
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: kDXsT7OIE4dKI8FnQAmx4JN6aRZt1MINPbgXgRqo7tE=
Subject key identifier: 55:33:D9:18:C2:E2:AD:B6:04:C0:4D:81:BC:1A:B7:4E:41:D8:88:65
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 0199FA6A95A1BE36B369419703F8922E76CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 03:01:53 +0000
Manifest this update: Sun 19 Oct 2025 03:01:53 +0000
Manifest next update: Mon 20 Oct 2025 03:01:53 +0000
Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: GF3mFlYqrETJyZRPT/yMBE2HRK+8fxY5PuCUi4MfOow=)
2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:95:a1:be:36:b3:69:41:97:03:f8:92:2e:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Oct 19 03:01:53 2025 GMT
Not After : Oct 20 03:01:53 2025 GMT
Subject: CN=5533d918c2e2adb604c04d81bc1ab74e41d88865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:3d:8c:e3:36:9b:1c:6a:fc:73:70:66:01:
1a:d6:9b:ab:6e:1c:b4:a8:71:37:b6:6d:92:b8:47:
61:2b:3e:81:58:63:ed:dc:89:54:92:ed:75:d5:42:
d5:c1:1f:6f:23:2e:8c:b7:e4:05:2c:f8:83:0c:59:
0a:e6:23:b9:cc:ad:75:49:81:d0:2e:d4:85:60:60:
4c:f5:8a:5b:8b:01:9f:53:19:02:a5:42:55:7b:f7:
1c:4c:dd:5e:d3:2b:2b:55:6d:ff:a4:14:09:7e:5e:
91:4f:ea:fd:57:24:b4:67:6f:9c:82:82:3d:d8:dd:
cc:fc:f3:93:24:6a:12:c5:13:05:af:a9:ea:bd:b7:
fc:8b:6e:67:cd:fc:17:f4:ea:52:ad:3d:52:1b:37:
eb:78:76:61:bc:d4:ed:a6:12:72:29:bb:56:dc:30:
8c:bb:1f:bf:5d:d4:3c:a6:03:a5:e7:62:d0:b0:36:
79:b4:fe:a0:fc:fe:cc:37:95:b3:a7:7d:e6:c7:d3:
bc:b9:55:ee:b0:1d:9c:38:32:a5:59:a8:bd:29:80:
3a:d6:76:0c:d4:59:18:75:0d:d0:46:3c:e2:c2:98:
a0:b6:bf:d3:dc:aa:d9:f0:61:26:3c:9c:e7:72:98:
69:7f:a2:37:5e:34:58:22:39:6e:d4:eb:45:b2:ef:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:D9:18:C2:E2:AD:B6:04:C0:4D:81:BC:1A:B7:4E:41:D8:88:65
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3a:58:bc:5d:c0:ca:0f:75:d0:1f:ff:6d:b6:3a:8c:ec:17:
32:51:46:44:e6:58:ef:82:2e:8d:ab:33:1a:4b:fc:9d:07:45:
cc:2d:0c:35:c3:e6:da:ec:01:47:5a:94:67:51:f1:1c:d4:93:
bd:7e:1f:3e:c8:18:0d:ab:70:6a:40:af:26:01:e9:a7:e7:bd:
ab:bc:b6:06:a5:4f:32:dc:79:97:28:6c:41:73:4b:d4:4f:19:
84:b7:bb:f4:c6:c5:92:1d:aa:8c:7f:a7:53:50:df:d0:d8:8d:
60:87:0a:f3:59:0f:94:9e:e2:9e:2c:50:bd:d9:f5:15:4d:7a:
c5:56:08:dc:cf:c3:69:96:33:40:c1:fc:1e:b9:4d:4a:f2:eb:
17:47:57:44:8c:86:4c:81:03:e6:76:78:d5:3a:c3:d1:2a:d2:
78:e3:5e:f2:63:49:99:5f:52:11:1b:d7:1e:f2:72:79:12:3b:
df:f3:3a:f9:0e:b0:98:6e:f1:5b:e6:4a:13:6b:c7:ed:fa:ad:
bd:2d:29:4e:4d:d0:93:d4:30:8a:66:3c:8f:39:e4:a7:b5:de:
07:27:97:4a:96:ff:81:de:7f:71:96:5b:49:ca:11:b1:c1:5d:
ab:b5:01:c6:cf:7e:71:f1:e1:ed:74:4a:9b:11:a1:b9:b0:2b:
e6:40:34:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:06 2025 by rpki-client