2d:00:28:e7:0d:d2:1b:9b:e9:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:7D:D8:90:EF:A1:59:20:02:17:EA:94:52:80:AB:2E:98:E8:C4
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:41:59:8f:ed:d4:a1:9c:bd:c9:95:83:e5:4d:30:4b:29:2a:
88:9b:ef:2b:83:fc:27:2d:03:4d:4d:16:67:dc:1c:6c:45:16:
b2:69:d9:11:5b:16:ed:7b:2d:be:2c:8d:60:84:65:04:79:0a:
59:5d:5f:dc:f9:5c:2a:0f:10:45:29:1b:7c:60:67:b1:76:d8:
0d:8b:97:d9:c8:d0:4d:05:9f:5a:34:18:39:3a:f1:c1:7c:70:
37:d3:7b:17:1a:9f:cf:46:4f:20:d8:1f:b1:83:61:f4:2c:a9:
76:fc:e9:34:3c:cf:c2:e5:3e:d2:91:bc:3e:3e:8c:e5:a1:b6:
01:76:b2:4e:da:5b:bb:9a:68:cd:02:3a:57:57:91:3a:75:38:
33:a5:16:97:6c:1e:8d:04:74:e6:ca:10:ba:21:3d:f1:7c:59:
b8:9b:97:06:66:1f:d0:6b:e9:a2:3d:7b:54:ed:25:ab:76:0d:
d2:b5:2f:09:77:43:1e:35:d6:a9:36:11:12:9f:e0:07:f5:05:
60:8c:93:4c:1b:11:a4:d6:6b:dc:91:4f:e1:13:d4:9e:79:9e:
6b:5a:7f:3e:9a:70:60:a2:d8:fb:c7:fa:7c:29:48:2a:c8:a6:
d8:79:41:23:53:dd:44:c6:85:a0:2d:a3:18:f6:72:8e:35:59:
de:8f:7e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:04 2025 by rpki-client