Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: YJEvlf1b6kZ6ZwkgCD++PrUZERtCrSUTbtVpP3DdlWc=
Subject key identifier: 6B:41:7B:07:49:44:B0:FC:8C:9D:1F:50:94:0C:5C:22:B4:3F:4C:70
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 0198D4E0E5C48CA0FC63DF071811043C2FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:45 +0000
Manifest this update: Sat 23 Aug 2025 03:02:45 +0000
Manifest next update: Sun 24 Aug 2025 03:02:45 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: jY+nLBa718/z0DEjzrDu1QlywFVdfmIwqRmirr5f2WY=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e5:c4:8c:a0:fc:63:df:07:18:11:04:3c:2f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Aug 23 03:02:45 2025 GMT
Not After : Aug 24 03:02:45 2025 GMT
Subject: CN=6b417b074944b0fc8c9d1f50940c5c22b43f4c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:de:fc:33:43:93:39:f0:ad:a4:40:e1:20:
5e:72:17:cb:1c:fd:aa:34:44:0c:d0:ab:44:93:b7:
55:16:1a:f6:90:45:f6:2a:ad:e2:e7:73:31:e2:fc:
19:31:8d:6d:fd:28:51:5d:05:68:47:9e:eb:d5:a3:
e3:bc:dc:6f:fe:16:bc:9a:03:00:98:35:5f:5e:9e:
9c:a1:86:c6:2a:ef:88:b9:4e:46:e0:e1:74:4e:00:
67:04:1a:ac:a9:ba:81:bd:ed:75:0f:e4:c4:b2:c5:
64:38:62:ef:7f:96:ba:9d:ce:8c:ee:9d:3c:9b:38:
02:73:cc:29:0a:18:64:01:07:f5:86:ce:4e:a5:46:
7f:3c:94:46:a2:ab:0f:c9:fd:a7:05:aa:be:88:22:
16:ed:de:e0:d4:d8:ff:38:ca:76:f4:d9:2d:fe:8a:
ee:e4:ad:95:5c:57:53:97:38:bf:4a:f6:ba:17:a8:
5f:27:5a:64:4a:b0:de:2f:16:2d:96:e7:c1:18:57:
0a:69:7d:d5:ae:00:37:c7:85:07:f0:3a:c2:6d:04:
40:4d:2a:94:89:83:7e:e1:7a:db:12:dc:9b:f6:1f:
bd:95:ca:bf:ff:40:ed:91:79:85:5e:f7:94:58:6d:
8a:0a:9d:fa:54:0f:ce:89:5b:6f:98:b5:02:7a:bc:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:41:7B:07:49:44:B0:FC:8C:9D:1F:50:94:0C:5C:22:B4:3F:4C:70
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:05:02:f1:9d:1b:1b:8b:61:a2:0c:69:16:cf:06:98:80:b4:
5d:4e:d5:f9:44:7f:f3:13:79:0d:6f:55:92:ac:b1:86:8b:bd:
fc:3c:ec:87:48:a9:82:66:8a:8b:41:79:0f:68:c8:9a:82:78:
ab:36:91:af:dd:a3:d5:08:89:9d:41:fb:af:ed:ff:d7:b3:04:
13:79:64:10:cd:8d:6a:80:38:66:b9:86:14:65:ba:3d:1e:83:
20:0b:eb:97:92:61:e5:07:64:63:4f:d8:d9:9c:4e:f0:62:8e:
d0:98:c6:f7:74:f4:e3:98:0a:29:26:a2:93:14:8a:5c:57:0b:
63:89:27:36:d6:37:82:54:9e:fe:e6:71:9e:65:5f:fd:2a:bc:
c8:e1:35:58:71:a3:d2:8f:41:60:f7:8b:4e:a9:1d:75:38:46:
3e:81:7f:ad:8d:07:df:f9:28:b4:33:53:ef:74:9f:7d:4c:3f:
bc:5f:12:73:e7:92:bd:8b:ae:6c:ab:27:e4:09:4c:30:9d:01:
c1:f0:3c:75:fd:b5:8b:9b:93:4e:44:42:e9:d0:16:32:76:96:
c4:33:43:b9:4a:cf:88:99:71:74:ce:5d:33:5f:bb:cf:15:2a:
39:55:5f:50:62:f9:45:e0:f0:28:fc:39:c8:69:40:9e:65:5f:
59:aa:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:40 2025 by rpki-client