Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File: DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier: JXM32PeSvTuHxwbK1JcNyQnYbDTiMhraBqhnxuerjDA=
Subject key identifier: 35:FA:8D:84:C4:64:2C:3C:17:68:1D:BD:7C:83:47:1D:00:84:BA:AE
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer: /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial: 0199FB7CAC5E262BBC53ECB3566C79DA02A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number: 0EAB
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: LmL0bd/TLeZ7MLJxr7gePQXOOLzOvq6OXKVdMtkrEr0=)
2: _mseEGqhmjk5DbDhY65kEG9l3Do.roa (hash: 4EKC+djlGJVTHQZoZJyp3llh1Qpa/Gw18st2TTUCkbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ac:5e:26:2b:bc:53:ec:b3:56:6c:79:da:02:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=35fa8d84c4642c3c17681dbd7c83471d0084baae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:a5:14:ff:18:2a:90:65:7d:b4:9d:98:2a:
e2:64:4b:98:66:4b:2c:b8:16:f8:2e:23:ed:93:c8:
c3:e5:62:fd:3c:ce:24:fe:c3:16:b2:34:f6:c6:c3:
24:b5:5d:5d:53:c2:6b:fb:d0:77:97:90:59:8d:7c:
25:6c:b8:ef:21:fe:49:de:71:79:8e:23:df:be:3a:
05:6d:f2:ba:71:25:95:ee:29:d8:4e:d9:ea:d7:e3:
0c:57:ba:17:33:5a:b5:41:64:d9:82:75:3b:bc:0e:
a1:59:6f:e3:e5:f7:80:75:34:2e:50:08:cf:d5:28:
7f:74:1d:be:92:dd:fa:01:f4:d9:fd:19:49:01:6d:
00:6a:4c:7a:c3:04:cc:1c:1f:bf:b0:ef:89:9f:ae:
97:dd:7a:95:38:1b:a5:87:32:ad:15:27:fd:f5:11:
a4:67:44:1d:ae:ee:65:70:50:2f:41:71:9d:e9:e6:
47:e2:df:13:f7:4b:75:82:40:0d:af:d6:9e:5c:47:
c6:d4:4f:fd:4d:9e:41:04:1b:66:7d:b9:61:4e:79:
aa:d8:db:dc:61:6c:05:1c:c9:d1:5b:d9:21:81:c6:
4f:bf:e0:ca:6a:5a:fa:cc:eb:4a:d5:63:26:15:7e:
44:37:5b:15:79:0e:28:35:f5:e8:0f:fb:bc:32:d1:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FA:8D:84:C4:64:2C:3C:17:68:1D:BD:7C:83:47:1D:00:84:BA:AE
X509v3 Authority Key Identifier:
keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:39:cf:7d:b1:11:2c:4c:b9:4c:da:c7:94:3b:06:87:9b:22:
fb:e2:c5:48:b4:76:3c:d9:60:4e:9b:87:60:43:e8:c4:57:60:
c7:9d:9c:9a:06:b5:f1:2d:fb:3f:e8:3b:88:25:37:6f:61:c6:
4d:20:65:64:0a:b6:4a:56:66:de:0b:fb:8d:51:a0:78:aa:91:
3e:06:93:c7:17:df:ef:8a:b4:dd:ab:f8:6b:32:28:cb:73:7a:
03:04:fb:ab:a5:90:bd:6c:b2:b9:24:4c:a4:fc:96:5d:70:cd:
36:99:2c:c8:53:a0:b4:98:55:05:68:64:48:44:a7:ab:b8:77:
85:b7:96:6b:e7:d0:c5:9b:74:0b:be:82:e1:71:fe:0c:5c:70:
19:38:bb:22:2f:9e:7e:ed:3b:22:fd:b6:9c:4a:c0:ff:8a:07:
14:c0:9f:94:f0:a1:7a:98:2f:83:b5:62:87:d7:01:30:75:6d:
e7:f7:b1:8d:4a:24:83:39:6e:2d:b1:b0:45:9a:ca:35:27:a9:
0e:39:36:23:c5:eb:a6:0d:60:9a:a8:b5:be:d1:00:ac:71:ad:
7c:e5:47:b2:c1:80:10:39:c6:a0:bf:4f:e5:da:b7:0a:48:49:
41:fb:b2:97:d7:55:8c:d6:b9:98:22:f2:1e:15:1e:cc:5e:7c:
1c:0f:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:05 2025 by rpki-client