Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
File: DycDq41ZdUqyeopRaFRZG_sPLbc.mft (raw, json)
Hash identifier: RrgaPUUYSB1Ikqs1zp0CPBwt74tqxOmmoxyefzxJ3ls=
Subject key identifier: 8F:A9:CF:0E:D8:50:23:1B:E3:8C:48:C3:1E:EC:79:8E:01:74:F2:14
Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
Certificate issuer: /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Certificate serial: 0199FC59044D177107AF6DC1439AF6A437EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
Manifest number: F2
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: DycDq41ZdUqyeopRaFRZG_sPLbc.crl (hash: f+I8AOC6vWUDGU3YjX68rarvqSyPjUe0wymg5+V8iaQ=)
2: EvvE5cYylw_MjstUmUy-jk4YLrA.roa (hash: gBE8rDGiUuVhCkWL45jKVIjPxTgyeFG4wEdX18IeEVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:04:4d:17:71:07:af:6d:c1:43:9a:f6:a4:37:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=8fa9cf0ed850231be38c48c31eec798e0174f214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:50:c8:5e:28:9e:df:4d:7e:b4:d0:44:50:
2d:2d:02:84:91:56:9d:db:97:94:14:3e:73:91:58:
ab:b6:81:7b:d7:9c:83:d3:c6:7d:ed:53:4d:ed:e0:
b1:e5:eb:cf:1b:f5:d0:dd:05:9f:96:4b:cf:56:bd:
df:81:d4:2d:fe:d6:99:74:bd:b2:18:19:23:7e:fa:
3d:74:1c:d0:2d:c1:6b:24:c5:96:88:fd:83:39:29:
34:6e:39:61:09:0b:62:56:59:d7:1f:79:79:c7:72:
bf:03:e4:d8:79:87:d7:bf:00:04:a5:01:2f:a8:45:
b9:0a:e4:51:ef:27:59:d8:5d:8b:40:f1:c7:d1:77:
3b:b5:fe:7f:c6:cb:c7:36:65:41:f7:b1:f0:ab:70:
1d:c0:31:eb:bf:db:75:0c:5e:a4:7a:fc:08:6c:8e:
78:d4:bb:ce:8a:27:11:75:70:2e:ed:d6:e0:17:08:
d3:32:05:3a:e3:23:44:c7:30:6e:94:dd:5f:b7:a3:
04:a7:1e:2c:95:d5:a3:47:b0:96:42:c6:94:f4:fa:
85:74:9b:75:f0:a7:50:dd:8c:1b:d3:fb:18:ff:4b:
44:45:13:02:fb:59:8d:3d:7e:d9:6f:21:f7:26:e7:
84:33:ec:be:a2:c2:e2:e7:1b:21:75:e6:d6:2b:fe:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:CF:0E:D8:50:23:1B:E3:8C:48:C3:1E:EC:79:8E:01:74:F2:14
X509v3 Authority Key Identifier:
keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3b:bd:c5:a8:e6:28:c8:6f:7e:4c:46:57:a8:47:d8:f4:c7:
30:89:76:b4:35:2b:c3:8c:30:5f:2b:5a:de:5c:37:71:ff:ae:
d0:5e:d7:da:aa:7e:4c:d6:d2:98:90:b7:11:77:cb:5c:26:f0:
c9:25:3b:96:56:ae:40:2e:31:87:70:04:42:34:4a:cc:09:f3:
06:a0:b4:3e:23:a3:0f:e3:65:eb:7a:35:0d:8e:0b:c4:ec:67:
6f:27:b2:d9:57:f3:ee:44:ca:4f:47:df:47:33:0b:33:6a:29:
64:7c:a7:73:93:d3:4d:ac:8a:64:90:25:77:65:69:bf:4b:75:
d0:c4:af:95:11:db:79:96:1e:1e:98:11:97:c4:0a:f2:1a:5f:
1c:2f:3e:46:a1:e5:da:0c:fd:70:f2:fd:a0:fe:52:84:5e:04:
af:ce:d3:37:ab:6d:ef:20:44:ae:18:0a:97:14:1d:e7:94:ca:
c5:0f:75:56:74:16:72:bf:68:4c:f9:63:18:c5:29:aa:62:02:
6f:fb:7a:a6:97:85:fd:8d:68:54:72:77:f8:1b:24:09:76:f9:
13:9a:f9:fa:dd:93:f7:3a:23:75:ee:d7:ec:1d:af:db:70:a4:
db:ed:47:98:c0:2f:af:c7:43:0e:06:ed:32:4e:95:0f:c9:ed:
d4:1a:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:18 2025 by rpki-client