Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: 9W2+RmXXv0nyLSU3de4z3R2od8rYPQiv2NkTIxAexbc=
Subject key identifier: 58:E7:26:9E:0B:7F:55:6B:B3:B8:83:E0:BB:23:5E:4F:3B:20:21:61
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 0197CACC8F40B56DA6F749EB9E132EDA7FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 0E02
Signing time: Wed 02 Jul 2025 11:01:33 +0000
Manifest this update: Wed 02 Jul 2025 11:01:33 +0000
Manifest next update: Thu 03 Jul 2025 11:01:33 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: 98qvJfSN/c4ojFhQmaSeUkPODdPZ2AHejRNLLVxAgio=)
2: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (hash: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:8f:40:b5:6d:a6:f7:49:eb:9e:13:2e:da:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Jul 2 11:01:33 2025 GMT
Not After : Jul 3 11:01:33 2025 GMT
Subject: CN=58e7269e0b7f556bb3b883e0bb235e4f3b202161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:d8:dc:d6:fb:89:6e:27:44:30:78:98:c4:
16:fb:40:57:1f:f5:b0:af:e7:22:be:d2:0a:3e:aa:
84:17:a9:e3:98:32:1a:76:23:ab:64:98:34:91:93:
ae:f0:c3:4e:ef:d2:0d:84:3f:df:f2:29:2a:3a:b9:
a5:fd:45:19:8e:8a:45:c2:6a:8a:9d:a8:bf:13:f3:
59:25:11:ce:fd:d6:a8:89:b3:9e:35:ac:11:ce:81:
3a:36:ac:88:67:f3:20:f1:a0:b5:86:a0:df:3f:a9:
6a:de:51:62:08:d7:2b:ab:97:12:2a:9b:9f:d3:0d:
2c:9d:a8:a8:a9:55:35:6f:3f:c4:d4:50:51:87:3f:
bf:9f:aa:1a:9e:da:5a:42:73:2b:28:3d:af:fe:42:
26:65:5a:da:d0:c5:9c:43:39:02:bf:13:0b:5d:62:
04:90:db:08:0d:6d:9b:b9:55:0d:d8:ac:ba:00:3c:
ee:d7:c4:8a:1d:0d:e9:f3:46:04:8b:20:48:1b:cd:
61:c6:62:7d:d9:53:9b:e8:5b:27:98:db:81:2e:de:
cd:d6:b0:bc:c0:d9:33:1e:35:13:96:3d:48:f6:65:
82:34:0e:a2:57:89:38:f7:fc:1b:c9:06:8f:51:93:
fb:c8:93:84:b8:38:20:53:fa:90:f4:3c:33:ba:76:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:26:9E:0B:7F:55:6B:B3:B8:83:E0:BB:23:5E:4F:3B:20:21:61
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0c:2b:b0:8e:4b:e6:4c:75:12:28:4a:27:c5:9a:1f:1c:0a:
af:e9:7c:f4:4f:e0:65:74:ec:39:6f:7b:f5:c3:bd:37:35:8e:
e0:7f:61:05:9e:ba:06:45:51:8e:b9:6a:45:0d:89:92:64:8e:
67:0f:dd:bc:44:83:66:ee:da:44:9f:36:d2:d0:ce:8f:7b:90:
1c:fd:d7:37:bf:1e:d9:5e:d3:74:26:cc:7f:b5:ed:69:78:c0:
c6:d6:d5:d3:ed:73:e5:84:cd:cd:b1:6b:4c:f2:a4:6a:9a:0c:
4a:9c:88:ee:4d:bd:ef:9a:6e:f4:aa:19:68:b2:3f:a2:62:7b:
64:38:e5:9b:74:9d:0d:5a:95:74:bf:f4:6c:15:2c:4e:a9:aa:
a4:14:e3:d4:65:bf:da:63:a1:22:33:69:3b:02:4f:97:4f:d0:
9b:4c:78:71:f1:c6:ed:11:18:9f:b6:d1:5f:bf:a2:e9:f5:dd:
97:41:81:e3:34:1e:ec:4e:61:a5:16:da:0d:31:42:62:62:d1:
68:ad:3e:a2:2e:43:c2:4f:2a:94:8e:f5:64:48:14:99:33:c7:
c0:82:3e:9c:4c:24:2a:75:71:50:31:5e:5d:8e:78:5f:f6:64:
e7:15:ff:bb:63:f9:05:1a:61:cf:ee:bd:13:c1:57:2c:8f:5c:
37:19:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:36:06 2025 by rpki-client