Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File: DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier: gN7sSYhWn2o9un8WRvPEM+iEPrC4ykVUKEGFAxBpuNg=
Subject key identifier: 5C:F1:77:E2:EF:74:52:48:7A:86:9D:A2:C6:C2:5D:72:0A:2D:2E:F1
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer: /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial: 0199FFC80AD344CD942A48FDD312054C3190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number: 10DE
Signing time: Mon 20 Oct 2025 04:02:03 +0000
Manifest this update: Mon 20 Oct 2025 04:02:03 +0000
Manifest next update: Tue 21 Oct 2025 04:02:03 +0000
Files and hashes: 1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: DfWhfxBoC1SJmZXW9MgKroJ9VX8Dy28HWZRu84gx7u4=)
2: wD2g-VtZvqp7IY0550_PgDhJeD0.roa (hash: lT0qtpgd/Q3svueonVDRMVNhaFwZxKOMYzAHt0tWC5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:0a:d3:44:cd:94:2a:48:fd:d3:12:05:4c:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Validity
Not Before: Oct 20 04:02:03 2025 GMT
Not After : Oct 21 04:02:03 2025 GMT
Subject: CN=5cf177e2ef7452487a869da2c6c25d720a2d2ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:69:3e:8f:4c:d4:40:85:d7:21:99:42:37:
12:38:ed:0b:9f:d5:38:4b:27:4d:f2:08:67:3d:26:
5e:45:55:f2:3b:7a:43:28:43:d0:2e:c4:1a:f1:30:
e0:2e:84:e8:d2:9f:2b:34:66:b7:72:5c:12:a7:55:
94:84:8f:9d:f8:f4:43:9d:68:7c:e3:08:3f:b6:bb:
ea:a8:e0:32:49:b4:f9:5f:c7:35:85:cb:60:e6:45:
79:57:b5:96:e4:39:36:92:07:35:a7:c1:ae:f7:3f:
b6:66:69:95:86:b9:d0:11:9c:b5:a2:15:92:34:98:
ed:32:75:8a:39:12:11:3f:d7:f7:b3:5c:95:b4:58:
55:16:06:00:5c:e5:8e:79:f1:72:2c:62:92:ce:45:
19:c4:d4:88:c2:d6:86:61:74:8e:34:0a:1d:7c:3b:
08:76:c4:cb:92:b7:79:d6:45:a4:fa:49:c1:bf:e7:
96:d8:d4:99:52:37:17:72:5a:04:a5:2e:7a:fc:08:
9b:40:d8:04:52:f4:23:87:6a:36:9c:f9:27:99:60:
d9:31:6e:ec:a1:f9:be:02:9c:6a:29:bf:e7:a8:ed:
22:4b:bd:8e:9a:ff:50:47:12:2a:01:85:5c:e3:a6:
44:cf:7b:94:2f:11:cf:c3:5f:b0:3a:f1:a7:f7:85:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F1:77:E2:EF:74:52:48:7A:86:9D:A2:C6:C2:5D:72:0A:2D:2E:F1
X509v3 Authority Key Identifier:
keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b7:4b:56:dd:49:b9:55:13:bf:14:21:d8:ba:ef:74:ef:7d:
7d:7d:bb:d6:89:7f:6b:c9:5f:9a:10:0d:09:db:9d:3d:b4:16:
c3:d3:ff:07:3d:d8:70:21:1b:de:54:a3:c7:0c:37:8c:62:f3:
f5:e3:0e:68:2e:7e:3d:fe:03:fa:3a:46:fb:60:7d:d8:eb:14:
d4:da:7f:8c:bc:04:2e:77:60:24:2e:47:10:ad:1e:6d:2d:53:
fc:8f:c4:4e:da:99:ad:6a:9b:c4:03:07:b5:30:58:61:1d:68:
45:8c:f5:77:02:a4:9a:d9:7b:c0:85:51:2c:62:9b:38:ae:10:
1a:8c:3a:c3:b0:24:b3:b2:63:fe:2c:cc:30:31:28:ba:5d:c2:
98:e0:72:e3:ea:52:a9:2e:5f:e2:80:eb:4b:b8:82:cc:46:8d:
46:1e:b9:e0:d5:b2:03:1d:fe:f4:76:89:bd:01:36:63:ba:05:
1d:27:c8:0c:fc:60:d7:f4:0e:15:a4:2a:39:d8:91:b9:72:32:
06:ec:c4:ff:c0:0f:dc:76:88:78:8d:5e:1b:86:6e:f6:2b:0f:
9f:9e:55:b2:cb:19:28:39:37:50:ee:f6:d6:f5:c8:f9:f2:20:
6b:24:79:a3:2e:cb:db:61:6d:29:0a:7a:77:d8:34:9e:80:ec:
40:32:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:18 2025 by rpki-client