Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: xI+r+6g5386jA5pEahan0SmpeUCLJKmgPSSW9EEjeF4=
Subject key identifier: 23:13:54:57:4D:BA:67:5D:EC:05:22:09:0F:BF:59:C7:A2:5D:FB:AB
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 0197B7452D89D0853BC9497D8A42B6E04A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 8D
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: D4qYhCSOrv+CuZOcxpy6beSAwdoku4UUcFZsbNA0WS4=)
2: ibG8s-uNg8iW3EcdenBVN0a0GOA.roa (hash: cMNTG3zKGDqXo0eIkSYjSVFaWoXZgu+y014lNkKw6CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2d:89:d0:85:3b:c9:49:7d:8a:42:b6:e0:4a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=231354574dba675dec0522090fbf59c7a25dfbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:cf:34:69:e6:fe:98:cb:70:a3:72:f0:b0:
45:88:8b:0d:d0:9b:55:9f:3d:da:b3:cf:6a:da:41:
e1:b9:19:35:9e:07:61:25:0a:ce:ae:81:eb:54:28:
10:6f:e1:2d:d1:1d:c3:25:8a:f6:ad:ef:22:14:a5:
44:69:bd:fe:d9:ac:7d:bc:5f:fc:85:a7:2c:94:02:
4a:8f:e4:0f:1b:45:8f:ee:33:3f:95:01:50:cb:dc:
b3:19:40:26:9d:76:13:b9:fb:31:c5:f6:5b:c9:a7:
9d:1e:01:9d:a1:83:b6:d1:6c:86:ed:cb:e8:63:06:
e1:40:2f:96:86:56:0c:17:d4:c1:ef:fa:cf:41:0f:
30:fa:a1:cc:ee:9e:ab:16:8e:ae:68:7e:d2:b6:a9:
b8:88:43:ce:72:ee:71:62:00:ec:6d:c0:60:2d:5c:
ff:18:07:4f:c7:64:d8:af:fd:4d:a1:2e:8a:2e:8a:
9f:d2:57:3f:cc:63:d9:d9:a6:7a:67:27:70:40:23:
bf:43:19:27:a7:f0:16:0d:27:19:f8:36:72:4b:53:
73:71:19:f8:44:e4:59:99:88:db:41:7f:62:b1:60:
c0:1f:ff:c0:d3:5f:02:fc:e5:24:0c:03:33:32:ad:
7a:7a:85:c7:d5:f9:81:f5:cc:1f:da:62:c1:cf:dc:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:54:57:4D:BA:67:5D:EC:05:22:09:0F:BF:59:C7:A2:5D:FB:AB
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:da:a6:13:e4:99:b1:7f:cb:dd:99:a9:8d:63:fa:cd:49:6f:
e7:9f:ca:02:9d:34:ac:b0:6e:e5:0e:f6:9e:36:77:22:21:fc:
0e:13:73:f3:9a:cb:84:9e:2c:03:d7:d4:50:1a:eb:3f:ec:9d:
a4:ff:8e:63:69:e7:1f:d7:6a:0a:71:b9:73:9d:ee:81:2c:3d:
4d:79:f9:4f:c4:30:e3:d2:e8:c7:61:00:3d:55:0c:de:8c:a3:
f9:fd:6c:7c:9e:3d:b1:15:ed:59:b0:3d:5d:b0:58:aa:d0:b1:
76:f1:82:e2:90:cb:31:d5:cc:08:34:5d:8b:8b:18:0a:a4:48:
55:f1:72:5f:a3:81:52:85:5b:c2:af:cd:84:50:0a:38:42:5d:
fe:00:0b:f1:0d:50:b3:cb:96:ac:cd:37:1b:5e:21:fd:35:14:
78:93:82:7c:f5:8e:23:d4:bd:2d:a6:00:40:82:b3:2b:22:82:
3e:75:c5:c3:c2:6b:2c:c2:dc:cc:7f:f1:f7:63:15:ce:ef:04:
dc:ff:9f:ad:0c:7a:13:46:b3:2f:99:4e:44:db:b4:d1:70:62:
94:62:48:e7:ef:d7:d7:be:21:26:5a:c2:e4:35:09:89:bd:c7:
36:bb:91:a6:e6:7e:5e:3c:aa:77:e4:16:f9:3a:a2:eb:25:f7:
fb:14:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:35 2025 by rpki-client