Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: fvJcNWScY+cbZr/TLMqGEQqp5oJoAFZYCR+JA4aXwFg=
Subject key identifier: 78:A4:DB:1D:E7:DD:FC:14:98:1D:CF:78:A8:57:1C:D7:E1:47:C1:14
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 0199FD343170D47724F44FD7650863F4036C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 1627
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: kMA46RsGt2HjKJLLDy5trsK3xkDJcdA2EITkY5Wqy4M=)
2: WodU5gDNw3cjAmLp67NGPeKWzm4.roa (hash: YXZKSjPXGmgzYL0wl21TgIMvnXm5A4XUDZj4O/e7fR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:31:70:d4:77:24:f4:4f:d7:65:08:63:f4:03:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=78a4db1de7ddfc14981dcf78a8571cd7e147c114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:17:ce:2f:86:46:f9:60:4f:70:3d:6c:df:
7c:7d:9e:b6:2d:b7:ce:dc:53:89:d3:24:db:3e:0e:
52:c7:74:f9:23:83:57:de:fa:c2:6c:3b:e6:57:97:
b0:13:a6:1a:50:50:e0:aa:f2:1f:76:d3:bc:5a:e7:
48:32:e0:cf:2d:a6:01:ad:30:f8:6d:d7:21:d0:c1:
40:5f:12:dd:59:6e:ff:1d:9f:79:a5:08:4b:2b:5d:
55:2f:b7:02:3b:48:8d:a4:04:dc:14:11:2e:33:66:
88:49:ef:72:32:68:1b:0a:74:cd:81:bf:d8:55:b9:
e9:78:98:bf:81:96:80:bf:c7:0a:df:e6:9a:9c:46:
80:eb:b5:e4:07:2a:4f:3a:98:80:44:87:2f:ab:14:
ec:14:7d:63:5d:df:1b:4e:db:e8:26:88:3c:32:ed:
42:b4:87:3a:9d:b1:78:4a:fd:09:d4:bb:79:3b:72:
11:f4:9d:0f:e4:fb:d5:2f:80:66:9e:cf:1d:29:7e:
0b:ee:53:77:29:f7:53:7b:5d:e8:03:03:27:6d:26:
37:1d:2c:9a:ea:b6:ee:85:8f:1d:d8:a4:18:04:19:
33:fd:ed:0a:b6:f8:d3:f4:7d:d7:7c:ef:5e:36:91:
db:71:d5:cb:41:34:59:55:0f:93:67:c8:4b:de:77:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A4:DB:1D:E7:DD:FC:14:98:1D:CF:78:A8:57:1C:D7:E1:47:C1:14
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:22:57:e7:1a:a0:27:6e:b1:94:95:6b:bc:8d:f0:e5:e6:2b:
aa:9e:79:83:62:6b:3d:30:ce:8c:fe:46:7e:7b:d0:31:84:e3:
90:f6:4d:b1:93:38:49:1e:db:2c:3d:6f:d7:47:f7:81:49:40:
9c:e1:39:17:2c:89:f4:cb:58:53:5f:b1:11:af:d9:19:b8:1c:
3d:ad:dd:54:01:4e:42:15:43:64:1e:3b:d2:9a:e1:f8:ba:4f:
ee:fc:b7:a6:f0:aa:3c:45:85:9a:02:e5:08:13:ef:d2:20:04:
7b:c9:ea:34:8b:9b:6d:e8:82:78:9f:46:af:89:96:ab:b0:84:
2f:ac:47:24:62:b2:91:78:ee:ce:da:43:a6:d1:f3:a8:7d:95:
e3:80:cc:ad:b0:94:cd:67:22:3a:a4:5c:1e:d3:32:56:8a:18:
63:16:4e:11:d6:07:fd:20:72:9d:72:de:3a:0c:58:13:13:80:
f9:7b:e7:f9:b2:6f:3e:6d:cc:e6:d8:9b:8b:dd:ca:00:e4:d0:
2d:79:97:a0:60:a9:63:5d:ca:bd:c4:8a:3b:f2:0c:c4:cd:38:
27:80:fb:13:39:eb:76:d8:fb:13:82:b5:45:49:97:61:73:2d:
ab:8d:e6:ce:d2:ec:33:01:0e:70:71:67:47:e5:7f:f7:37:b1:
10:63:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:32 2025 by rpki-client