Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: hDNKpKg524ByvbSBEirleCbo6qEuzOmbojpN1B5HvCs=
Subject key identifier: 84:9F:90:60:D3:41:B5:1D:5B:65:C8:24:7B:C3:B4:5A:A9:CF:A6:F9
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0199221E7B10EF36589506334F09FE5B19E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 0F21
Signing time: Sun 07 Sep 2025 03:00:46 +0000
Manifest this update: Sun 07 Sep 2025 03:00:46 +0000
Manifest next update: Mon 08 Sep 2025 03:00:46 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: zv4jTr6huRPteUzstYFVAjnrzjZf2MtIOVFduZhVaLY=)
2: yAX7kXvWm92680l11R9uBAFGQnY.roa (hash: PzHY/wJJLxlCCbW9yVair3ky9z1XDsrY5r4NVGBKmjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:7b:10:ef:36:58:95:06:33:4f:09:fe:5b:19:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Sep 7 03:00:46 2025 GMT
Not After : Sep 8 03:00:46 2025 GMT
Subject: CN=849f9060d341b51d5b65c8247bc3b45aa9cfa6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:b1:36:24:72:2b:59:f0:a8:35:c6:84:84:
85:47:32:4b:8d:2b:d7:63:8c:0f:75:5b:d2:2a:3f:
c2:ec:8e:36:29:29:41:d4:c2:97:bf:3e:1e:ec:08:
8f:98:5e:e5:ce:8f:d1:f6:80:85:c1:6b:f7:e3:60:
bb:fd:85:fc:c2:3f:7f:2e:ce:30:27:b8:87:4b:5f:
46:a1:89:ce:59:cb:e5:21:f2:e0:be:1f:a9:4c:d4:
09:58:8b:97:c9:f6:53:29:46:f5:f0:8e:ba:5c:fc:
3e:99:f0:19:23:da:63:b2:8d:7d:9d:d0:b8:b2:14:
9d:41:1a:65:08:9d:83:63:98:79:3d:05:45:13:fb:
e4:e2:2c:fb:5e:30:f1:c9:20:8f:4f:de:49:ba:35:
7e:93:99:e3:0e:56:30:e2:e8:55:32:ec:21:2f:a8:
67:04:34:f5:9d:58:ba:75:a8:4a:5d:be:3f:7a:86:
a5:81:13:d8:06:1a:61:39:d0:27:e2:80:9e:af:51:
e5:ee:ce:fa:6d:5a:75:ac:9e:bd:1f:84:09:10:72:
aa:4d:b0:6c:c2:32:96:7d:cd:3a:60:46:bd:fc:58:
91:23:06:45:3d:79:49:43:75:33:e1:12:7f:28:70:
78:91:7d:48:01:71:52:93:aa:4b:57:5a:6b:d8:92:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:90:60:D3:41:B5:1D:5B:65:C8:24:7B:C3:B4:5A:A9:CF:A6:F9
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b1:c4:68:12:db:20:e7:19:9d:c5:a2:29:47:1d:94:52:3f:
2b:66:0e:de:bb:e0:f8:95:9f:3c:a8:1b:7b:1a:54:ef:8e:b7:
d7:7d:f0:24:04:e5:68:8c:0d:b0:45:de:fd:4a:ee:f8:b1:18:
f3:91:a7:45:ba:c7:ba:cd:eb:75:57:fe:4a:d2:50:82:23:bb:
d8:79:d5:5a:13:95:5c:3c:5c:06:10:ad:5b:40:a8:73:d3:14:
82:04:4a:6c:9d:e3:64:c4:92:40:50:89:80:d3:83:ae:5a:43:
f0:da:21:03:73:60:97:83:27:ca:ae:cf:e6:66:1d:da:06:12:
9b:b3:24:b2:f5:84:1b:86:93:b0:48:55:f1:d4:d3:1c:55:d0:
34:c5:f7:c7:e1:b3:42:b2:17:9e:7c:f8:bd:14:b8:f7:d1:81:
c6:ba:9a:73:8f:ed:15:1c:95:b3:d9:03:a3:2a:86:aa:24:d2:
1f:32:e6:2f:f6:13:9c:db:4a:22:58:95:8f:6e:cf:0e:bf:0e:
a4:b1:ca:9b:bb:81:91:b4:55:a6:10:66:a0:f2:02:1f:1c:1c:
f4:38:e8:54:cf:bc:55:53:21:8a:05:60:11:f7:fe:bb:50:9c:
d0:3c:e3:80:47:99:9b:47:09:dd:03:dc:6a:c2:25:dd:fd:e5:
e8:cc:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:01 2025 by rpki-client