Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: Rhom1h1qMhGHB/Y1XhoEQ5c/qbEEoSzc2Src2YaWz0k=
Subject key identifier: 67:CA:88:E2:6B:58:4C:7B:8A:D4:5E:6D:8E:8B:EC:EC:87:AD:AC:6A
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 0198D583CB8932E3EF22B673D80E04556D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: E/HxbqtQa+sXwuWBpFPEj6YgxawWtRh9nrgHCL1XE7k=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cb:89:32:e3:ef:22:b6:73:d8:0e:04:55:6d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=67ca88e26b584c7b8ad45e6d8e8becec87adac6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:85:4d:bb:8d:ad:be:0b:1b:c7:24:50:83:
73:7f:48:72:1b:5b:d4:f3:94:68:4d:5d:fd:c6:be:
6e:27:00:af:e6:62:05:4e:3f:a7:a2:2d:8c:07:61:
0a:8c:77:13:93:47:34:c3:84:2c:29:00:eb:c6:ab:
3d:08:f7:8c:41:a9:a6:e4:28:e7:2e:61:82:e5:b3:
d5:cd:dc:f4:eb:fa:17:d7:18:53:34:f9:33:4e:1b:
f6:aa:6a:42:e5:46:31:10:4e:5f:d9:39:c4:b7:d3:
cf:65:e4:84:79:fd:a2:a3:d6:40:de:59:53:03:05:
b5:33:6e:db:49:75:cb:de:6d:2f:78:36:91:54:09:
76:8e:af:2b:ca:39:27:e5:2a:25:59:ec:77:a9:b5:
ed:2e:8c:cb:c9:c0:23:6f:b5:6e:3f:7f:3d:92:92:
62:24:96:36:a6:31:7a:9b:61:a8:67:78:d8:9c:14:
ff:07:9a:b9:b8:e6:16:16:a5:83:e2:34:06:50:06:
b4:c0:88:b9:34:25:e6:43:cb:33:46:42:dd:a7:a7:
13:f9:c4:f6:1d:c1:f2:e7:9d:93:9e:c5:1d:7b:a6:
3c:2a:93:33:6a:1e:4e:42:1d:79:74:97:2d:ab:7d:
5c:c7:d5:da:42:51:40:35:45:75:4e:40:a7:34:71:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:88:E2:6B:58:4C:7B:8A:D4:5E:6D:8E:8B:EC:EC:87:AD:AC:6A
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:5c:30:e1:b6:67:e4:bf:9e:9d:f3:b5:fe:fe:4c:f8:f7:
38:de:f8:15:79:b4:6a:84:21:a7:e0:b0:75:aa:1c:e5:b0:0c:
de:9e:af:24:7a:fe:1f:bf:ed:8a:d6:38:2f:11:19:1d:cc:62:
cb:f5:fc:00:08:99:49:b9:9a:2d:26:7d:c4:ed:d4:5a:85:9f:
ea:da:f4:41:a4:94:ec:33:76:7a:90:3f:16:d3:af:11:a9:41:
db:eb:44:29:60:db:cf:49:23:cc:12:fd:ae:f9:be:f5:ab:2e:
b3:6a:2f:bb:b7:c8:1a:7e:b4:d2:25:d5:20:20:86:d5:1f:47:
eb:e4:17:f6:96:46:22:79:bc:a2:eb:e8:ec:0c:68:33:bf:22:
ec:69:cb:0f:e0:2c:a5:21:7f:5d:b9:32:51:75:5e:3c:2f:8e:
f1:ed:7a:29:55:53:89:c2:72:cb:1e:36:55:c8:1b:81:25:3f:
20:89:ed:15:99:ee:c7:ff:9b:55:43:d0:f6:ae:c3:88:41:aa:
e3:be:76:d9:fc:4b:19:c9:38:ac:6e:2b:db:d4:e4:6f:c9:14:
d6:8d:33:79:bf:44:b8:a3:e1:61:0f:c3:12:30:4d:0a:34:0a:
13:a0:77:5c:3d:bc:68:3f:3d:15:da:f0:f8:10:b5:a6:66:62:
1f:17:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:06 2025 by rpki-client