Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File: DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier: 5AZTAFB+qnQJpRq0+1nDxUoW8NmGtbLat0ZoM3+psYU=
Subject key identifier: EA:2B:7E:75:09:F1:D2:37:B0:EB:E0:CA:39:CE:FC:91:1A:C9:D6:D2
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer: /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial: 0197B6A09D809CC9B44480AF483D6398000C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number: 0FAF
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: p2TncRsgMKBtaKV840vBLRKMzlzjpQeSw1nU8hBE7Qc=)
2: wD2g-VtZvqp7IY0550_PgDhJeD0.roa (hash: lT0qtpgd/Q3svueonVDRMVNhaFwZxKOMYzAHt0tWC5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9d:80:9c:c9:b4:44:80:af:48:3d:63:98:00:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=ea2b7e7509f1d237b0ebe0ca39cefc911ac9d6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:47:44:5c:cb:08:96:17:c3:84:a5:75:01:
01:1f:24:e1:9b:10:5e:49:25:c4:31:e7:29:fb:c0:
84:66:e8:75:e6:12:94:56:02:38:56:25:ce:90:05:
77:fd:e2:ee:58:6e:59:ba:8b:9a:a5:ac:84:85:ed:
e9:d0:86:45:70:5a:22:60:66:57:82:86:b7:d5:86:
4d:ff:06:c9:64:c9:ee:41:73:d4:b3:1b:a5:a9:3a:
2a:32:88:23:48:cf:d1:26:72:29:24:57:a5:18:3a:
89:99:80:0f:56:79:20:44:de:5b:30:30:28:50:02:
a7:5a:cd:33:aa:45:7a:6a:40:8d:53:3e:07:2f:48:
84:a5:74:91:1d:52:fd:a0:64:91:56:6e:f8:ef:02:
d6:da:e0:d6:61:89:a0:b9:41:23:f6:dd:9b:03:ef:
63:c9:3c:cd:13:95:e1:73:0b:19:9e:b8:e6:5c:ba:
c1:12:9d:d9:88:f6:1f:8d:3c:5f:7e:26:27:23:92:
8a:0f:52:bc:8d:a9:68:57:81:3d:81:75:62:d0:33:
1b:00:a1:38:b0:36:5b:22:0c:6d:cf:fb:6d:cd:21:
8c:54:02:05:ce:7a:a2:3e:51:99:99:40:8c:ac:c9:
65:5d:7a:03:65:fc:5b:53:93:77:94:77:66:5d:3b:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:7E:75:09:F1:D2:37:B0:EB:E0:CA:39:CE:FC:91:1A:C9:D6:D2
X509v3 Authority Key Identifier:
keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2d:44:62:48:71:95:8f:be:7d:f8:eb:cd:2a:75:09:9f:f6:
b5:4b:ff:3b:66:4d:5d:21:22:2d:a2:ad:d3:92:f9:5a:d5:25:
d3:06:a1:05:26:a1:2e:46:ed:79:00:06:e2:6f:3f:b5:9f:d1:
5c:6f:f9:b0:a5:7a:25:07:82:da:5b:dd:5b:93:f7:7f:b1:7c:
c1:38:67:4f:6f:ff:f1:a6:4c:fa:f6:44:76:02:59:d4:34:95:
af:d3:e2:91:7e:05:4e:4b:83:68:75:48:6a:47:f5:08:e9:d3:
22:27:2c:c8:aa:58:07:89:46:18:12:0a:2f:67:19:fa:6b:5f:
43:15:10:95:28:ce:90:dd:58:e0:fb:10:32:2a:be:7b:fe:f8:
57:f4:e2:1a:38:c5:15:17:26:68:a3:20:ee:87:43:f1:f7:b5:
0b:27:31:06:42:0d:fe:79:b3:5b:52:c4:44:e9:76:87:39:94:
3c:cf:88:5b:48:d1:73:eb:5e:fb:b5:09:39:f6:18:c7:53:5a:
e1:91:48:8f:0e:10:6c:f4:a0:3a:7d:f9:14:20:7c:d9:8c:e5:
8d:88:ec:34:cd:13:69:78:b9:24:9c:28:8f:5d:52:72:f9:02:
9b:7b:8c:9d:49:66:0a:b7:d1:8e:d9:c9:cb:4a:46:1f:09:91:
fe:93:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:52 2025 by rpki-client