Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: B+IOhlqXpZnPaPK+r6zxsgBNakWd2E7FwRbQL4ePYkA=
Subject key identifier: FD:DA:A2:F7:75:7A:F3:6B:AE:E3:17:5D:14:F6:4D:98:66:48:C8:BB
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 019753EBCD6BDF5080620CC1E67A9E5D7252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 09:00:51 +0000
Manifest this update: Mon 09 Jun 2025 09:00:51 +0000
Manifest next update: Tue 10 Jun 2025 09:00:51 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: oZXp6GZbAL/wmUYJWhqKV7jTP5FIRj08H1/4RblEhIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:cd:6b:df:50:80:62:0c:c1:e6:7a:9e:5d:72:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Jun 9 09:00:51 2025 GMT
Not After : Jun 10 09:00:51 2025 GMT
Subject: CN=fddaa2f7757af36baee3175d14f64d986648c8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:9a:b7:ec:4f:5f:fc:69:14:f5:91:4f:cd:
60:31:ae:33:b9:da:11:cc:10:21:06:c6:57:44:36:
5e:f2:e1:7c:d2:9e:96:cb:ab:f9:e1:77:d1:a1:46:
6e:1a:8a:01:5d:8b:02:a9:2e:04:fd:5f:a1:97:1a:
2d:ab:87:f5:ca:ad:05:b9:60:01:03:6f:f4:8c:ef:
cc:7b:7b:d3:57:11:5b:d3:1c:d4:d8:84:14:1c:37:
d0:a8:a7:18:9b:48:b5:91:f7:0a:57:d0:7c:07:61:
bf:49:10:f2:0f:fd:6d:98:00:0f:f2:e5:94:25:3b:
f8:7c:f5:c6:bd:d1:f9:42:65:a1:fe:65:5a:93:df:
0c:60:0c:5e:4b:0c:c7:91:e1:28:50:50:cc:b1:2d:
5e:ea:ab:2c:fb:86:24:74:b2:6c:fc:2c:a6:91:f4:
23:df:b9:c8:2e:ba:c7:a4:19:d5:13:0a:3e:e3:06:
b5:ac:79:f3:d4:93:22:0d:a2:a0:1a:bf:2a:2b:21:
22:1c:c7:d5:c9:08:c9:ce:dc:13:03:80:8c:b2:a4:
f9:c7:a7:ce:40:99:a7:b8:c7:d8:25:c6:e8:5c:50:
57:b0:14:72:49:e6:6c:b2:90:51:e7:94:2c:10:37:
0b:a3:c8:66:12:aa:4d:00:15:eb:86:f4:53:d6:fb:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DA:A2:F7:75:7A:F3:6B:AE:E3:17:5D:14:F6:4D:98:66:48:C8:BB
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e3:ec:70:b6:0a:8b:51:98:c0:b8:53:0f:c9:34:51:43:36:
b3:0c:ff:7c:24:9c:6c:15:5c:b0:34:d5:b3:2b:75:7c:f3:b6:
08:a7:25:7b:b5:b1:9c:5d:f1:84:51:ef:54:19:e6:9d:29:50:
34:ac:8d:6d:24:82:40:94:ed:e4:f3:fe:ca:7f:e5:36:8d:1a:
36:ec:d3:18:17:cd:f3:d3:7c:36:85:6e:09:4f:57:85:95:55:
6e:1a:4a:dc:b9:85:ea:d6:07:4b:e5:e9:91:6b:8c:cc:b0:be:
f2:74:7f:3b:ed:ba:3d:d7:66:ff:f1:8a:f9:78:41:28:d7:71:
be:72:4a:2f:ae:a0:30:f5:c3:3c:34:7b:c3:ce:39:e6:df:25:
0f:3a:71:b7:60:ea:f1:b2:2c:d5:81:4f:e2:8e:1a:23:5a:2d:
7a:ea:a9:cc:86:f7:02:7c:a8:aa:e8:68:11:54:17:5e:fa:4b:
69:9e:53:bc:59:06:82:32:6d:60:95:c3:4b:0c:5f:de:1d:56:
5e:e5:e4:83:96:47:de:f8:05:a1:75:1b:c7:b9:36:d8:80:9a:
4c:c8:22:3b:00:b9:75:53:aa:c7:97:c3:87:20:fe:c9:db:17:
bb:0e:70:3a:9e:b1:77:78:af:65:0a:08:44:dd:f4:b4:e0:db:
2a:4a:8b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:35:09 2025 by rpki-client