Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: VojYwl4mqxocl8fsDX0bJznCKZQfa4M13v28eViIEEU=
Subject key identifier: 27:EE:DA:8D:F4:08:D3:C5:B5:50:6A:39:AF:A0:DE:08:1B:4A:7E:A4
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 0198469B52744AE8B76A02899298CF05E4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0CE7
Signing time: Sat 26 Jul 2025 12:00:40 +0000
Manifest this update: Sat 26 Jul 2025 12:00:40 +0000
Manifest next update: Sun 27 Jul 2025 12:00:40 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: zPHkLY9bW0H8DbwOBLFPvMQ0lgPYeklPeswHEsOUk74=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:52:74:4a:e8:b7:6a:02:89:92:98:cf:05:e4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Jul 26 12:00:40 2025 GMT
Not After : Jul 27 12:00:40 2025 GMT
Subject: CN=27eeda8df408d3c5b5506a39afa0de081b4a7ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:af:4a:7b:1b:60:9a:83:97:ad:87:73:39:
24:44:57:1d:ff:bf:a0:89:bc:b0:2a:9a:f6:e3:07:
f2:6d:f3:5b:9a:16:e6:da:a3:1f:90:f6:e1:43:3f:
a2:1d:2b:80:7a:53:f7:59:31:ff:27:15:77:dc:df:
7e:d6:40:98:93:89:d7:af:06:4f:5b:d7:ca:48:b8:
3c:ae:2b:03:1f:f0:3e:9d:d9:3c:3a:36:78:90:07:
0e:b6:06:86:2a:88:50:1e:02:eb:3d:6c:d7:7f:1e:
48:b2:d6:ae:18:9b:b1:66:93:38:e4:e9:d9:68:ea:
ea:2b:3d:70:cd:a7:04:d2:af:29:92:e1:e2:a3:4e:
2c:85:50:fe:8b:5b:29:ba:35:8d:6c:0e:10:c4:2f:
df:4b:18:ba:08:c2:b3:75:ae:13:88:94:a6:b5:03:
f8:40:31:09:77:2e:e4:56:f3:3e:6b:5d:0c:74:80:
aa:4f:12:bc:6a:21:e8:89:b8:a0:7f:1d:cf:c6:d5:
d7:44:de:cc:e7:43:0a:ad:35:ae:e9:2c:5b:8d:04:
9a:46:4a:bc:63:27:39:df:56:8b:3c:83:de:25:17:
83:e4:20:4b:55:0e:a0:4b:77:c2:44:61:01:cd:84:
77:61:d2:e4:fa:3a:cb:1b:ac:08:02:da:0e:59:71:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:DA:8D:F4:08:D3:C5:B5:50:6A:39:AF:A0:DE:08:1B:4A:7E:A4
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:26:ef:60:0d:7a:88:2e:d2:a5:68:2e:b6:18:67:14:ab:
1c:0b:de:0c:35:bd:a3:96:5c:43:a9:f0:14:64:af:98:58:52:
57:45:b9:13:3f:d6:2d:15:08:75:24:7e:f7:7d:83:07:21:3f:
b2:97:b4:22:54:9b:e5:28:19:55:ea:1e:47:bd:bf:ec:53:a0:
65:72:34:bb:26:cf:b8:ca:cf:cb:79:f1:83:b5:a7:b6:b2:c9:
2e:12:86:9e:87:ed:24:de:9c:0f:b8:ea:1a:8d:c3:c0:1d:47:
fb:fe:99:05:40:55:20:5e:82:13:d4:dc:b2:0f:45:d8:51:9b:
de:90:56:cc:7f:69:d5:ac:53:46:e1:44:82:a4:e7:49:65:40:
09:46:2b:c4:92:b2:63:84:24:b5:5b:b3:53:7f:bc:a0:2e:d7:
27:75:23:93:fc:09:1a:5f:05:12:3d:08:b5:85:1b:40:a6:75:
91:53:80:6e:66:1f:5b:d3:60:03:7c:b3:35:0b:81:ac:9f:06:
de:89:0a:6e:28:10:4b:e2:2c:19:ee:a5:ad:6b:69:76:61:24:
b9:f2:4e:10:5f:c9:f5:c7:73:d9:d0:84:47:02:e1:2b:99:a8:
14:1b:3f:74:46:d8:2b:74:14:95:24:d3:98:95:6d:bf:17:40:
ad:bc:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:57:26 2025 by rpki-client