Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: 74pT802XWhraJegJ49JKaJuusYUhXWQqMwTJ3leIFkE=
Subject key identifier: 60:D2:BA:17:EE:A9:B6:9C:9A:CC:26:4D:91:A9:FB:F3:33:00:B2:2A
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 0196C38260BB68D5DD32105351F16FFCD8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 0D10
Signing time: Mon 12 May 2025 08:00:23 +0000
Manifest this update: Mon 12 May 2025 08:00:23 +0000
Manifest next update: Tue 13 May 2025 08:00:23 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: Z7TYLGw0GT2LoaXyUJYSwfldF9x80beAbNWcQ0l1hH8=)
2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:60:bb:68:d5:dd:32:10:53:51:f1:6f:fc:d8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: May 12 08:00:23 2025 GMT
Not After : May 13 08:00:23 2025 GMT
Subject: CN=60d2ba17eea9b69c9acc264d91a9fbf33300b22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:11:30:b5:21:d5:c7:0a:28:ef:7b:53:ab:
f8:25:6f:78:93:d5:4c:10:33:95:3e:55:ec:f1:50:
7a:fa:19:2a:57:e3:42:b3:e0:fd:66:a8:88:57:a8:
9c:5c:e7:f8:8d:08:84:8d:c1:3e:24:de:08:07:21:
50:98:7e:8e:f4:fc:9f:9a:65:8e:a3:d5:c6:49:a6:
ea:21:ac:24:ae:a5:a3:8e:54:62:e9:31:9a:05:86:
bb:6f:86:29:b7:7d:05:30:95:c4:b0:28:82:87:55:
ce:ae:e3:09:1a:3b:4a:b9:12:63:78:7e:03:9f:8c:
71:f8:9b:4e:32:ed:94:77:42:84:f7:b8:ef:2b:2e:
2d:90:2a:3c:23:00:5f:bf:b1:63:36:bc:61:b4:72:
9b:92:56:c6:39:16:f0:99:12:80:4b:a6:58:0f:a3:
9b:9e:90:10:0d:74:7f:bf:c0:26:f9:de:c6:e3:2d:
e2:21:ba:74:14:a0:65:30:a2:73:50:5b:ee:f0:a5:
3b:72:56:0e:b8:69:67:f3:97:8b:51:fc:7e:20:69:
fc:7e:8d:6c:24:ba:24:fa:16:2a:72:c2:62:de:ff:
6a:2d:5f:8b:df:c5:dc:cf:4f:8f:59:8d:2c:c0:0f:
48:3a:b5:1e:ea:20:2e:d2:e6:84:f4:5b:d9:08:d4:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D2:BA:17:EE:A9:B6:9C:9A:CC:26:4D:91:A9:FB:F3:33:00:B2:2A
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4a:9a:7f:7b:30:94:35:0a:68:93:de:b7:3d:af:51:39:f5:
f2:4a:10:e6:25:50:72:7f:1c:96:d0:0e:be:f4:46:a3:18:29:
48:5c:f6:62:7b:ad:91:fc:95:b9:75:1c:44:f8:e7:90:03:be:
90:63:60:28:fc:ef:37:53:ff:7f:51:b7:d6:67:62:63:c0:f8:
a1:f6:ac:60:a3:94:67:01:73:26:43:18:8a:82:bd:4d:59:79:
96:de:04:49:c3:b6:4a:ee:14:39:bd:62:b0:fb:c9:28:ff:50:
0b:32:8c:87:89:43:18:bf:15:35:26:8e:f3:68:30:dc:5e:73:
e7:d0:0f:0e:77:9c:1f:a1:cf:a1:6d:07:ff:e3:10:cb:bc:9c:
89:49:1c:51:22:de:ed:a8:ae:63:b4:5b:fe:d8:22:15:fd:bd:
39:fd:b3:f8:81:cf:d9:d0:00:10:aa:11:ed:80:9e:f6:b0:10:
a4:13:12:44:4d:d1:90:2a:b5:a8:70:b9:e2:ae:26:2f:e5:f3:
94:48:b4:bd:2f:de:fc:36:bc:79:f4:33:03:20:40:2e:97:ab:
87:1c:0f:07:01:b5:0c:30:2d:29:11:e5:90:16:ad:48:a4:20:
f4:97:38:9a:e8:f2:1c:ef:60:f3:53:f6:db:eb:ed:29:25:e7:
fa:c7:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:24:57 2025 by rpki-client