Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: NAIr2S4KFkrGi/4JOFVr3YeTXqJhMwZxzWSwRCW2Bz0=
Subject key identifier: 04:A7:F0:EB:F1:18:6D:0D:5D:3D:6E:E7:73:FE:BE:89:AC:1B:90:8E
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 0199FB7CBDF570273CE36B1957A202F6A185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 084C
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: 3ybDPKiA0wDv8fgYqqJjrGlrgZo.roa (hash: Lzgk9VM3/0+YuHabQnt8dL/9QNx4stqWd1uOafztoy0=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: H5XkLNyqUW0nXgL81FqiiSqgXA1cEYNA9rZJsG/1WgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bd:f5:70:27:3c:e3:6b:19:57:a2:02:f6:a1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=04a7f0ebf1186d0d5d3d6ee773febe89ac1b908e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8d:07:85:8a:ff:f0:ff:26:06:10:29:7b:b6:
2c:8b:e4:b5:c5:d3:2d:87:d9:21:98:7e:98:c6:96:
83:e1:56:f0:11:f5:3d:ec:86:97:20:39:ad:9f:66:
80:4d:7d:e4:ab:b7:cc:61:87:f9:bd:3e:03:6c:fe:
fd:9a:f8:03:74:b8:5a:e6:7c:d9:3d:8c:30:fa:d5:
0c:a2:92:f0:63:38:94:ee:57:5a:6c:2e:46:97:05:
dd:c8:5a:00:4e:54:64:8f:a4:5f:35:46:99:1c:ef:
c3:5d:b1:a0:bd:ce:68:0c:43:50:b9:b4:b4:8c:9e:
3e:ca:3f:08:95:ed:20:ab:e0:fe:6b:92:85:4f:39:
f7:d0:94:6c:ef:d3:2b:a5:61:75:20:ab:56:c8:7d:
72:af:34:dc:ab:c5:2c:ea:62:5a:68:49:d7:1b:1e:
ea:2a:1a:d5:98:fd:48:5d:3c:84:d0:4e:e5:e5:13:
5a:38:6c:e5:de:de:ee:af:a2:09:7f:f3:56:62:cf:
77:9a:7a:7e:21:78:15:53:f6:4c:f5:fb:51:4f:f1:
01:c1:eb:36:04:91:3e:b2:bd:47:97:58:0a:e9:3c:
b3:77:64:90:9f:df:79:0f:83:bb:05:d9:40:e2:f9:
6e:04:1d:65:ae:ea:82:cd:22:7a:f4:61:ba:4a:97:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:F0:EB:F1:18:6D:0D:5D:3D:6E:E7:73:FE:BE:89:AC:1B:90:8E
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:92:ab:d9:b8:07:df:2d:70:61:c2:94:4a:01:c6:1f:22:bc:
17:76:2a:72:9c:34:ba:fb:3b:0a:2a:5a:c9:aa:70:ff:ef:1e:
aa:15:a5:8d:7b:85:2f:3d:a5:1c:af:15:68:01:64:8c:e1:3e:
23:81:64:1a:69:f7:c6:a3:d7:cb:5c:38:9c:44:3a:31:ff:89:
78:b0:0a:26:5d:bb:7a:69:07:28:32:9e:55:85:13:81:4d:8b:
9a:2b:7a:f8:55:b3:1e:fe:b5:07:d2:a4:8d:07:6c:87:55:fb:
7c:ba:6f:12:a6:f4:a0:a3:bf:45:6f:91:44:f1:a3:b9:33:81:
83:cb:87:e6:36:14:28:72:5a:a3:35:10:22:fc:74:80:d4:c0:
0f:3e:9f:0b:30:79:8b:fa:f9:b1:3a:c4:1f:5b:21:7b:ab:c9:
92:61:41:a2:67:a2:5c:fd:40:89:66:5a:d5:31:cb:a3:ae:c2:
d4:ba:22:03:79:ab:db:a9:31:eb:b4:9a:4f:15:49:a6:f8:06:
ce:26:08:ef:55:8b:a9:5d:ba:64:77:62:f5:25:7a:0a:e3:9d:
7c:c5:b8:8e:b6:80:bc:9d:a5:1d:be:7e:cf:08:fa:80:67:49:
b2:90:8c:3e:7c:de:ad:d3:55:73:31:5d:67:48:3d:dc:f6:98:
d4:91:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:27 2025 by rpki-client