Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: CxWX7uBfD9i0bFNUc8EoM/TBhzxSDNIFB+wcbq5UXI8=
Subject key identifier: D1:E8:D3:14:29:CF:DC:85:09:7E:27:59:53:8D:D7:32:01:A3:FF:C4
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 0196BE934B931CA4E6894D8E6A8EA8F36C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0C1C
Signing time: Sun 11 May 2025 09:00:46 +0000
Manifest this update: Sun 11 May 2025 09:00:46 +0000
Manifest next update: Mon 12 May 2025 09:00:46 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: NjlJeXLy1PO9NG/MYW6TQKrpXjsyMef/Tx20pYBBta8=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:4b:93:1c:a4:e6:89:4d:8e:6a:8e:a8:f3:6c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: May 11 09:00:46 2025 GMT
Not After : May 12 09:00:46 2025 GMT
Subject: CN=d1e8d31429cfdc85097e2759538dd73201a3ffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:6d:df:f2:0f:50:e0:f0:73:0e:18:6e:e3:
8d:60:a7:b5:4b:13:05:ae:58:a2:e0:d4:bd:76:3f:
ee:1a:fa:26:6a:f7:82:f5:da:5f:51:4b:1d:cb:c9:
16:43:02:b3:77:e5:ee:0b:53:e7:5e:44:b9:07:2c:
5f:e8:7d:81:da:82:c4:1b:d1:05:f3:b0:9a:ca:e0:
f5:ff:95:e7:d7:07:76:2e:46:51:a1:5b:61:f3:ca:
bf:41:90:6f:16:bf:e7:ba:a4:4d:54:26:6a:19:19:
13:c2:b0:5e:85:6b:a8:3d:5d:17:0b:91:95:05:6f:
95:75:0e:59:a3:e6:49:af:9e:5b:7b:70:d0:d5:15:
17:57:aa:cb:e4:ac:f0:36:88:4b:d7:6f:c5:6a:16:
1c:0b:55:d5:de:69:e6:a4:05:34:e7:55:d3:55:48:
3a:0a:a8:34:28:24:1d:90:2e:e3:c5:fd:bf:e9:24:
94:11:29:eb:b5:1f:1e:23:7a:2a:e3:86:f1:2d:72:
76:d7:9c:b7:30:f3:b3:ee:93:a8:6b:aa:54:dc:6f:
d0:5a:49:51:a7:86:fe:dd:66:04:a1:c4:57:ff:7f:
b2:51:41:f1:4f:ff:b9:9c:89:45:93:71:06:76:77:
4e:60:20:8c:a3:7f:c8:1b:bc:4f:15:92:c3:5c:65:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E8:D3:14:29:CF:DC:85:09:7E:27:59:53:8D:D7:32:01:A3:FF:C4
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5a:35:0f:b2:93:ef:08:5d:ab:c9:93:2d:0a:8b:87:89:88:
51:1a:51:f8:a8:cf:d5:02:2b:b1:2c:87:68:69:79:f4:8d:e1:
ef:84:40:d3:cc:4a:72:9d:d1:bc:9b:01:69:96:cb:c3:a9:7b:
bc:98:0a:e3:05:cb:a6:64:a0:42:0d:55:37:5e:16:d6:1e:e2:
2c:15:c3:ba:20:76:ae:a2:2c:cb:21:fc:35:91:c9:71:ac:85:
b1:5b:f0:cc:04:eb:d2:a8:05:79:61:17:8e:18:54:16:a9:49:
f9:4a:b4:e4:4d:d9:dd:52:73:14:c3:f9:8e:65:a8:d4:8a:56:
23:ca:a9:63:87:fc:b8:7f:e7:48:1e:e7:80:9f:90:47:c8:dc:
f4:b9:aa:22:22:91:47:02:24:09:03:a5:f2:23:d3:61:0e:77:
ba:d6:cf:0b:3d:b8:70:4d:cc:b9:1b:b7:02:1b:3d:b4:ba:3f:
b6:14:4f:f4:34:3f:e5:46:21:5c:d9:ab:7a:cd:cc:1a:97:7a:
a8:91:5c:ed:33:14:eb:1c:18:36:53:4a:51:c6:fe:b7:a8:7d:
e7:04:0a:72:4c:73:a7:a3:4c:9c:58:ba:ff:e1:e8:57:20:8a:
29:11:7b:47:0c:a4:0c:c7:f4:21:27:fe:9a:43:9c:59:c8:f3:
16:e9:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:13:17 2025 by rpki-client