Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: B/g6uBk26zaYEPApFg8aAbg9YTIY3QDQPDxAb8YaWBg=
Subject key identifier: 6F:B0:B4:5C:90:32:7D:25:71:C6:88:7E:0C:1E:07:19:8A:CA:4F:CA
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 01975E38BEB9079A26D1B674787D4655BEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 09:01:06 +0000
Manifest this update: Wed 11 Jun 2025 09:01:06 +0000
Manifest next update: Thu 12 Jun 2025 09:01:06 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: DFfcUqaQPPClHgl5gEP5zBxDcp8kC58/fiStLR6RhKE=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:be:b9:07:9a:26:d1:b6:74:78:7d:46:55:be:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jun 11 09:01:06 2025 GMT
Not After : Jun 12 09:01:06 2025 GMT
Subject: CN=6fb0b45c90327d2571c6887e0c1e07198aca4fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:b5:76:71:bc:26:75:f5:5c:ad:fe:d5:6f:
13:f3:a9:b0:04:e3:4f:7c:5c:6c:3a:59:d5:85:49:
05:91:bd:48:e0:3d:9f:d8:43:0b:cc:2e:89:40:5f:
f8:da:ef:4e:a1:ff:4e:17:6d:6f:43:3d:45:c9:f1:
62:48:1b:f1:22:07:ec:8b:93:85:79:d9:32:f0:98:
54:09:f2:53:c8:b9:a2:1a:3b:42:49:7c:13:ce:03:
c9:0a:d4:56:8b:5a:d8:03:2f:a0:59:e5:e3:e6:40:
dc:5f:1d:4f:25:77:8d:9f:12:89:39:1d:ad:65:95:
09:0a:fd:6d:fe:7a:4b:02:65:06:cc:48:cc:63:28:
96:cc:1a:90:27:45:36:be:8e:ad:4b:47:fa:2a:38:
07:49:a8:36:b4:b3:50:f5:df:58:90:fc:e0:bf:1d:
eb:1d:9b:ed:7b:13:65:79:5c:1e:8d:b7:29:33:ed:
f7:19:40:fb:be:50:d6:a7:f7:ce:09:78:ea:1a:cf:
e1:06:76:5c:d9:ad:b4:b3:cc:e8:57:e7:bc:1b:c9:
f4:5f:bd:21:40:45:a3:be:d2:3a:51:f0:a3:87:6b:
7b:ac:60:d1:34:61:ee:39:6d:16:a2:54:d5:ef:a0:
bb:d5:84:6e:cd:c0:41:11:9f:86:25:0e:82:aa:e4:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B0:B4:5C:90:32:7D:25:71:C6:88:7E:0C:1E:07:19:8A:CA:4F:CA
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7e:aa:9a:37:ae:2c:de:58:45:93:63:69:85:e1:cd:51:b6:
62:be:ec:cb:97:e1:6a:e8:62:45:88:bf:e6:67:ce:19:d3:c2:
8d:32:4c:f2:86:d2:dd:b3:01:52:f3:38:63:87:12:69:17:32:
db:30:86:7c:8d:04:9e:f6:f1:67:00:e0:b3:2d:30:fc:69:8c:
6a:a9:71:02:2c:a6:ff:38:ab:04:fd:1f:c1:d0:e4:eb:bc:22:
41:08:0f:43:d7:4e:91:80:a2:2f:7e:a3:6d:f3:1a:21:6f:68:
f1:fe:4f:e7:cb:ea:8c:b5:db:d3:7d:4e:5c:65:3b:87:27:ab:
4b:5c:de:1a:39:22:ea:53:c8:f3:96:b6:3a:49:eb:f5:4b:2c:
3a:5a:81:2e:47:b4:e7:fc:8e:ba:ea:f5:ce:74:14:4e:0a:b1:
f7:72:cc:2b:99:b3:9b:ad:b4:02:59:ef:68:8c:d2:05:19:94:
58:2e:9c:f1:8d:0f:79:01:e4:50:90:4a:83:f7:ca:fe:70:28:
a6:73:93:ee:62:aa:2b:ea:78:1f:50:b9:e6:12:04:12:22:f0:
94:e6:87:43:dd:78:24:75:3d:fd:1e:fa:a0:bf:7f:da:98:64:
c2:ae:9d:85:d7:cb:10:59:ba:4d:e2:e9:77:d5:a4:83:9d:8e:
4b:3c:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:15:14 2025 by rpki-client