
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: YPsvLqj26q1vtKF/3sKQ55apZfBteo2nY9IufZYHGxA=
Subject key identifier: 08:66:71:4A:B8:36:49:75:5B:6B:2B:B0:A2:BE:CE:E8:0B:97:49:E0
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0198D4DFF596D238033EFF89ECDEB2C791D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 0EF9
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: uaEVEqrbIg8XAtvZUn77Asc9eq0vZyOR9tS4aWtJmHQ=)
2: yAX7kXvWm92680l11R9uBAFGQnY.roa (hash: PzHY/wJJLxlCCbW9yVair3ky9z1XDsrY5r4NVGBKmjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f5:96:d2:38:03:3e:ff:89:ec:de:b2:c7:91:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=0866714ab83649755b6b2bb0a2becee80b9749e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:00:5c:f6:e1:b7:da:91:bd:3d:7b:33:4d:
09:ef:7b:a1:70:db:72:06:b6:b0:b9:55:81:39:d6:
74:7e:f5:f3:22:7b:35:74:e8:1a:25:bd:c7:dc:90:
58:42:06:8d:e4:d0:68:60:da:03:c9:70:b0:8a:fe:
e9:23:ad:3d:7f:65:f6:bf:09:e9:5d:75:e5:e8:ae:
50:19:92:a3:c5:ec:3e:85:03:1f:5b:7b:c0:e0:ff:
14:10:34:6b:db:21:46:c2:40:90:2d:2f:33:75:e6:
89:83:76:02:7c:73:9b:c4:7d:c6:72:ca:7f:31:70:
f6:d5:ec:8e:58:3f:03:fe:e0:50:c2:0f:ce:cf:ae:
73:1e:d6:94:d9:41:8e:10:d5:bf:75:e0:47:3b:be:
c5:8c:86:dd:a7:65:7f:1d:05:46:a9:3e:1d:5e:b2:
de:d0:23:c4:09:21:6f:be:f3:0b:1a:d5:08:fe:3b:
63:2e:fc:0a:6e:48:de:35:e5:6f:ca:16:48:2a:25:
fb:cf:ca:85:29:61:89:a8:60:c8:e5:18:74:75:d7:
60:2b:44:83:54:81:1a:b0:f0:16:a0:b6:ed:7a:a2:
f8:02:bb:00:92:e4:18:d5:2e:59:91:e0:5c:18:90:
47:20:3a:88:6e:01:60:90:d0:21:ab:48:c9:af:79:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:71:4A:B8:36:49:75:5B:6B:2B:B0:A2:BE:CE:E8:0B:97:49:E0
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8c:74:00:5c:43:dd:d0:c0:12:42:57:b6:04:61:19:5c:bc:
cd:91:28:53:10:64:55:2b:17:b5:9f:14:de:02:e6:6c:fa:ed:
30:1b:a2:17:df:cf:86:f0:0a:74:1c:5f:8c:eb:53:f0:17:7f:
af:2b:84:b1:b1:fc:54:09:6c:31:51:55:79:c1:63:68:11:e1:
ee:5f:e4:40:21:6e:75:38:9a:56:29:80:a6:b0:42:39:88:21:
93:ef:11:06:69:a3:f0:35:6f:1d:bd:78:fe:a3:ab:04:5d:d2:
a7:1f:bf:5e:57:41:fd:19:3d:73:a6:db:c1:9b:f6:05:e5:b0:
9e:31:1e:5a:5a:dc:e9:6a:0c:61:98:78:ce:59:27:77:66:b0:
b1:fa:ef:ec:68:53:c1:97:9e:55:ec:99:cc:74:64:9b:db:cc:
fe:e3:59:30:88:e5:89:7c:6b:a3:30:e4:bf:46:a8:78:c2:52:
8d:05:f4:6a:af:ce:32:25:08:8f:c9:d7:f2:b0:c3:da:a3:d3:
ce:f8:e7:22:51:a8:46:a4:a8:d9:86:95:2d:2e:9d:fb:a3:07:
14:60:b6:b0:b9:5b:cb:2b:70:f2:8d:1f:d5:d0:42:21:c5:33:
1c:8d:02:18:d0:b1:f4:e5:ba:7c:4c:20:a5:b1:5d:8e:9a:d1:
f5:87:1b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:41 2025 by rpki-client