Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: IwKvhi6ALVzyTd6SkAsFhxuSyDrlRx8A/mj4EgSK5mQ=
Subject key identifier: 01:CD:86:BC:7B:85:BD:1A:28:35:3C:32:CF:AF:56:76:42:B2:66:70
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 0196C615B19BD0946EA9CB7C9C1D64DDB3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 147C
Signing time: Mon 12 May 2025 20:00:32 +0000
Manifest this update: Mon 12 May 2025 20:00:32 +0000
Manifest next update: Tue 13 May 2025 20:00:32 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: YOqVAl4lOUQg8Mz1Z7kshVKr2V1AV+Uv+BRSuqJu7sw=)
2: X0NMFv3xuHRSXYMGKUXV8IKykec.roa (hash: OjOw3rcSA/T5JCD0NPBFtVQyCjbWRUE+EyaG3m+jzio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:b1:9b:d0:94:6e:a9:cb:7c:9c:1d:64:dd:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: May 12 20:00:32 2025 GMT
Not After : May 13 20:00:32 2025 GMT
Subject: CN=01cd86bc7b85bd1a28353c32cfaf567642b26670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:95:db:bf:15:04:dd:0f:02:58:03:29:ce:
b9:9f:cc:d9:90:a8:e5:29:15:5a:4e:11:39:87:71:
0a:ec:99:e1:33:9c:87:24:71:ca:0f:11:8b:c5:d1:
10:db:40:3e:79:8e:6d:2d:b1:51:d9:89:c4:07:4b:
8b:ef:e4:27:62:ff:a9:3d:54:14:57:91:4c:43:37:
be:a5:c8:8d:0b:0a:2b:49:d8:33:d3:cc:b9:d8:fe:
54:aa:c6:d9:77:49:e2:83:87:47:34:db:19:23:ff:
77:8e:d7:0d:ba:7f:ed:83:91:0f:56:52:14:0c:24:
4b:09:a6:82:ec:fb:3c:dc:ec:45:62:cd:22:8b:e5:
5c:b3:4d:29:66:5b:0f:09:42:f8:8c:43:16:2f:d1:
87:54:db:4a:63:2e:72:03:d0:78:4c:7e:f3:58:f6:
77:e8:e2:02:68:cf:38:f8:4d:06:37:8a:bd:a5:77:
6e:1a:d1:22:2c:8c:46:09:7a:16:2e:17:3b:bd:ad:
5b:14:2b:e4:6f:a1:72:33:9f:3f:c2:8b:66:30:89:
80:0b:7b:37:da:ee:12:83:ff:01:16:71:d4:2f:63:
a1:f4:76:9d:7c:02:0f:ac:b9:24:7b:df:88:af:5e:
2f:48:26:7e:04:79:2c:bc:c1:b3:b7:ce:f2:33:80:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CD:86:BC:7B:85:BD:1A:28:35:3C:32:CF:AF:56:76:42:B2:66:70
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5e:84:82:64:b7:38:a2:8c:9c:20:99:79:6b:3c:8c:21:72:
e2:cb:3e:fe:8d:d9:7e:6c:48:b3:54:26:4c:a1:f8:54:74:da:
7a:83:cf:25:2d:f3:bc:34:f8:6d:cf:64:e5:ee:54:32:ef:ab:
b1:0a:ec:58:5c:f2:27:68:0a:0f:56:9e:1b:c3:68:ba:ef:2d:
86:e0:ba:ff:9f:f4:ab:3c:f4:30:12:db:4d:f3:74:8e:f3:97:
39:82:b0:a3:ca:a7:a3:54:90:cd:2d:ed:a8:2c:7c:52:07:a8:
34:1d:a2:34:15:48:1f:5f:19:4e:13:4c:ab:99:a6:63:c0:14:
a9:76:e3:27:ec:0b:a8:b6:60:6e:99:86:21:e3:51:ee:09:1a:
41:b8:ab:92:eb:62:aa:dd:3d:a0:98:be:2f:11:11:37:a2:aa:
cc:5a:e2:28:f4:11:74:93:6e:85:76:1a:3f:35:43:71:ea:9a:
de:49:1e:c0:39:6c:67:4f:b4:69:61:51:63:34:b8:96:d8:93:
eb:9d:c4:57:09:ab:cc:a3:9d:a6:6c:6c:45:f3:fd:73:25:e4:
40:fc:b3:00:3f:49:1a:d3:22:be:0b:91:cc:6c:46:9a:64:e1:
a8:0e:43:69:d3:cb:06:41:50:0f:07:1c:de:5d:07:70:04:61:
6e:65:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:17:08 2025 by rpki-client