Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: VLbuPxmjz9/TzkkYFCcr22AoWWfpEnM7o5RBj7N7Ee4=
Subject key identifier: 2D:28:9F:24:C6:EB:D0:AE:F8:81:89:91:AA:73:56:9D:5C:A8:4D:06
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 0197B7456EA2F5C35E150009A614FD8CD735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0633
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: pLvnR6cdamPM3ijGxfFLMJG6BPycjZJWtOnCZNzGgkE=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6e:a2:f5:c3:5e:15:00:09:a6:14:fd:8c:d7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=2d289f24c6ebd0aef8818991aa73569d5ca84d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:0b:a7:e8:8f:36:ee:6e:8b:c0:3b:b0:6c:
03:35:44:43:ea:b3:2a:57:d8:4b:91:b4:0f:7d:4f:
55:fc:ee:7e:c0:de:cf:f2:b7:3e:5f:0c:df:c1:61:
a2:54:b1:c3:02:14:95:46:dd:76:a4:b0:8b:88:c3:
ac:37:e4:b0:9a:c9:08:de:09:49:44:dd:0f:44:b2:
3c:07:7c:3d:7a:31:f3:c4:c5:5e:ff:99:e2:66:ee:
0a:9c:94:00:1b:bc:05:cc:0e:21:4f:2a:35:d9:42:
4e:e4:71:3d:60:b2:c5:3a:6f:fb:a0:28:d8:35:c7:
c5:05:a1:69:0e:1b:61:a8:d3:a4:84:89:ff:0a:d8:
fe:cd:f1:ef:f1:0b:a4:83:1e:43:77:95:b5:65:93:
69:86:54:93:5f:a5:c0:ee:38:de:82:bd:72:b8:c3:
38:9b:fc:ca:eb:26:6b:4d:14:e0:2c:d9:8f:85:6c:
5e:ed:fa:1f:fa:f8:ea:6e:cf:2c:ab:9e:fc:12:94:
0c:2d:c7:2b:4a:6d:5c:4f:91:ac:52:52:b9:67:2a:
b2:99:af:07:2a:cb:f7:b3:bf:5d:f9:19:fb:61:be:
6c:bb:03:51:ad:f8:87:15:42:8a:0a:49:0b:0f:b3:
09:34:f7:1c:e0:f3:86:c2:ec:67:f3:a1:cb:90:42:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:9F:24:C6:EB:D0:AE:F8:81:89:91:AA:73:56:9D:5C:A8:4D:06
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:dc:80:df:9d:9f:e4:40:12:fe:a1:3b:33:a0:b2:4a:52:b7:
bc:62:1b:27:20:49:02:9b:5a:37:6b:69:f8:a9:11:36:fe:24:
35:29:16:ad:c4:d3:50:88:1b:11:d0:01:ea:ec:88:bd:f4:0e:
33:51:40:ab:7f:b1:ee:ad:ee:02:23:a5:e2:06:3c:1c:13:a2:
22:30:70:49:aa:89:ea:48:a2:a9:5d:89:cf:c2:d1:20:03:20:
bd:8b:11:33:21:6f:af:f0:f3:aa:ce:48:08:95:39:14:9f:e0:
32:36:bb:1c:26:fb:b1:f6:eb:ea:5c:f0:5c:df:f4:f9:cb:bc:
d9:e3:0f:41:b9:45:86:41:ad:75:c7:71:05:4c:01:73:f1:ec:
c2:3a:b5:f5:63:3a:de:ba:3e:0d:f3:4d:9a:a6:b7:46:82:d9:
ea:45:d6:b9:6e:28:f0:a5:55:3e:96:35:af:bf:22:9e:27:d7:
0f:e2:8d:87:c8:22:e2:e7:ac:d5:33:38:36:8b:4c:ab:56:c1:
94:7d:44:08:16:58:59:e8:19:c3:20:54:02:c4:9b:9c:15:3b:
8f:a4:e7:d1:4c:08:16:a3:68:da:01:c8:1a:df:de:08:d2:ae:
e5:e3:90:ea:98:1d:f9:8c:ec:63:35:09:b2:05:90:7f:01:43:
49:ac:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:48 2025 by rpki-client