Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: eojxUQBhw3EOlHgGNHwcYcVjD1FzuHjWJ5Je/4X5SC8=
Subject key identifier: AE:B5:2E:59:29:95:21:12:54:75:CD:C0:85:A4:DB:42:83:BB:3A:FF
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 0196B74780F7B0708A54EBC752017A429EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 069B
Signing time: Fri 09 May 2025 23:00:38 +0000
Manifest this update: Fri 09 May 2025 23:00:38 +0000
Manifest next update: Sat 10 May 2025 23:00:38 +0000
Files and hashes: 1: 3ybDPKiA0wDv8fgYqqJjrGlrgZo.roa (hash: Lzgk9VM3/0+YuHabQnt8dL/9QNx4stqWd1uOafztoy0=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: nEXVEQ6KhFbA1E92B0FTSeNo3qfAaawLtOmsaUJwhVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:80:f7:b0:70:8a:54:eb:c7:52:01:7a:42:9e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: May 9 23:00:38 2025 GMT
Not After : May 10 23:00:38 2025 GMT
Subject: CN=aeb52e59299521125475cdc085a4db4283bb3aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:16:de:c5:ac:97:64:00:62:38:03:3e:01:
4c:5d:7b:4f:27:53:c1:f7:6d:4c:fc:24:b3:a0:ee:
d1:af:8a:4e:8c:52:47:30:41:09:f7:fa:f1:c5:55:
16:20:3e:e3:21:9a:2f:3e:62:7e:ee:cd:d6:24:3d:
a9:b0:48:4c:f1:52:c9:35:2f:9b:51:9a:8b:ad:f2:
99:a3:57:b6:a8:e0:73:45:f9:fd:84:44:a8:09:a2:
24:6e:95:11:b4:37:0d:19:77:95:de:fa:94:9d:eb:
74:1f:0a:9d:64:33:52:b0:4f:61:18:e7:51:6a:6e:
59:f4:d6:40:a4:91:91:f9:aa:d8:75:9e:79:28:ca:
f4:c9:45:d8:1a:8b:ad:5a:d3:f5:dc:bb:34:c1:19:
ad:52:69:d9:7f:f8:af:08:02:15:20:6d:3a:99:70:
ae:73:67:4e:48:5c:06:c1:ca:78:2b:b0:bd:2e:06:
0d:49:e9:60:2c:51:79:fc:11:8c:8a:c5:b0:c8:47:
d5:35:8c:b7:8f:fe:3f:b7:af:b4:8c:22:ef:76:2a:
0e:11:f5:bb:bf:77:0a:ce:d0:e6:c9:d2:a1:b7:68:
0c:ce:69:40:2c:8f:56:00:aa:6f:59:47:b5:93:cc:
f8:1c:ba:66:70:6c:c8:ad:cc:0a:ef:29:a5:99:32:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:2E:59:29:95:21:12:54:75:CD:C0:85:A4:DB:42:83:BB:3A:FF
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:5d:58:93:ee:ec:73:3c:a8:72:aa:38:89:2e:7a:12:e0:
d3:7d:36:3d:11:5a:6f:21:23:0b:0e:6f:4c:49:d3:55:e0:5d:
6a:28:89:01:03:2e:08:54:04:5c:f4:0a:1d:81:44:55:a6:39:
29:cb:f3:bf:18:3a:19:3a:60:cd:19:5e:05:da:87:f0:82:3b:
2d:c3:17:c0:eb:99:2b:cd:9f:14:d0:b9:6b:33:44:d2:56:49:
64:ed:5c:9f:c2:c1:66:0a:ad:e2:44:9a:c7:a7:44:a2:cf:5d:
eb:0d:10:30:ad:89:e0:b7:61:94:6e:58:7d:5a:c1:da:70:1d:
b0:b5:ee:af:55:47:9a:d6:03:28:56:6c:8b:2c:d5:74:d4:98:
ea:3c:67:5f:05:47:e1:3c:9c:71:96:66:27:27:ef:10:6e:67:
92:af:38:0c:6d:a9:94:16:91:37:a5:a4:17:89:67:0f:15:9b:
4c:ac:f2:4f:ab:87:e1:66:ca:ab:f2:ca:52:dc:2a:a2:9f:77:
c4:6b:4f:d1:ff:62:f6:18:72:16:13:b7:3a:e8:ef:e4:05:12:
4a:69:e0:ec:19:57:6a:7d:34:ab:e1:bf:ac:c0:86:e9:44:84:
6b:e1:f7:27:e7:de:e3:91:7b:0e:f4:ff:f7:72:1c:17:c2:9e:
62:b8:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:38:20 2025 by rpki-client