Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: iLwkulfoTiTa/CBC99+jA41NM/CNFgrV1SVxvMB/1ps=
Subject key identifier: 4B:13:80:86:CB:28:D7:E9:82:65:68:D6:05:AD:9A:C9:5C:81:B2:60
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0197B70E664ECB008F35FB73FFA8FB173BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 0E65
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: R/8hBwK9ay9tpEofsw7FyOgpbRYPbycuLTFkjM1dKow=)
2: yAX7kXvWm92680l11R9uBAFGQnY.roa (hash: PzHY/wJJLxlCCbW9yVair3ky9z1XDsrY5r4NVGBKmjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:66:4e:cb:00:8f:35:fb:73:ff:a8:fb:17:3b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=4b138086cb28d7e9826568d605ad9ac95c81b260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:fa:13:31:43:0f:81:2e:66:b2:cb:87:ee:
4c:ed:e9:c8:74:0c:04:6a:d4:41:8f:44:cd:b1:21:
eb:0f:ee:e4:c2:f3:3c:7d:5c:c4:e9:1e:2f:c0:04:
30:64:26:2c:0c:8b:ce:41:ad:e6:85:f2:c3:a9:ec:
08:3a:6b:f8:db:8d:e3:df:90:6d:45:c4:c9:02:f3:
65:9e:8d:a5:cc:0e:75:d6:7f:b1:0b:78:8b:fb:41:
ae:fa:c9:80:f8:59:ed:a8:70:ea:4f:a6:f6:e6:5c:
7c:e2:67:7e:c8:ea:a9:d7:a8:b2:06:bb:23:88:64:
da:cf:2a:d5:4f:aa:2c:03:10:4b:0f:7d:92:87:c3:
41:d3:08:cf:c9:a8:ee:95:fa:1b:fb:eb:49:ed:cd:
0b:8c:5d:7b:4d:77:5f:8f:40:d0:bf:fe:81:38:a8:
a9:14:17:18:30:e2:e9:2d:5e:e0:95:d3:d5:34:71:
42:44:2e:a8:5f:fa:fd:77:36:79:29:b3:1c:39:b5:
9a:ae:41:c8:58:c3:b4:98:bf:94:95:4e:e1:c4:cd:
64:2f:6f:65:a0:99:64:18:bd:6f:fb:df:49:59:c3:
89:59:1a:ff:b9:32:78:a3:13:6f:10:17:bb:c0:f3:
35:4c:2a:f5:5a:af:d6:bc:77:1b:ed:45:dc:34:fc:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:13:80:86:CB:28:D7:E9:82:65:68:D6:05:AD:9A:C9:5C:81:B2:60
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b4:66:7c:b0:6d:2a:c0:a3:3b:52:3a:2f:9a:ab:e7:df:1e:
0a:19:d6:8a:5e:a3:db:06:e3:82:fe:33:97:1c:0c:2f:65:a5:
2c:41:76:b9:e8:35:a8:63:d7:1b:e4:4c:5c:27:4f:ff:bc:8e:
07:d1:26:66:1e:59:1d:13:a5:8d:6f:99:41:70:4b:4d:eb:a4:
2e:d3:fe:99:e6:d7:c9:26:b0:78:0a:ef:7b:66:ec:06:cb:8b:
ad:69:f4:34:2f:b9:d8:03:58:c0:7e:67:5c:91:46:65:d0:bc:
65:bf:e0:0e:b7:33:9c:63:af:39:ed:22:af:42:18:96:6d:d7:
1a:02:bd:8f:a7:12:17:94:ff:21:ee:b9:b7:01:fa:06:76:23:
11:a2:9d:53:77:5c:cd:c3:93:b9:3c:db:0d:07:9c:e7:a6:cb:
43:0f:f9:c2:ef:a4:5e:93:07:2b:0e:8b:59:0b:a2:4d:0e:0b:
f1:74:11:a3:98:c9:bc:ae:3e:69:06:e1:aa:84:55:9d:3e:37:
e1:6f:c7:c9:6d:5c:c3:3d:30:7b:89:67:73:f6:93:ae:eb:5b:
33:77:41:50:de:c8:e8:89:10:33:b9:a2:f3:1a:f7:bf:da:1c:
cc:15:bc:20:d5:41:1f:51:35:15:7d:19:17:80:26:49:59:53:
c9:f6:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:19 2025 by rpki-client