Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: IgQOLVSDy2FZdVd/mx0Yr/4l+C8IekuEXirGF+INruM=
Subject key identifier: EE:47:81:73:63:13:DD:AB:55:0F:21:1B:EF:D9:95:49:C3:81:68:72
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 01974CD6EB5A8E8FB1C9BC0482800A25CBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 0E2E
Signing time: Sun 08 Jun 2025 00:00:42 +0000
Manifest this update: Sun 08 Jun 2025 00:00:42 +0000
Manifest next update: Mon 09 Jun 2025 00:00:42 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: 9RxY7XW35H5HvSoyx1mPWKNvMQiMQDZQTlP+wYhxmsg=)
2: yAX7kXvWm92680l11R9uBAFGQnY.roa (hash: PzHY/wJJLxlCCbW9yVair3ky9z1XDsrY5r4NVGBKmjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:eb:5a:8e:8f:b1:c9:bc:04:82:80:0a:25:cb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jun 8 00:00:42 2025 GMT
Not After : Jun 9 00:00:42 2025 GMT
Subject: CN=ee4781736313ddab550f211befd99549c3816872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:8e:bb:41:c9:6c:bd:13:d3:25:84:f9:80:
f7:12:b0:7b:58:10:07:10:d3:62:06:1a:34:ad:c6:
1a:6a:e1:3b:7a:fb:4b:bf:e4:41:b3:82:e1:b5:46:
7f:b7:47:ed:4c:f3:e3:d4:65:a0:f6:18:07:19:d8:
a6:a9:8d:cf:40:7d:a5:e1:cb:82:b1:52:98:cc:9e:
de:d2:16:47:1e:bd:d2:b4:64:89:28:43:70:7a:be:
77:b2:ca:e7:bd:9a:15:7f:7f:33:69:84:94:42:49:
d6:9a:f5:a3:37:ae:df:47:e8:38:1f:35:2f:b3:30:
1b:83:8c:e5:59:33:59:6e:16:66:fd:de:6b:a4:80:
48:1d:45:fd:36:27:67:db:36:b8:3e:45:48:76:06:
84:18:6f:35:8e:7a:a1:3e:3a:08:be:e3:08:41:82:
fd:92:41:00:b1:2f:16:61:33:58:d5:d0:1a:d7:8e:
4e:44:5a:a6:87:e5:d8:17:ce:f5:da:78:ff:fe:0c:
e1:35:17:2e:86:21:86:00:9a:ce:01:46:56:78:fe:
fc:63:4d:50:b4:e2:92:c4:1d:17:64:d4:d7:16:e3:
be:cd:58:48:8f:a4:21:99:31:1a:35:91:a3:d1:37:
df:e1:31:c3:56:a1:2f:dc:a2:dc:e2:87:48:11:5c:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:81:73:63:13:DD:AB:55:0F:21:1B:EF:D9:95:49:C3:81:68:72
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:14:cb:bc:76:08:a9:9e:4c:d4:c1:91:d9:15:b4:1a:9c:af:
87:fa:db:8e:41:95:1a:fe:81:8f:04:91:44:7f:ce:38:76:68:
22:5b:e8:6b:87:81:87:cf:9b:4b:7f:f8:61:b0:f9:2f:35:1a:
28:d8:9e:d3:2c:9e:b2:74:66:4c:f1:3f:88:79:85:4e:95:2b:
92:2c:ca:02:26:ab:ce:cd:f2:8b:4d:3e:8f:6e:23:27:b9:5e:
37:e4:57:0f:e2:42:fc:ae:fc:1b:18:9f:1f:82:76:72:38:b3:
ff:b7:96:d5:d8:b1:87:d1:6d:01:78:c0:b1:fb:f8:e1:c3:05:
43:2c:2a:9b:0c:43:0e:ec:b3:41:03:e3:10:3b:1d:0e:9a:d9:
30:c7:2f:d0:51:26:04:db:62:40:e8:b7:f9:5e:99:22:40:4c:
82:61:a7:99:22:01:43:d5:9a:6a:23:33:61:bf:7b:ee:02:d9:
5b:1b:45:2a:4d:d5:2c:0f:a0:d5:d4:a9:c9:3a:6a:9a:ca:66:
e3:3b:f2:77:73:b8:19:b6:1f:6b:ad:72:0b:5d:fb:2f:25:56:
5e:89:ef:7d:a0:a4:b4:a1:0e:1e:14:c2:94:82:5b:da:7c:b3:
d8:74:15:79:e4:42:b9:2f:fb:6f:60:ac:ad:e9:60:4d:3f:96:
62:2f:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:57 2025 by rpki-client