Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: Q1qqTejpirKcPugw8arcxIgD4ZeVRvvZ51go5/S83Ss=
Subject key identifier: DD:BD:E2:17:A2:2B:F7:0D:1C:F2:46:D6:1C:A0:9C:0A:71:DE:A1:40
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 0197B5FBCD2DF241A2F9BA35AD7379D63869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0911
Signing time: Sat 28 Jun 2025 10:01:07 +0000
Manifest this update: Sat 28 Jun 2025 10:01:07 +0000
Manifest next update: Sun 29 Jun 2025 10:01:07 +0000
Files and hashes: 1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: YOfh6cnZGHX1uE6M1U6+bSBb/Nl2q1bLgj3GKQvt7IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:cd:2d:f2:41:a2:f9:ba:35:ad:73:79:d6:38:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Jun 28 10:01:07 2025 GMT
Not After : Jun 29 10:01:07 2025 GMT
Subject: CN=ddbde217a22bf70d1cf246d61ca09c0a71dea140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:aa:91:15:4c:fa:1a:44:2b:aa:fd:a9:b9:
b0:6e:08:e0:03:4d:86:57:cf:e5:ef:37:c2:3b:61:
9c:0b:18:31:47:84:6d:a1:96:32:fb:54:9e:6b:f7:
2a:64:13:ea:14:08:39:82:d5:9a:27:3b:19:3d:c8:
b2:ba:04:0c:ba:8d:86:28:e8:bd:f9:c0:4c:e4:91:
52:55:f7:0a:18:e1:44:b4:82:8c:4a:4a:5e:d2:13:
c7:c2:c5:dd:6f:4e:c3:01:b0:c0:99:72:cd:e5:98:
70:23:4e:80:e0:a8:47:20:2d:cd:80:34:c6:61:fa:
bb:45:30:c5:9e:f8:6c:cf:2e:71:24:85:b0:e1:bd:
0b:a5:d0:15:a3:4e:7f:ce:72:58:ac:5a:80:57:f5:
1f:bb:b6:ac:e0:ab:a6:46:c7:d1:15:43:a2:d6:5a:
d9:42:54:31:df:88:eb:5e:73:54:47:17:cc:d3:13:
0a:52:01:34:ea:f0:34:34:79:f5:bb:d3:6d:fa:fd:
b8:97:37:8c:8b:05:ec:a1:b3:a5:d1:be:73:16:fe:
05:95:c0:e7:8a:d6:90:e7:d8:2d:01:3f:fc:f6:0c:
47:dc:5f:86:80:01:b0:71:6b:05:55:fd:92:85:6b:
e8:45:6d:66:e7:3e:a6:73:52:4d:3d:55:e4:85:b5:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BD:E2:17:A2:2B:F7:0D:1C:F2:46:D6:1C:A0:9C:0A:71:DE:A1:40
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fd:17:85:56:60:85:d2:89:0c:7f:80:84:5a:f4:2b:b8:ca:
a2:cc:ef:d3:84:dc:0c:c2:a8:d6:f1:43:55:76:13:67:b7:21:
29:d1:7f:2a:e3:b6:77:52:93:d3:a2:fa:5f:84:c9:6e:28:7d:
a7:fe:21:a7:b4:9b:e6:89:1f:0e:0e:ce:07:01:5c:ac:87:d7:
69:22:fe:6b:d7:16:f4:0b:e7:a5:5e:d0:d7:bd:e8:ca:67:5c:
14:b1:87:b6:3b:6c:69:04:da:ef:eb:c5:b8:ea:2a:ea:55:7f:
89:eb:76:de:6f:aa:22:36:fb:13:ab:14:7d:b0:58:90:ec:36:
2d:21:de:b3:ff:58:81:2d:ec:8b:0e:0f:10:0b:19:4b:99:bc:
10:84:7a:fd:70:62:4e:27:0e:fe:27:dd:28:cc:f8:0e:39:ac:
81:32:70:da:45:79:a0:87:ad:e8:fc:4b:aa:f4:84:28:19:44:
1a:eb:a6:e1:ce:58:09:6d:05:12:8a:20:4b:3f:53:c0:97:81:
e2:ab:14:0a:e8:08:77:ee:94:b8:b2:15:9e:71:44:af:16:c8:
94:9d:9d:cf:61:c1:88:05:f7:3c:f4:38:01:fa:f1:14:ff:dd:
08:b7:59:b6:66:d4:63:c5:96:44:1e:08:fa:12:01:d2:aa:0a:
53:ac:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:48 2025 by rpki-client