Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: C02ctiHniUf41ekx6n2jMsyTvm5IvnVaWpsrwg5YhQc=
Subject key identifier: 5C:D9:5B:63:1E:AF:4B:4B:8B:A0:DA:4D:E6:AE:52:7F:49:E1:66:2F
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 0197B8902EE424EA5D4D16DA48E174313C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:02:26 +0000
Manifest this update: Sat 28 Jun 2025 22:02:26 +0000
Manifest next update: Sun 29 Jun 2025 22:02:26 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: BWXW7bC5oSDPRcuziB8gIwO48RiNwI8Opd6bOoo7nvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:2e:e4:24:ea:5d:4d:16:da:48:e1:74:31:3c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Jun 28 22:02:26 2025 GMT
Not After : Jun 29 22:02:26 2025 GMT
Subject: CN=5cd95b631eaf4b4b8ba0da4de6ae527f49e1662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:46:c7:20:aa:9f:50:aa:90:4e:f3:67:40:
54:17:f7:66:d4:ac:e2:4f:e8:0a:2c:67:7c:0c:e9:
b3:2b:ec:7a:bf:d1:70:61:15:70:92:f1:31:ea:ed:
5b:0c:b5:53:65:9c:1f:c3:c5:1f:27:a8:91:63:51:
bc:d4:c7:fc:65:c2:28:32:32:92:be:ce:54:3e:d0:
88:17:4c:89:2c:99:6d:01:e1:e3:20:ba:af:13:17:
4a:c0:14:36:46:96:a7:11:39:54:11:4b:23:87:9c:
e8:73:89:ea:42:bb:dc:e6:7e:b6:0e:ea:a3:8b:ed:
39:98:d5:f1:e5:a8:ac:20:9c:b6:bb:87:99:1f:95:
7c:f6:0e:3c:7a:cc:25:71:b4:52:67:18:85:bf:fa:
52:fe:4e:ce:f2:3f:52:5d:9c:f4:c4:10:c4:6e:b1:
ea:3e:4b:0b:e9:bd:d6:5f:07:72:07:84:50:c1:4d:
04:2f:b8:6e:a8:67:cf:5a:5f:b3:5b:9b:34:74:9a:
9f:c5:32:80:b1:46:16:bc:a9:da:70:61:65:d1:ba:
80:b0:95:f0:3d:58:ae:f9:d1:ae:4c:6d:0c:3b:da:
45:d3:f6:af:86:3f:5f:2a:44:89:94:62:53:3f:f3:
f5:8f:c0:ac:95:05:a2:dc:c9:9e:fe:12:97:3e:e2:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:5B:63:1E:AF:4B:4B:8B:A0:DA:4D:E6:AE:52:7F:49:E1:66:2F
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4e:b8:21:55:56:d9:26:d7:cd:79:74:53:a9:38:c8:a9:16:
bf:8e:25:54:c3:d9:a4:89:ae:26:a6:0b:21:97:cf:24:f6:b8:
24:a7:51:ef:60:8a:24:37:2c:cc:6e:a6:49:ec:d5:44:70:f1:
23:9c:57:3b:c6:49:0a:59:61:fd:47:f5:b1:7b:79:d5:39:68:
b6:ce:e6:1e:2e:29:21:5b:57:ae:13:51:ed:96:47:3e:20:a0:
13:b6:1e:0a:7c:0f:eb:8e:27:81:9d:30:bd:a4:8e:16:a7:9d:
1a:8c:ad:f9:08:e6:a1:43:c4:19:c9:b8:7c:29:f2:be:46:61:
a5:08:83:5d:7b:10:96:6f:29:0a:50:37:1c:8d:2a:ec:78:ef:
a5:bd:bc:4d:84:07:07:79:db:0c:41:2e:a8:09:93:e0:2e:83:
6b:d0:01:85:23:c1:30:8e:88:92:13:36:67:d0:1f:df:a2:4d:
83:48:52:98:31:98:ca:a4:74:d5:5d:41:eb:02:0b:0e:97:bf:
2b:c8:7a:ae:5a:fd:71:98:ca:ed:be:ef:4d:e2:08:8d:87:cd:
a5:12:28:1c:1d:8f:c0:5f:0b:3e:0e:ad:8d:af:e4:80:33:d2:
08:e5:47:8a:0f:f9:98:ef:aa:c0:86:21:0d:2c:cf:a8:65:f6:
de:1b:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:31 2025 by rpki-client