Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: kNpUTiObExrvdCvv2ILm8ko3Ys7Wy1REkUh4PotARaA=
Subject key identifier: 67:A7:BD:58:C2:50:84:1C:98:8B:7B:FB:DC:39:2C:52:EC:15:2A:62
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019767E02B893AA8CA9307853D5EF12A0DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 06:00:33 +0000
Manifest this update: Fri 13 Jun 2025 06:00:33 +0000
Manifest next update: Sat 14 Jun 2025 06:00:33 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: nusGQHLpBBCGQN8vy6wKkk89gJ3XCI+XJ8AkOzCIEqA=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:2b:89:3a:a8:ca:93:07:85:3d:5e:f1:2a:0d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jun 13 06:00:33 2025 GMT
Not After : Jun 14 06:00:33 2025 GMT
Subject: CN=67a7bd58c250841c988b7bfbdc392c52ec152a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:7f:f5:fd:3f:16:54:bb:bc:fa:44:a5:e6:
2f:09:5e:a6:4f:fa:d3:11:f0:cb:d3:01:27:3c:2e:
29:5d:10:4b:1a:c2:46:d6:46:e4:6a:ac:53:34:9e:
3d:df:b4:b3:0b:5c:7d:d1:92:20:c6:d0:39:00:1e:
47:16:f5:20:3e:1c:d3:87:32:b4:ac:57:4f:77:d3:
16:44:0f:db:1e:41:58:80:d4:b4:57:2c:d2:40:ce:
5d:8c:6d:0f:a9:f3:58:51:a1:41:69:07:ad:71:87:
ff:78:87:22:ff:83:9e:e6:f7:ce:88:43:21:8d:a8:
ad:29:88:ec:3c:66:4f:3f:c0:86:4a:37:cd:9b:b4:
1b:2a:43:be:b2:2b:e8:01:8e:b9:c6:3c:bb:11:e8:
2d:8e:27:03:cf:30:e1:cb:f1:73:51:c5:84:13:1d:
77:f8:40:75:e0:8b:75:f0:69:c7:98:de:61:4a:6c:
2f:a2:76:99:29:ec:0d:8f:0a:3e:08:2b:5a:cc:a1:
24:e3:e7:f9:40:fd:9c:c8:b6:c2:23:bc:c9:48:6a:
55:5b:75:ed:e3:cd:ad:0b:10:3a:84:11:51:7a:5f:
42:53:f1:31:f0:50:03:44:8a:1a:7f:7a:39:43:69:
ab:da:57:e7:d6:4e:bb:65:0d:32:f5:b4:a9:26:ca:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A7:BD:58:C2:50:84:1C:98:8B:7B:FB:DC:39:2C:52:EC:15:2A:62
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e1:2d:04:79:88:ac:e6:f5:d1:0d:95:23:0c:9f:f8:d3:a4:
27:86:6d:a0:84:c9:e5:76:bc:04:d0:51:ce:df:d7:c4:e6:35:
7d:c8:94:90:02:15:71:45:06:ae:26:6d:ea:8c:5d:a9:43:05:
9a:bd:42:9f:f3:32:9f:54:ec:2d:0c:68:a0:fc:80:10:dc:cf:
f9:28:f6:70:ba:c2:19:e0:81:82:6a:15:01:03:98:b9:2a:ae:
ec:11:60:97:cb:a3:d1:db:ae:08:91:66:b0:4e:ca:5f:f8:b3:
46:5a:3c:66:ac:3d:f6:ee:6e:46:c3:3c:04:54:df:31:62:68:
e7:6f:a2:84:da:75:7c:06:b5:9f:94:6f:40:45:1d:8a:df:66:
03:7d:8c:51:b0:c4:cc:0e:d6:36:47:d5:88:bf:31:f3:e0:d4:
6d:e9:f4:af:f0:84:27:d1:0b:6d:9b:d0:14:fa:f8:ee:a5:fc:
16:5e:20:89:df:38:1f:64:77:a7:27:91:09:ea:67:03:92:6c:
d9:2f:8d:f2:e8:58:6d:2e:7f:40:20:5b:6b:d0:e6:d2:3b:75:
55:33:b8:0a:c9:db:a5:9a:61:ed:82:73:89:1d:2a:8b:54:cd:
3f:85:82:4f:9a:6d:f2:24:8b:ad:cc:c8:72:83:88:87:38:13:
51:17:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:43:31 2025 by rpki-client