Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: Oe7beRPx+ddZEaEed9ScT4JSEnDkLv7Gh+ho38K4zFE=
Subject key identifier: DA:61:9A:D6:13:8E:24:86:24:85:A0:DC:EC:CD:56:2B:91:D1:07:2D
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 0196BE25299D28E9ADBB8F2299720914F74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 07:00:28 +0000
Manifest this update: Sun 11 May 2025 07:00:28 +0000
Manifest next update: Mon 12 May 2025 07:00:28 +0000
Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=)
3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: 5CFMKT09M7WQPtyhRQ4bk8it/0FEce7gQ1rewMZs7Bo=)
4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=)
5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:29:9d:28:e9:ad:bb:8f:22:99:72:09:14:f7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: May 11 07:00:28 2025 GMT
Not After : May 12 07:00:28 2025 GMT
Subject: CN=da619ad6138e24862485a0dceccd562b91d1072d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:08:50:2d:b8:5c:bf:f3:6f:52:a7:09:ae:
d0:55:d8:75:bb:e4:e6:c5:fc:65:ac:00:5c:b5:64:
26:0e:31:4c:58:35:b6:d7:4e:32:1f:0c:9b:f0:6b:
97:30:b2:3c:3e:91:9d:11:49:eb:50:53:cd:f8:ad:
f1:38:54:66:22:ac:ed:6f:c3:37:bf:ea:a7:b7:6c:
77:eb:d6:ae:48:5d:8b:84:d8:22:9a:01:94:3a:2b:
c0:b5:fa:d3:bf:a1:3c:ab:b6:d8:b1:31:b0:dd:9b:
26:16:f7:6a:ed:67:74:aa:1b:25:6a:8d:06:56:05:
47:ea:f4:96:7d:f9:24:84:83:b1:26:55:8f:40:00:
4f:70:28:d0:75:db:58:50:5d:2e:ed:6c:01:66:19:
38:2d:ed:96:85:dd:aa:0c:9c:f0:8d:69:7e:51:65:
c9:93:21:6d:e9:6a:ac:23:f1:f0:2f:b5:6f:f7:4c:
7c:cb:94:c0:ba:e5:b2:79:14:f2:06:80:ea:0a:ec:
93:c7:fb:5b:22:bf:8f:2c:a4:59:bc:16:80:62:ec:
89:69:5f:fd:8e:0b:d3:e0:73:07:0c:08:fa:f3:46:
a3:1b:f1:c7:37:54:0a:3f:e2:07:b6:c5:1c:84:c0:
88:d7:f7:72:cd:29:39:c7:88:0c:be:42:68:09:f4:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:61:9A:D6:13:8E:24:86:24:85:A0:DC:EC:CD:56:2B:91:D1:07:2D
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:40:ab:e3:94:91:7d:4a:93:3e:d0:87:26:26:23:16:4d:f7:
1a:a1:03:cf:59:69:17:77:da:0b:e0:4a:22:9e:cf:0a:bc:5d:
71:6f:8c:2e:32:93:6c:0e:52:0d:24:8c:57:d8:3c:1e:72:e4:
2b:40:39:f0:27:af:df:94:bd:27:10:e1:e2:d1:dc:0a:cf:86:
88:1a:90:82:c0:60:df:60:5e:9b:20:55:b0:83:17:51:77:72:
b7:ff:a0:89:f1:9e:e7:d3:ec:ce:c1:b8:92:1b:06:88:ba:b2:
39:44:17:26:0f:60:fd:09:ab:f7:dc:c4:da:91:84:8f:11:1f:
81:ee:23:7f:42:7d:3a:c5:4f:2f:1a:c1:97:cc:e6:bb:98:42:
bc:61:a5:5e:b6:c6:6c:41:3b:93:e5:0b:78:b9:89:1a:58:e4:
ed:01:1d:93:84:aa:e7:7b:5b:e8:19:c2:e3:71:64:7f:cc:d3:
78:9a:58:f8:58:87:10:07:10:14:92:8b:2a:63:cc:62:79:61:
90:91:02:ea:40:6d:56:7b:1c:39:a4:a2:bf:9d:43:dd:e5:90:
3f:3d:a4:36:8b:0a:c3:ce:0a:1d:d1:bc:d6:d6:ee:ee:a2:f0:
27:de:18:49:5c:e7:a9:b8:04:bb:4a:e2:13:2a:90:5c:2d:f0:
a9:06:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:34:12 2025 by rpki-client