Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: i6Dujj7hHzYrLisjAuqfV5AS41eZYOP5h7zQqL07Erc=
Subject key identifier: 05:39:AC:24:BE:B0:C4:59:C9:C2:3D:44:FA:A0:8A:8B:48:B4:19:31
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019827476231936EFCCB6769AAFF6273E170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 15F7
Signing time: Sun 20 Jul 2025 10:00:46 +0000
Manifest this update: Sun 20 Jul 2025 10:00:46 +0000
Manifest next update: Mon 21 Jul 2025 10:00:46 +0000
Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=)
3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: DwHUFPKRB/HJQJCg7LAabrInYcTWvvPJgTZHuHUHfvs=)
4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=)
5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:62:31:93:6e:fc:cb:67:69:aa:ff:62:73:e1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jul 20 10:00:46 2025 GMT
Not After : Jul 21 10:00:46 2025 GMT
Subject: CN=0539ac24beb0c459c9c23d44faa08a8b48b41931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:44:15:5d:ff:7c:6b:52:18:f2:6e:69:31:
2c:51:0b:7e:32:b9:39:15:1c:5f:52:2a:18:56:82:
84:5d:2c:c2:96:55:eb:d1:7b:14:6f:53:6f:13:eb:
62:81:4b:22:52:9a:1e:9c:e9:77:06:e1:c7:f3:fa:
d1:17:58:04:0f:29:19:44:a5:e8:24:5a:ef:7a:4b:
05:da:ab:ea:bf:65:00:ca:97:7c:5c:2c:85:e4:4a:
b9:9c:95:15:62:f9:06:4e:24:91:b0:42:ef:5d:86:
7c:5f:a0:78:9c:6d:88:06:1a:05:2c:b4:7e:da:fb:
63:d1:a6:d4:c7:ae:bd:47:b8:9b:4b:f6:9b:7f:f8:
7c:31:99:87:5f:77:0b:93:99:fa:18:5d:fa:72:ec:
8e:af:55:12:93:82:ab:69:b4:c2:5b:22:d3:7a:da:
fc:b8:b3:07:c3:03:17:08:8f:78:34:d9:08:5b:e2:
18:f4:dc:a4:f1:39:5a:c4:de:04:a8:84:b4:22:3b:
39:59:3b:0f:11:ad:2c:eb:f9:ca:38:97:07:a2:4e:
c0:02:0c:2e:1a:22:54:71:53:13:13:fe:48:53:56:
e2:0c:c8:f5:f3:f9:0d:29:b0:44:dd:94:b2:d1:35:
80:e7:8b:0f:b9:40:0c:b3:a7:f2:d6:e5:46:6c:93:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:AC:24:BE:B0:C4:59:C9:C2:3D:44:FA:A0:8A:8B:48:B4:19:31
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e2:3b:73:df:0e:67:8d:9b:34:56:d1:34:01:2e:95:b0:84:
7f:3e:88:7e:61:50:3a:91:92:ce:5e:08:9f:2c:b4:c1:55:80:
10:69:16:19:91:59:c4:9c:ab:2f:54:06:7d:3f:a3:98:ee:84:
61:54:62:da:85:e2:9c:e5:b2:ac:b5:d0:ea:b3:76:e0:2e:1c:
48:59:c0:00:fc:14:96:53:d5:ce:aa:5c:e3:a2:16:3c:e1:f7:
18:8c:d3:50:45:b1:1b:38:be:27:02:b9:ad:63:5a:88:b3:f1:
a6:4d:4f:52:23:34:f0:dd:f4:c7:fe:e1:00:11:9f:75:cb:5b:
77:6a:c2:e6:6a:67:a5:bb:77:20:66:9c:26:39:bf:80:e1:48:
74:da:f1:ae:ae:5f:fc:02:c8:dc:dc:ca:eb:b7:80:fb:d2:63:
ba:35:33:f4:63:28:7c:5f:6f:58:fd:d8:2e:56:24:b2:b0:40:
d9:40:2e:ec:3c:54:88:04:15:b9:5a:5d:98:a1:78:5c:4c:62:
9e:3e:f6:86:3f:82:97:fb:2b:ba:2b:e2:2e:da:e9:0d:7b:54:
e3:b1:23:a2:3d:4b:a0:b7:23:e7:cf:33:e0:d8:e6:10:63:e4:
d5:46:17:d6:7b:f9:1c:26:1f:59:7f:7a:83:25:94:0a:d8:88:
e6:8f:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:25:59 2025 by rpki-client