Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: jo6LBAO3Sycc9udyjO5pkE4JDZcnF5XhkGDh7kdUVHc=
Subject key identifier: 84:31:C2:0D:3C:54:5D:B5:DD:0D:33:38:02:B5:EF:C7:17:46:D4:A5
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0199FC5865EDE099AB568074E030D5DD43C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 0F92
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: XthvMO5sSQ1hplxPAje8cJbkfVHPAXiITJGcmYxfpXA=)
2: yAX7kXvWm92680l11R9uBAFGQnY.roa (hash: PzHY/wJJLxlCCbW9yVair3ky9z1XDsrY5r4NVGBKmjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:65:ed:e0:99:ab:56:80:74:e0:30:d5:dd:43:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=8431c20d3c545db5dd0d333802b5efc71746d4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:dd:43:b9:05:a3:c8:c3:b7:73:0c:6a:43:
c7:10:d2:64:a5:65:85:20:5c:23:b4:ff:91:30:6f:
bc:83:43:25:75:09:10:db:c0:db:dd:f3:a1:dc:2f:
82:14:fe:1b:8d:6c:81:1a:41:18:32:87:27:3a:fa:
96:82:b4:ae:da:29:51:37:a9:e2:8c:54:0c:39:00:
00:1e:16:a2:c5:ed:99:cf:70:cf:ff:97:f7:75:51:
42:05:ea:6f:ad:4c:0f:73:bf:0a:1c:ca:76:b5:24:
94:93:63:53:d4:06:2e:30:da:3a:48:86:27:16:f8:
f4:47:28:6a:3b:1f:34:1f:14:3d:42:cd:6d:e2:16:
de:9a:fb:77:23:60:6b:64:42:9b:24:ef:21:4f:ef:
af:74:9a:eb:d2:c2:6c:a2:9f:11:42:bf:11:94:cb:
2a:24:f9:53:8d:77:85:83:79:f4:5c:c9:60:f6:de:
3b:00:06:29:7f:9f:d9:e9:67:cf:e7:f9:39:b4:24:
a1:b4:e1:22:bd:ef:8e:e2:44:78:79:87:e5:50:3d:
f5:77:17:92:c0:37:fe:5d:45:98:f4:f5:14:d9:e9:
cf:ca:4b:20:33:1a:f2:8f:11:11:91:7c:03:57:ff:
d5:f6:46:bc:b9:14:8a:09:70:df:d2:1e:19:a6:1d:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:C2:0D:3C:54:5D:B5:DD:0D:33:38:02:B5:EF:C7:17:46:D4:A5
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:30:b7:42:bc:d7:db:5e:63:4b:5a:bb:90:a5:e3:d9:9f:
53:9e:cf:9f:6a:9a:18:1c:dc:db:a9:ad:ec:99:e4:d3:5f:b4:
1a:16:bf:94:df:08:cc:f8:02:86:da:59:8f:d3:19:f9:57:cb:
fb:01:53:2b:2a:04:b7:e3:a5:c3:7b:db:cd:10:23:30:4f:c6:
1d:dc:ba:3b:7c:c8:13:c1:8c:34:f6:e7:20:3f:3e:b3:a2:56:
b4:2b:59:5a:ce:ad:d7:5d:8b:e7:f8:8b:25:ed:b0:8d:3b:e7:
fc:36:0e:d7:e0:44:a3:a4:f5:db:5c:2c:88:81:e0:cd:f2:43:
49:60:37:ff:bf:44:f0:53:90:15:99:41:58:ec:ec:56:92:d8:
ea:23:4a:cf:d9:b2:56:9c:41:05:76:a8:cb:9e:f0:35:99:26:
51:31:7b:ae:b2:25:19:f8:38:d9:fe:36:c2:e9:65:88:0d:c1:
33:56:42:11:23:0a:93:2a:81:e0:0f:f3:b7:93:5e:4d:a2:00:
82:9e:f8:68:92:05:d3:db:62:86:21:de:f7:0d:20:1c:45:c2:
f9:99:4a:09:92:6d:d8:26:65:65:bd:1f:46:14:40:b7:49:97:
60:d6:b6:98:34:a4:9e:ce:7b:55:4f:16:e3:45:c0:75:fa:3e:
fc:d9:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:23 2025 by rpki-client