Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: S6mQrtdByCFAJFj5JAK+7T+OscZPvwILblj2MQLwgo4=
Subject key identifier: 98:D6:48:BB:69:32:95:A6:3B:0A:AA:F0:3F:64:72:5F:E6:FD:54:F8
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 0197B5FC240AF843053972EC90BEDCC67139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 154A
Signing time: Sat 28 Jun 2025 10:01:29 +0000
Manifest this update: Sat 28 Jun 2025 10:01:29 +0000
Manifest next update: Sun 29 Jun 2025 10:01:29 +0000
Files and hashes: 1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: T5PlhigzF6vcVARzntZSGIFTAXe8S8SpfoOWPfeTx14=)
2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=)
3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=)
4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:24:0a:f8:43:05:39:72:ec:90:be:dc:c6:71:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Jun 28 10:01:29 2025 GMT
Not After : Jun 29 10:01:29 2025 GMT
Subject: CN=98d648bb693295a63b0aaaf03f64725fe6fd54f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:3c:c5:9f:9f:10:4c:e6:79:22:e7:b2:ca:
d5:ed:76:1a:ba:a0:b4:71:fb:51:5c:fe:1f:a3:2d:
e4:ef:2d:07:80:47:82:9a:5a:7f:e5:ee:7e:7f:87:
2c:69:12:cd:d6:89:c1:59:fd:93:9a:82:4f:47:c6:
06:5e:cc:ca:97:aa:32:7f:1c:5d:a4:14:04:20:1c:
11:f6:7a:56:f8:84:b3:a9:72:25:dd:62:e0:51:5a:
c5:de:dc:89:79:21:ce:88:df:0d:6e:49:2e:bd:37:
36:1c:c0:8c:3a:ed:48:7f:fd:f3:83:6f:e6:43:a6:
dd:0a:f3:63:35:a6:5f:7e:16:ea:ec:29:01:55:a8:
bd:12:1c:90:92:61:fd:41:72:cb:ab:e8:ce:c7:cb:
24:66:7f:2c:34:44:c5:14:45:75:39:41:a5:ea:1e:
4e:a7:07:29:aa:c6:ce:5d:ab:55:e7:2b:1d:69:de:
42:44:e2:f8:8f:8e:ec:fb:3d:9d:bf:e0:19:10:5e:
50:a7:fe:87:64:a0:18:1e:ef:d6:b5:40:bf:27:e7:
cb:45:dd:c8:53:f1:f9:7c:7f:44:b8:99:ff:10:4b:
18:1f:c7:7c:2c:c7:dd:8b:57:53:b8:49:39:b9:24:
41:47:d2:4f:83:63:14:15:37:4a:5d:f9:13:57:16:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:48:BB:69:32:95:A6:3B:0A:AA:F0:3F:64:72:5F:E6:FD:54:F8
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:65:69:2f:93:ff:2d:d5:51:61:ef:02:07:f0:3b:ec:5c:1b:
04:9b:2f:be:96:15:3b:e0:b1:8b:45:38:e2:73:aa:7e:75:76:
39:38:7f:7b:dc:cc:cb:2c:a3:b0:49:67:0a:e1:39:fb:86:25:
40:28:60:da:30:b5:2f:b4:d0:85:23:09:a8:55:75:01:2f:2e:
57:10:db:6b:1a:8d:89:bb:60:c0:81:df:e8:6a:98:f9:97:70:
e2:20:9d:e8:40:b4:e1:41:71:98:4e:0d:05:c5:15:d6:02:56:
e2:a9:6b:da:b9:58:e8:f7:78:d3:43:a1:8e:a8:98:97:ea:f9:
96:4b:8a:b7:a9:79:c3:83:21:79:6d:c9:a5:f8:99:5e:ea:a5:
c0:24:f5:ba:41:93:3b:d0:6d:7a:be:9e:2d:06:11:8a:c1:56:
cf:4a:5d:c3:89:81:03:83:23:43:ff:3c:a3:67:50:30:60:23:
af:44:0d:c6:18:c5:70:e0:bd:cc:c3:06:21:bf:8f:69:b5:46:
59:25:10:7f:2f:09:32:7c:ca:46:02:6d:29:8c:d2:82:56:b0:
14:e8:ef:3a:f2:b2:91:d5:bd:02:b4:33:03:a6:70:39:77:c1:
16:50:18:e8:b1:91:f8:9e:c8:05:4c:fe:e0:f9:44:dd:68:95:
53:b4:2c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:04 2025 by rpki-client