Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: TskMAITFCGWQdr6VpklmMqmloKIvsofOO3kAfLRbAbQ=
Subject key identifier: C5:B4:F3:67:E7:55:FB:FC:93:C6:D1:F8:0C:00:E7:44:D7:66:B7:90
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 01984AAE8AC24A22A92007F15C89D17F388A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 1546
Signing time: Sun 27 Jul 2025 07:00:09 +0000
Manifest this update: Sun 27 Jul 2025 07:00:09 +0000
Manifest next update: Mon 28 Jul 2025 07:00:09 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: OgECv1qL3A6sTar+BOjeT49XjyhOTZ0Kklq5Lu0t6LM=)
2: WodU5gDNw3cjAmLp67NGPeKWzm4.roa (hash: YXZKSjPXGmgzYL0wl21TgIMvnXm5A4XUDZj4O/e7fR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:8a:c2:4a:22:a9:20:07:f1:5c:89:d1:7f:38:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Jul 27 07:00:09 2025 GMT
Not After : Jul 28 07:00:09 2025 GMT
Subject: CN=c5b4f367e755fbfc93c6d1f80c00e744d766b790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:c2:f1:27:23:03:8e:61:5f:24:25:52:96:
3f:0c:2d:fc:67:12:d8:85:88:2e:cd:5b:48:ae:01:
22:bf:a1:58:a4:f4:98:51:8c:ff:73:06:30:81:5c:
af:d5:7f:07:2f:20:9c:f2:50:f5:48:b7:2b:0b:e0:
f3:4f:71:90:56:5b:c6:f0:17:b6:a4:37:a0:70:57:
ee:c2:31:8d:58:ba:95:2a:b1:74:a0:1c:1a:66:13:
af:4c:69:36:0c:be:ce:31:07:cb:f2:43:9b:f7:0d:
9e:21:0f:ed:2b:1d:aa:ef:8a:c4:a7:64:ba:79:c3:
ed:e8:d2:56:f2:2e:53:e7:8c:9a:ac:4b:4b:2f:8d:
70:5c:72:8d:88:8c:9b:20:05:37:94:65:73:4d:f5:
ad:c4:30:59:9c:e5:9b:56:9f:76:19:cb:44:6b:49:
04:a9:33:27:a3:f5:ab:f0:a8:3e:54:ce:d5:19:05:
be:56:67:dc:be:e9:52:02:6d:68:29:3b:6f:cc:ec:
bf:70:22:de:00:4d:de:f4:ba:bb:a0:88:7d:39:28:
50:5a:a0:a2:ba:7f:e6:4a:be:98:3c:f8:bb:95:8d:
d7:02:7f:66:3d:bb:e2:39:48:0c:54:4e:04:7b:13:
b8:2b:25:f6:3c:5d:ee:f3:c4:0c:b4:65:58:bd:e3:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B4:F3:67:E7:55:FB:FC:93:C6:D1:F8:0C:00:E7:44:D7:66:B7:90
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e1:f4:7b:3a:c6:62:75:c4:9e:12:7d:d9:9c:8e:4c:c0:32:
02:3b:ec:3f:39:73:ec:1c:c0:c3:51:c0:d3:f2:8c:33:38:a6:
62:fa:1d:70:6d:a9:c5:48:b0:bc:f6:73:c6:61:a6:b7:b0:88:
f9:66:e7:f5:16:ce:0f:9d:85:92:6b:13:09:92:7c:71:e5:b7:
12:5f:52:32:3d:67:8c:b7:df:4e:e7:a7:25:a2:d7:59:a7:bf:
02:9d:c6:d8:17:aa:25:20:79:0f:fb:5f:f8:fd:d1:20:9a:10:
9c:6f:a1:36:51:f9:7c:2e:d4:ea:ae:1b:49:5f:e4:14:b2:6e:
b4:ce:2f:66:c4:e5:bc:a7:a2:3b:21:96:fc:ce:0a:4d:cf:8b:
3d:0d:23:f5:19:91:95:92:70:6f:c4:9d:e4:e1:f8:f9:5e:95:
f5:9a:14:be:07:42:57:4a:e8:46:2d:64:05:f2:f3:9f:0e:20:
8b:74:4c:43:54:53:21:39:5e:b1:82:76:03:74:c2:16:5f:cb:
12:9b:1b:9c:ed:01:b6:56:b9:cd:5a:5a:ff:dd:fa:05:24:3a:
5c:d0:a4:e1:de:f2:77:3a:97:55:7b:16:79:ce:cb:a4:d3:33:
fe:32:3b:01:3c:e0:00:c1:af:4b:10:2f:d2:b8:4b:7c:2c:cf:
8a:ff:7c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:14:44 2025 by rpki-client