Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: vmT+1durtvwQi52CmSXn7JNGrhDsuFpdjhbQCWACQrU=
Subject key identifier: C4:76:31:77:FA:CD:D4:4F:39:99:AF:0A:59:60:FA:6B:28:EB:33:43
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 0199FC21C311B07076CF3E286F2E1FB4F674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 0EBB
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: hpETMdLRbIHqVJ8/wD8+VqR4m2jl84Wy5qDC6QM000k=)
2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c3:11:b0:70:76:cf:3e:28:6f:2e:1f:b4:f6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=c4763177facdd44f3999af0a5960fa6b28eb3343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:af:0f:2d:5a:c2:52:38:a2:67:6a:14:a3:
ea:a5:5d:0e:e8:6c:e9:70:c2:c8:8f:b7:df:7b:84:
91:b5:65:11:e4:ef:fa:9d:a7:4f:93:d8:cc:fa:fb:
a1:83:73:ee:0e:e0:01:81:1b:c2:f4:dc:c8:0a:53:
87:97:0a:a1:30:dc:79:22:25:2c:df:e6:c7:40:65:
6c:f7:33:60:de:d7:5c:19:67:f4:ba:73:80:f5:3b:
05:b9:8e:70:f6:2a:95:1d:11:52:f1:df:79:3c:b5:
d1:84:6b:86:d7:18:cb:da:1a:9c:07:62:d5:37:83:
a8:97:e0:6a:63:cb:8e:b4:38:01:0b:24:52:66:bb:
f8:e6:7b:ad:eb:e0:8b:5d:e7:a6:c0:4d:3a:80:d5:
52:cd:eb:86:70:36:96:f0:47:2b:81:46:81:ee:68:
ee:bd:12:8f:f3:d1:13:62:49:f5:e5:1b:84:e8:f9:
01:e9:04:83:e8:fd:51:8f:2d:3d:03:56:3f:be:23:
4e:c7:f2:24:26:c6:25:a9:6f:3d:08:1b:eb:37:a6:
39:d2:86:73:b4:41:83:0f:2c:db:b5:0e:76:ce:c0:
91:f5:c0:d0:47:e2:c7:e5:50:7e:db:62:97:2e:72:
51:16:eb:61:90:6e:8b:0c:23:24:88:a2:60:f3:bd:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:76:31:77:FA:CD:D4:4F:39:99:AF:0A:59:60:FA:6B:28:EB:33:43
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:56:00:db:8c:93:f3:cc:7c:f3:f3:df:69:cd:11:f2:35:7a:
bb:11:e5:37:29:d8:11:2d:41:a9:3a:e7:f1:08:d1:ab:23:a2:
d8:16:94:7d:53:fb:14:a7:bb:a0:27:f4:fe:f4:5e:a4:73:30:
b2:a9:dc:73:52:1f:36:4e:3a:9b:da:b7:88:09:0c:fd:ae:21:
92:e7:44:36:44:47:f0:06:be:99:88:04:e1:7e:64:51:11:ad:
a4:43:1d:14:9a:7a:dc:eb:35:d6:1b:2c:ca:38:09:fb:96:6a:
08:53:4d:81:23:95:ba:91:ac:46:2d:04:fe:4e:96:65:eb:5f:
76:50:e9:dd:f2:1b:9f:1a:19:91:b1:8a:53:0f:49:2c:4d:09:
a7:c0:47:08:0d:cc:f8:0e:36:8f:c3:b0:04:9b:b4:e6:83:7e:
17:12:13:66:33:4b:69:99:0c:54:4e:d0:f5:5a:f3:2d:88:32:
a3:04:cc:1e:bc:91:87:3e:f0:de:89:95:07:fa:d4:23:a9:97:
69:5b:ba:1f:ae:6a:d3:53:65:37:f0:bd:50:33:12:7a:fb:1e:
cc:ac:33:b9:08:28:a2:c8:b5:de:a5:3e:20:41:2d:3b:d7:f5:
76:16:5f:54:f0:be:d2:55:23:de:60:5b:c5:9f:0b:92:ca:2e:
d0:cf:82:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:00 2025 by rpki-client