Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: 9+mdCdsGgHA5K945TFPSlyXEKnpFNH2p/0hSWIOZNhQ=
Subject key identifier: 8F:18:32:BF:A5:D8:EC:51:14:16:53:7A:77:20:AF:8B:D8:1A:7A:EE
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0196C2700848F561B56AF795A3EE79020388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 0DE4
Signing time: Mon 12 May 2025 03:00:44 +0000
Manifest this update: Mon 12 May 2025 03:00:44 +0000
Manifest next update: Tue 13 May 2025 03:00:44 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: LphuaU7FUnGjERlRhmMPGZyLb7YFWwr2FkLisVBhsgg=)
2: IsJ-Knhv-lcZp2ErCBVSweACDiI.roa (hash: vnx9hi+UuIlc5qw+h0Sh4yAOgrUWmAlxKn51sLYhn3s=)
3: yAX7kXvWm92680l11R9uBAFGQnY.roa (hash: PzHY/wJJLxlCCbW9yVair3ky9z1XDsrY5r4NVGBKmjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:08:48:f5:61:b5:6a:f7:95:a3:ee:79:02:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: May 12 03:00:44 2025 GMT
Not After : May 13 03:00:44 2025 GMT
Subject: CN=8f1832bfa5d8ec511416537a7720af8bd81a7aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:06:68:bd:7c:d8:55:2c:92:86:ee:c8:37:
84:ad:bd:ee:13:6c:8a:87:a9:ca:30:e6:f4:04:51:
ee:08:1c:05:02:75:8d:04:64:c2:07:e4:d9:c5:e9:
4b:86:68:9f:95:1b:05:ee:c9:3c:83:60:db:e9:f0:
89:2b:47:dc:0a:87:4b:d1:56:12:95:0e:65:a7:41:
4c:37:ee:19:f5:d6:a4:16:e2:17:c7:d1:ae:28:af:
b1:d8:ce:1b:91:ad:07:16:c2:67:74:ca:bc:53:a6:
1f:84:2a:01:65:e2:3f:39:1a:ac:90:ca:aa:7e:0e:
50:6b:71:bc:25:37:23:7c:64:d5:af:ad:53:21:14:
a6:e8:29:32:41:3f:3d:86:6a:40:5c:ec:69:02:7e:
64:dc:16:a2:86:72:2e:9a:33:9f:b6:64:6b:4b:cd:
76:80:3e:1f:1a:19:8a:1d:33:84:be:2b:87:0d:33:
2f:af:d9:1e:91:02:91:e9:2e:8a:7e:eb:7f:38:6c:
83:ce:2e:fa:7d:87:94:ee:85:02:08:4a:f8:67:76:
4e:2d:40:aa:53:60:f8:2d:d9:37:56:e4:72:6d:ac:
a1:1b:dc:f6:c8:b1:c6:1a:ce:6f:2b:fc:57:af:3e:
85:bc:c6:e1:2c:d5:c0:36:f5:98:cf:37:a3:53:cd:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:32:BF:A5:D8:EC:51:14:16:53:7A:77:20:AF:8B:D8:1A:7A:EE
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:32:1f:27:09:28:67:68:8c:93:9b:56:57:33:05:7e:98:
8e:e0:1f:26:b3:8f:48:a1:28:13:76:c0:ec:31:5a:3a:22:29:
2a:6e:ad:e9:4d:49:b5:c1:ad:13:ca:6c:04:21:08:99:43:c3:
75:0d:42:e9:d3:4e:b9:20:ec:03:d9:b4:09:e5:df:36:5b:96:
b3:13:47:23:da:20:d2:00:13:31:b1:c3:c9:c8:c9:41:fb:10:
f0:fc:f5:e0:a1:ec:a6:02:f7:77:2d:47:1c:8e:e3:0c:c3:49:
a5:8a:90:6f:95:03:88:29:c4:9f:bf:5f:24:4f:a5:68:02:25:
51:c4:3e:78:bf:de:59:98:69:bd:6a:64:db:d5:6d:15:c5:6b:
3e:72:dd:16:8a:7a:8f:8b:e0:ac:a9:7a:40:49:a2:16:e9:0c:
e9:79:cf:46:82:63:9b:24:b1:98:52:02:ab:da:29:54:84:8e:
6e:26:3a:2a:41:ae:a6:f2:1a:15:63:5f:6b:1a:a3:25:ee:22:
1a:2e:db:3a:cb:52:ca:0b:ce:7c:d3:cc:ff:f9:c7:74:95:18:
00:53:87:95:3b:59:6a:6e:b2:e7:48:bf:b1:6c:c4:6e:7b:3c:
bf:79:04:c2:c0:74:8a:a6:aa:f5:55:63:7e:ab:15:b0:1e:56:
01:19:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:07:38 2025 by rpki-client