Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: zCERPt9LlCcRUxIxaZ9+EICZwSB80/LnlzbEWHGbif8=
Subject key identifier: 60:13:6A:96:3A:00:EA:67:FE:C3:94:24:1E:42:08:81:B4:CA:29:B6
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 0197B7EA40074761E938B038FD5D315BD08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 14FA
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: ZkLrEbib+nI1LXvKT7yGE5hdY05qKaqSgVqALIGvkyQ=)
2: WodU5gDNw3cjAmLp67NGPeKWzm4.roa (hash: YXZKSjPXGmgzYL0wl21TgIMvnXm5A4XUDZj4O/e7fR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:40:07:47:61:e9:38:b0:38:fd:5d:31:5b:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=60136a963a00ea67fec394241e420881b4ca29b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:21:a9:20:bc:56:8d:7a:96:43:8a:f8:0e:
c5:fe:e4:fa:43:a2:64:ca:e6:0e:dc:eb:82:19:d2:
49:eb:e8:45:18:86:84:dc:33:72:be:db:51:e9:5e:
0a:9a:49:b5:6b:da:05:4e:09:46:b5:c6:14:57:ef:
6f:46:b7:24:88:54:40:c4:8a:94:3e:f8:4c:b2:49:
9a:0d:bb:6f:6c:9c:47:2f:cc:59:1b:3e:09:8a:67:
02:aa:2c:db:b6:0c:47:5c:8a:2e:0a:7d:3b:eb:d8:
f3:55:ea:09:f0:f4:89:bb:e7:25:f9:df:54:dc:d2:
44:c7:c5:40:35:e7:61:9e:4d:cf:14:9b:35:ef:a9:
29:c2:df:e9:c5:48:f9:eb:8d:e9:5c:a0:ee:49:5e:
0a:d8:fe:93:13:41:4f:d0:19:af:5c:63:45:2d:c7:
71:ad:15:27:ca:c9:44:67:49:e5:a7:b2:a3:44:d0:
11:91:5c:a9:68:5c:11:97:6e:b8:0c:d8:87:9c:bf:
4c:35:0d:6a:94:3d:65:3a:13:b4:1c:d9:16:ca:49:
6f:4e:78:d6:7f:bb:e9:1c:9a:1d:a9:d1:af:72:50:
d0:55:19:56:d6:4f:ab:e9:a0:27:b8:cd:79:cb:ef:
da:8b:01:33:33:08:2d:9e:36:a4:52:9d:01:16:21:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:6A:96:3A:00:EA:67:FE:C3:94:24:1E:42:08:81:B4:CA:29:B6
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:43:f3:97:ed:ee:bf:76:a9:ec:42:1b:98:88:13:61:06:ed:
18:88:df:41:39:cf:a0:11:05:14:53:be:ad:2e:55:76:98:2d:
a6:75:df:56:67:fa:84:6d:2e:df:7a:f2:65:2f:ae:88:16:0e:
07:04:7a:3e:81:bd:ce:5c:fb:07:4e:ff:14:20:c0:f0:3b:87:
bc:c2:83:9f:7e:dc:c7:a8:e4:54:22:10:27:3e:85:06:bb:94:
20:53:ab:20:b0:e5:cd:25:1e:ad:e3:ca:f3:45:7b:3e:7b:6a:
71:23:22:ce:4e:89:7f:55:e1:52:8e:9a:06:67:e1:ae:d6:a1:
cc:ae:1b:68:0c:b0:6b:ad:f2:d4:0a:21:68:9f:aa:d2:be:d3:
1a:56:77:35:72:26:d2:54:6c:40:e6:1c:bc:cc:86:18:13:10:
84:9f:e5:87:f2:c1:14:54:4c:86:26:94:7e:4e:2f:17:f8:cb:
72:f0:ba:b6:56:30:d0:20:a1:16:86:c3:cc:6a:fc:4f:02:e4:
44:2b:27:78:7d:6d:b0:27:02:dd:6c:26:d8:ef:9f:9d:f6:06:
17:0b:00:64:b5:25:ee:2a:bb:2e:6c:95:14:6e:63:00:c0:cc:
df:00:af:90:34:0a:fa:7d:49:d5:6a:17:41:a5:b7:7e:1c:54:
14:33:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:39 2025 by rpki-client