Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: qmpcE0YrhXZap91y4wOpl4Vbt1fL5anx+CStVQ2+Oig=
Subject key identifier: 3E:ED:27:9F:C9:4C:D3:07:E8:DA:EE:25:C7:2C:C0:33:AF:68:85:69
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 01984AE5C0FD1D7C71126CC34CE13FAE8A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 076C
Signing time: Sun 27 Jul 2025 08:00:27 +0000
Manifest this update: Sun 27 Jul 2025 08:00:27 +0000
Manifest next update: Mon 28 Jul 2025 08:00:27 +0000
Files and hashes: 1: 3ybDPKiA0wDv8fgYqqJjrGlrgZo.roa (hash: Lzgk9VM3/0+YuHabQnt8dL/9QNx4stqWd1uOafztoy0=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: 9DttKTcSUi6bCnaxOWf9xDks7gsi3V3EeXvbqVUWSbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:c0:fd:1d:7c:71:12:6c:c3:4c:e1:3f:ae:8a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Jul 27 08:00:27 2025 GMT
Not After : Jul 28 08:00:27 2025 GMT
Subject: CN=3eed279fc94cd307e8daee25c72cc033af688569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:97:36:da:23:b2:e7:71:a5:26:c3:f6:c4:
e1:35:3e:10:4d:2a:1e:15:ef:d2:76:92:94:9b:ea:
12:0e:67:a2:dd:d5:6d:1f:2c:36:bd:bd:dd:8b:5d:
c0:df:67:b3:8c:64:b8:c3:58:ef:6a:ca:d1:fa:de:
16:e6:2a:cf:40:ea:2e:02:ad:40:ed:66:82:94:aa:
bb:0e:4d:2c:a4:5d:c0:91:75:d7:c5:14:79:20:10:
52:0f:cb:91:89:ac:6e:12:cf:72:aa:c9:d2:f6:8b:
5a:5a:c9:00:4f:a4:f7:c7:ca:12:a7:b3:08:8e:69:
56:5f:72:76:7b:05:1f:a3:cf:39:b3:31:a4:e2:ca:
f4:a2:cb:92:c0:74:90:3f:e0:08:a3:0c:9c:fe:8e:
4a:f7:0e:07:9e:91:2c:0f:b0:65:fb:54:d4:29:6e:
3f:37:af:c5:23:b7:61:51:0a:5a:cf:be:a9:f4:8e:
8a:cb:8f:23:8d:f6:da:e4:35:a2:82:84:fd:58:57:
42:66:04:8b:a0:53:01:69:d0:22:cc:e7:b3:76:02:
9b:0f:ec:6f:97:77:db:f6:a7:e0:04:55:30:55:1a:
46:58:58:d2:ef:0a:4d:98:84:88:ad:02:aa:34:ec:
f0:0c:db:31:cb:71:f9:22:8d:2a:ec:62:df:a4:7d:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:ED:27:9F:C9:4C:D3:07:E8:DA:EE:25:C7:2C:C0:33:AF:68:85:69
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:33:fd:54:68:02:68:ca:d6:dd:e2:ed:56:28:ba:f2:82:e4:
db:81:01:e7:72:bc:22:64:06:74:87:5f:f5:46:33:3e:99:ba:
64:66:9f:fd:2a:fc:2f:d6:61:4e:92:60:0d:0e:1a:50:77:81:
bd:25:7a:a3:a7:67:85:cb:bd:04:50:ba:c5:f0:6c:63:07:20:
7f:70:2b:e3:05:7b:39:55:62:a4:50:e4:71:fd:59:45:2d:53:
68:d2:9a:b3:31:0a:0c:42:3c:63:be:7c:c8:87:ee:da:62:cf:
1e:5c:a5:e3:7f:4f:08:8a:75:f6:33:00:55:36:17:87:9e:de:
c2:91:f5:c4:f1:7f:25:f9:53:2c:da:eb:60:d0:38:84:d9:0e:
75:d5:75:3c:66:01:33:aa:76:86:2b:ab:b3:35:a6:f4:23:d6:
6b:8a:4a:2d:f5:86:aa:22:c4:31:45:a9:cb:92:cf:aa:6d:31:
59:83:64:21:0e:b5:b8:ae:ea:2e:13:6b:f7:cc:a4:b4:09:09:
51:ab:cd:c6:6a:0e:31:0e:fa:d3:fa:5a:1f:60:83:e3:dc:26:
f8:3e:6d:75:8b:8f:8a:ac:5e:1c:21:1b:04:94:36:cc:ba:bb:
89:2c:c7:56:9d:09:97:83:ef:8d:be:31:f5:0e:95:f0:b2:e8:
b0:4a:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:33:18 2025 by rpki-client