Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: 9QuamY9TXgzOn3GtKF9jrq6D7N1ftOSU37fxbTGCwyc=
Subject key identifier: 41:13:23:A3:80:72:E9:8F:55:D2:92:C6:07:7A:7D:76:9F:C1:13:1F
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 0199FD342DE1FE6355FB181413D556C9FDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0A3F
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: mJN7319v7He/zCng2uKRZBo/cScTNBig4yBtZCY+Ze4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2d:e1:fe:63:55:fb:18:14:13:d5:56:c9:fd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=411323a38072e98f55d292c6077a7d769fc1131f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:4e:0b:56:f2:1b:2f:c4:2f:f4:5d:50:c2:
8d:20:31:50:c6:29:75:0e:b7:67:39:a0:4a:a2:50:
f0:0f:9d:a8:6e:b9:66:64:66:c4:1b:5a:dc:a1:1c:
fe:09:46:aa:ce:48:44:93:ed:cc:36:eb:08:a1:92:
6a:87:6c:cf:de:a1:20:30:3f:49:d5:34:37:73:d0:
1c:6f:c7:ad:5b:0f:f0:75:74:a8:78:90:33:00:df:
42:d0:92:0d:e0:bb:8b:92:8c:d4:45:79:59:42:74:
d7:9c:99:84:46:2c:5b:75:7c:60:3c:a2:0c:f5:8e:
94:e9:45:b9:3e:8b:73:e8:2c:57:c9:bd:97:12:3c:
41:f0:f8:5e:45:3b:01:e2:56:41:2a:0b:33:9b:4a:
19:7e:33:78:5a:f6:75:fe:b1:6f:f7:27:1d:33:03:
6a:48:03:c8:75:c7:07:d4:d1:2a:2b:e9:7c:be:5b:
88:f9:51:65:6a:c4:c9:c5:0b:c5:e8:16:48:bb:93:
db:d1:5e:09:8f:d5:a2:2c:6a:a8:df:0f:04:5e:6a:
76:7c:47:c5:f7:62:a1:8b:b7:d9:33:7a:3d:13:89:
ac:31:6b:ae:f2:94:1e:30:45:7b:04:ba:64:e8:7f:
7d:a1:a6:30:58:07:3e:47:97:af:03:a3:3a:d6:31:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:23:A3:80:72:E9:8F:55:D2:92:C6:07:7A:7D:76:9F:C1:13:1F
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:76:ec:f6:33:00:81:56:eb:6f:36:94:4a:44:ce:49:07:6b:
fb:82:ec:48:fb:a9:22:e7:6a:83:23:df:aa:ec:e7:9c:c7:83:
f7:d6:e4:49:8d:b4:ef:b3:68:f0:1b:bd:a1:38:6b:b7:e0:bc:
b9:2c:b0:d8:37:f2:0b:54:ca:e4:ca:24:7a:a9:e7:2d:ce:48:
89:63:15:eb:e0:60:0d:9b:98:0e:b5:d1:e2:8a:2d:48:20:f0:
6e:65:db:14:c6:b5:84:28:5f:6c:d4:ae:2a:ca:c0:86:8d:ce:
ff:b9:ac:37:13:be:b8:dc:6b:52:56:58:b0:87:49:28:5b:75:
38:66:61:d3:b6:fd:d6:cc:0a:c7:35:1f:94:f1:8e:11:a9:31:
a6:65:2d:aa:3f:be:ef:7c:fa:bc:be:c9:6b:94:8f:9c:83:a4:
d2:f5:c0:68:d6:a8:15:6b:20:7d:35:93:15:5a:3d:00:61:5c:
83:ea:41:6a:c7:a6:21:c6:38:53:a5:f9:ac:36:18:2c:ab:df:
ab:2e:c0:a6:80:ab:2f:26:70:c0:7b:89:c8:58:15:49:5f:0d:
21:2a:01:be:e5:f9:15:28:bd:54:65:fd:2b:7c:c3:11:0c:0a:
20:87:fd:99:64:24:cf:c1:36:e0:83:cf:03:f2:f3:53:ff:25:
a8:60:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:17 2025 by rpki-client