Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: cWuoC396W/ciBRSxcNy03xxcvw3i87l3YMmcf7kb8Xs=
Subject key identifier: 74:0D:1D:3B:4D:59:CF:1F:2F:FA:08:DE:D0:82:C9:2A:9E:08:25:DF
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 019848C03D14DBBD21CDA4A5CBA1EAF5094D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 095D
Signing time: Sat 26 Jul 2025 22:00:14 +0000
Manifest this update: Sat 26 Jul 2025 22:00:14 +0000
Manifest next update: Sun 27 Jul 2025 22:00:14 +0000
Files and hashes: 1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: Ed+mtGVYmZa3l8oAfVYR0nNA7bNGcH0Oc0TSuKZ0KDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:3d:14:db:bd:21:cd:a4:a5:cb:a1:ea:f5:09:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Jul 26 22:00:14 2025 GMT
Not After : Jul 27 22:00:14 2025 GMT
Subject: CN=740d1d3b4d59cf1f2ffa08ded082c92a9e0825df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:e8:a9:ae:6c:13:0e:ce:3e:fd:39:22:09:
c4:08:2e:6c:a6:7e:55:d1:c6:98:2a:52:76:4b:2a:
76:1c:0a:eb:07:32:6b:92:cd:98:64:70:09:17:ab:
f7:57:ea:95:77:1c:6e:b9:4c:97:57:c5:dd:55:aa:
5a:52:22:0b:75:a7:e0:9b:37:d1:90:72:01:29:bf:
de:16:3a:83:a3:91:54:22:c4:5a:7f:9d:f8:5d:65:
82:fa:04:6e:af:20:f0:1f:5a:64:03:c9:84:31:e7:
75:70:d2:aa:44:f2:6e:bc:50:3d:e5:08:16:e4:ce:
8f:fd:c9:11:36:91:70:ef:9f:aa:56:d6:11:73:ce:
42:61:0b:08:f1:c0:bb:8e:00:a9:71:10:60:26:c6:
9f:b1:0c:3e:a6:0d:07:a7:07:3f:19:5f:24:ac:71:
b6:db:0d:08:0b:74:fe:2f:98:9d:e6:b6:69:72:53:
7d:fd:62:11:7b:a6:00:60:37:9f:53:a3:ce:d8:d0:
4d:3e:55:32:6b:c6:4c:aa:0f:0f:9e:90:3c:34:12:
fd:42:2d:15:4a:4b:a6:94:79:de:ea:ed:98:df:02:
30:82:28:2b:f5:f9:1b:d9:cf:5a:f9:d9:6a:de:07:
9f:ec:80:9b:30:1c:99:8c:0a:60:59:96:0b:a1:95:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0D:1D:3B:4D:59:CF:1F:2F:FA:08:DE:D0:82:C9:2A:9E:08:25:DF
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:c1:f6:51:3e:46:3c:c4:35:9b:20:e3:d1:84:de:7a:75:
9e:42:5e:5c:3e:f8:9e:ff:f4:dd:8f:21:ee:ae:f6:14:97:3b:
a9:83:68:24:e6:29:c3:43:cb:b9:01:b9:8f:e5:96:31:7c:08:
06:b0:d8:e3:b5:cf:1a:c0:19:a4:9e:2c:46:56:40:c3:81:23:
7a:ba:7c:27:81:da:e0:32:5c:17:73:0f:d3:da:97:64:e9:65:
3b:4f:d7:18:ef:6b:4d:db:f1:c2:7a:dc:6f:98:94:eb:02:a3:
48:0d:37:ac:05:c6:ce:f3:c0:19:3c:29:61:51:d2:6b:e6:bd:
f9:6f:f6:56:83:6d:18:79:c9:d9:be:ee:cc:4e:6a:0b:a9:b4:
87:5c:b0:42:1b:20:a9:21:20:2b:6a:f8:f6:36:d9:08:45:bc:
4b:07:ce:7b:e5:4b:e7:e4:ba:d3:5c:be:3f:16:93:5c:6d:56:
a9:b6:90:cc:28:b9:77:14:6b:5a:b6:95:55:1a:55:3b:c7:0d:
06:74:2d:cc:b8:bf:bb:4d:c9:18:6a:7c:74:9f:78:0b:cb:f7:
99:83:c8:53:0a:5a:96:a7:75:aa:ad:c0:c3:7f:41:5c:16:70:
00:42:b2:5e:f6:92:45:51:c1:72:86:80:09:04:31:1c:6b:af:
09:ff:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:41 2025 by rpki-client