Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: GcoBb+tsJ2Vs4RHWC2mIWnGwFHa0N0um77nUyhWAhZo=
Subject key identifier: 03:E3:6A:B0:F0:4F:04:1E:A2:60:63:C7:81:13:92:85:75:5F:6F:25
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 0199FC8FB908241BEB96EF4997A5BA90171A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0760
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: z2qQ+CVq9mlH2ZvdNunGMiqlcRcTWLUXkO8MKlsJqQs=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b9:08:24:1b:eb:96:ef:49:97:a5:ba:90:17:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=03e36ab0f04f041ea26063c781139285755f6f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:65:bd:d2:04:c3:98:b8:c8:95:89:16:57:
57:3f:5f:a5:bc:55:3d:9b:f4:62:42:83:64:87:0b:
d4:0d:00:e0:1f:ea:a0:db:3b:82:8d:a3:64:65:9a:
d3:7b:10:56:3b:c9:ec:43:6e:e0:fc:da:16:cf:2f:
27:66:5d:16:53:df:95:ed:18:01:f5:c5:63:a4:f5:
b1:22:84:87:14:2f:d8:37:0a:34:18:8a:dc:ba:45:
76:d3:ac:83:98:0c:c5:24:b3:54:06:40:ba:a7:96:
e2:41:1f:59:3d:7e:67:56:f3:c2:53:51:77:14:37:
b3:77:99:eb:17:f7:c4:8f:a5:fb:36:c4:3b:0f:e4:
35:73:d7:2f:2c:50:8d:5f:12:ec:bc:2d:a3:62:b5:
f2:d9:aa:f1:88:bc:6c:23:63:02:6d:25:27:cb:66:
6f:5a:c8:01:78:e5:9c:7a:86:0d:3e:fd:07:3a:62:
7b:a0:18:6d:a7:3f:29:b0:ee:98:68:03:64:2a:32:
10:db:c8:ed:99:09:8c:66:00:13:93:c8:6e:fa:81:
79:28:a7:7d:4d:f2:11:11:e6:82:91:ee:fc:66:f0:
09:1e:51:d1:9f:1b:b7:c5:fd:8c:75:f8:d3:29:76:
f9:52:49:1a:ad:33:63:7d:44:67:66:0b:87:e0:90:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:6A:B0:F0:4F:04:1E:A2:60:63:C7:81:13:92:85:75:5F:6F:25
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:f0:51:63:86:f3:b0:44:39:ae:c4:5d:5a:93:10:c9:30:
8b:69:cf:46:c2:19:6d:22:34:c8:44:3f:55:d9:98:f1:62:3e:
98:30:68:49:f2:aa:53:3b:6f:90:1c:e1:0b:96:74:1f:ba:c7:
c1:89:5d:a7:18:d9:5a:99:eb:de:ff:a3:95:f3:76:28:bb:da:
92:24:e2:71:b7:f2:08:7d:80:53:96:c1:75:a1:b5:55:be:f1:
90:b2:87:d5:dd:c4:35:05:5e:ac:0a:e1:3c:8b:59:38:81:e6:
a3:c5:31:18:5e:a0:ec:31:23:5c:35:a9:ef:f4:57:40:76:1f:
e0:7c:99:71:41:bb:8e:82:aa:c1:c5:5d:07:4d:c9:78:4e:e4:
76:b0:2b:7f:0e:fb:e2:0b:64:8c:36:59:6b:c8:a1:27:f4:6b:
53:56:82:fa:69:49:89:6f:9a:f8:6e:06:c6:6f:d9:93:fb:55:
08:31:0b:6e:c7:71:d4:1b:ca:0d:1f:96:97:10:69:9c:e0:72:
e2:49:1c:21:f5:cc:83:96:77:c2:44:85:e8:22:f2:c8:a0:6b:
f6:be:ca:83:f9:11:52:06:1a:72:1c:dd:f4:d9:f6:c8:fe:dd:
b2:2f:96:8c:04:85:0f:08:41:57:b7:ab:e7:25:76:71:0b:50:
ea:3c:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:34 2025 by rpki-client