Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: AqBkfEVHbSEPCSomUPky+VCXYeOoueomay/Krl7a42U=
Subject key identifier: 45:9C:C2:73:7D:57:D9:4B:FE:6C:69:D2:ED:D0:32:DD:88:59:76:BB
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 0197BA0FA116D15C7D353EF1DC65B094D7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 0721
Signing time: Sun 29 Jun 2025 05:01:15 +0000
Manifest this update: Sun 29 Jun 2025 05:01:15 +0000
Manifest next update: Mon 30 Jun 2025 05:01:15 +0000
Files and hashes: 1: 3ybDPKiA0wDv8fgYqqJjrGlrgZo.roa (hash: Lzgk9VM3/0+YuHabQnt8dL/9QNx4stqWd1uOafztoy0=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: i7J9yBOEDFaHqGO01wfAGwf3QkajSCERb2BOaY+e8Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:a1:16:d1:5c:7d:35:3e:f1:dc:65:b0:94:d7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Jun 29 05:01:15 2025 GMT
Not After : Jun 30 05:01:15 2025 GMT
Subject: CN=459cc2737d57d94bfe6c69d2edd032dd885976bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:f3:0d:a0:53:10:e7:cd:72:24:1d:f3:cf:
be:80:3c:ba:33:eb:6c:8d:04:c0:3e:3b:67:79:b7:
11:8e:71:ba:c7:c9:8a:50:80:1e:7f:69:7a:62:f7:
fc:64:be:24:da:85:67:35:69:84:4c:ca:45:74:62:
29:03:1b:7a:e1:da:06:c1:d0:67:f4:22:2a:e5:ad:
c5:7a:fd:e8:0e:5d:5a:6d:52:65:69:3c:9b:36:74:
e5:1d:51:c7:36:01:86:11:72:2d:09:3c:17:15:ed:
ec:fc:2a:43:e8:31:3d:f3:0d:c5:c9:c0:18:9c:20:
df:94:22:a6:bb:a0:39:d3:ac:62:35:08:90:d0:36:
a3:ea:ad:42:11:85:7f:26:91:c3:0f:d9:9d:15:76:
78:eb:69:1d:7f:94:88:91:8b:22:58:50:5f:7a:b4:
e2:74:9d:aa:60:10:86:71:83:85:5a:ea:30:4c:cf:
3b:a9:19:09:f9:f7:ea:8a:46:b7:5e:f2:66:bf:96:
87:f9:e4:3c:a7:15:fc:64:e9:1a:59:95:c1:3c:8c:
44:4e:17:59:04:84:20:50:bf:bd:5d:3e:a8:b8:31:
68:2b:9c:0b:dd:45:f1:2a:1e:7a:82:fd:0c:7e:d0:
82:b5:d7:59:86:df:40:2e:2d:e7:fd:d5:22:a9:f8:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:C2:73:7D:57:D9:4B:FE:6C:69:D2:ED:D0:32:DD:88:59:76:BB
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f3:b7:6d:e8:12:2b:8e:de:1f:b8:d4:3e:34:98:2b:67:52:
88:62:a9:3a:c3:47:ad:c6:5c:9e:b1:0f:9c:f5:25:75:ba:ae:
04:93:a2:b3:11:8c:60:87:87:f7:73:89:50:ef:24:07:52:c3:
85:61:bc:63:53:4f:0d:bb:07:de:48:3d:03:b9:a6:9f:8d:83:
71:be:23:c1:39:27:e1:94:a9:b0:7f:70:63:1a:4f:f0:8c:f6:
e3:c6:21:e1:09:13:71:52:d3:91:6b:cf:9e:e6:4c:17:93:20:
0e:7a:0f:72:1f:d9:12:f4:b5:c3:3f:f0:7e:66:8d:d6:cd:49:
62:b2:12:bc:7e:3c:c8:4c:84:43:51:2c:5e:ff:f8:86:1a:76:
28:11:8b:8a:b0:04:ae:a4:d8:d6:e8:a5:39:a8:35:07:4b:79:
1f:c1:db:51:59:a1:9f:2e:23:aa:ed:53:bc:ff:d9:b2:e0:1a:
e9:5a:f3:24:0b:b0:39:2b:88:a8:01:80:4f:6c:43:f8:0a:25:
82:12:4d:2f:89:53:76:bf:4c:51:85:59:63:27:7b:ff:ab:c4:
47:5f:fe:7f:b2:b6:e9:a0:19:8b:71:b8:b5:ab:5b:3d:78:37:
3c:c8:07:3b:c5:ea:05:e1:5a:1f:d5:75:45:2c:52:7f:71:6c:
b1:fa:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:32:41 2025 by rpki-client