Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: eT84mEBTQ/ikXBG9Ws2GK37Bi3+bJQs74mAFnt6LguE=
Subject key identifier: 4E:E1:3A:C8:82:C8:75:3D:01:51:3D:9A:51:8B:BC:8A:9D:37:DB:41
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 0199FDD8C19E3F65417BDB57A6414E60CD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:01:04 +0000
Manifest this update: Sun 19 Oct 2025 19:01:04 +0000
Manifest next update: Mon 20 Oct 2025 19:01:04 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: t0zKBsLMLHKVXS8GNXP9ofWhJj+Iz3ife5iCSe2ixgQ=)
2: rGd99voSzroleDeVrTNABeoU6Jg.roa (hash: UJYK4rx2XvhMh0V5UdV9K0pusDUwS3V+qxXywUzqr98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c1:9e:3f:65:41:7b:db:57:a6:41:4e:60:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Oct 19 19:01:04 2025 GMT
Not After : Oct 20 19:01:04 2025 GMT
Subject: CN=4ee13ac882c8753d01513d9a518bbc8a9d37db41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:9d:cc:bc:16:0b:9b:0e:b8:8a:bf:67:56:
ba:6d:ad:91:97:fb:a6:2d:b1:74:d0:ad:ad:f7:e0:
d4:c6:17:81:c4:54:21:74:89:0b:ba:34:29:23:26:
38:a7:a5:f0:5d:1e:0c:28:75:0d:8c:7f:e9:fa:9d:
3f:c9:63:3a:d7:a2:82:b6:55:35:54:c1:91:8e:ab:
53:fa:e1:75:e1:8d:52:62:0a:2a:78:34:42:bc:94:
56:0a:9c:b7:1e:81:b7:0e:e3:d7:93:f0:1d:4a:83:
d3:a3:02:61:cb:94:bd:92:1f:a7:a6:ea:21:ef:ab:
1d:d7:a9:00:66:30:41:b3:28:d1:88:db:64:11:e7:
ca:8e:7e:75:02:0e:de:07:8d:02:72:62:18:e6:c8:
a8:6b:40:1d:14:c0:35:d5:51:e0:c7:76:b8:37:68:
39:3c:fb:d1:79:d1:27:c1:84:8c:f3:f1:71:ce:8f:
36:71:1b:c9:9e:38:31:00:14:a6:ce:d1:a6:f4:51:
56:5c:24:04:d1:45:c4:46:3e:b9:c5:3b:56:57:7b:
8c:b0:bc:be:c7:d0:6f:78:2b:d5:c2:28:ca:00:3c:
ad:24:54:06:28:57:92:f2:f0:49:c2:1e:5d:59:e9:
3d:e5:43:35:75:3e:b1:40:1e:1a:de:8c:a8:19:ae:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E1:3A:C8:82:C8:75:3D:01:51:3D:9A:51:8B:BC:8A:9D:37:DB:41
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:f9:22:c7:71:61:74:4b:ca:ec:79:b7:11:3e:1c:28:c5:
b6:74:7a:cf:bd:8c:0b:a0:88:ec:22:37:80:f7:d3:c8:92:d4:
cb:93:36:05:1e:c8:16:3c:25:20:0c:92:ee:8a:ea:c3:a2:25:
8f:58:7d:8d:32:18:10:3f:e4:d4:bf:b4:0f:2a:8e:fa:98:e2:
49:25:ba:fe:ef:07:8f:fe:a1:95:07:f0:81:83:6a:10:a3:e4:
4b:e4:43:45:7b:75:6c:06:97:1b:63:ec:08:cc:31:38:f1:8e:
3c:62:62:92:67:03:10:db:29:98:48:10:79:6a:d2:1f:74:5f:
fd:55:22:85:52:52:8b:e5:be:61:7c:43:95:db:da:df:a9:3b:
6f:4a:1c:5b:37:6b:2b:a1:64:d3:73:b3:73:f3:94:d1:a8:ff:
ee:93:1b:33:86:ac:b0:eb:87:d3:a9:58:af:ac:25:c3:f9:6b:
99:95:df:7f:22:42:3d:b7:e1:ab:6f:da:11:c5:f7:b4:0c:70:
53:d8:5c:e2:fe:96:80:72:73:36:af:b5:05:86:91:e1:f0:36:
55:33:db:1c:8f:1e:d3:e6:34:99:4a:36:e3:da:99:eb:32:cd:
30:3c:ff:21:01:3e:c7:15:76:ed:19:c2:85:56:fe:04:71:fb:
07:47:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:24 2025 by rpki-client