Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: Nv/T0KCKrUOHNwGv+xccKooDDZuwrjtWjvHZELutsH8=
Subject key identifier: 68:5C:02:0C:A7:8E:93:3D:C5:C3:41:53:BA:93:FB:62:69:66:70:38
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 01965613D1B2237CA326C5D6721489F8CD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 1442
Signing time: Mon 21 Apr 2025 02:01:01 +0000
Manifest this update: Mon 21 Apr 2025 02:01:01 +0000
Manifest next update: Tue 22 Apr 2025 02:01:01 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: 2SxlJae+W+4Kmw8nhlARYzhz1jD5mjNgTgTlcAETFdE=)
2: X0NMFv3xuHRSXYMGKUXV8IKykec.roa (hash: OjOw3rcSA/T5JCD0NPBFtVQyCjbWRUE+EyaG3m+jzio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:d1:b2:23:7c:a3:26:c5:d6:72:14:89:f8:cd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Apr 21 02:01:01 2025 GMT
Not After : Apr 22 02:01:01 2025 GMT
Subject: CN=685c020ca78e933dc5c34153ba93fb6269667038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:7e:4a:1a:a1:53:5d:cc:bd:13:cb:c0:8d:
ad:03:bb:57:68:da:4f:57:b4:33:45:a2:19:13:b1:
34:d0:75:22:02:9d:e7:9f:cd:99:ca:c6:35:57:2c:
c4:d0:0e:1f:0a:84:67:ef:19:44:c2:5c:0f:63:49:
9d:d7:f7:12:e4:ec:67:05:c8:42:d0:ab:3a:98:7a:
77:6e:07:6e:30:01:cb:9f:ab:6f:31:c6:f7:ba:c2:
6e:1c:54:a7:e1:22:c5:31:50:38:65:52:19:ee:18:
92:9e:b6:70:05:86:63:fb:23:f6:a1:72:f2:2c:04:
a8:60:cd:58:d1:bc:c1:9b:f9:6e:c3:f5:6f:21:2f:
49:8a:38:92:30:40:83:01:19:6c:6e:f7:b8:3d:b4:
96:8b:52:bc:64:c4:f0:ca:8d:63:71:96:60:8c:c1:
9a:aa:9f:a2:32:42:ac:3a:7d:b5:28:bf:5e:7c:75:
d1:ce:7a:80:11:a6:96:80:51:9a:34:bd:0b:7d:31:
61:14:7e:58:40:4d:71:db:1c:ec:df:e7:4d:dd:10:
a5:74:4e:f0:62:00:64:5f:44:ba:aa:10:c2:ba:52:
df:40:12:00:d1:4a:0c:c5:40:5a:ef:de:7a:86:bf:
53:fc:6b:9d:06:ca:1e:75:96:aa:50:a2:91:1c:47:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:02:0C:A7:8E:93:3D:C5:C3:41:53:BA:93:FB:62:69:66:70:38
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d1:6d:3c:14:1f:49:6f:96:f2:07:c8:34:d6:f4:c2:a4:2b:
35:44:ff:b9:f8:b0:d0:4c:ff:17:1c:de:ae:98:58:0e:ca:6c:
56:9b:d5:ee:69:45:59:aa:05:d8:5e:3a:43:4a:93:ae:27:cf:
85:d6:c6:b1:a0:66:ef:0b:18:96:8a:8a:cc:8e:97:89:7a:08:
7e:6c:c8:5d:89:b0:7e:a3:54:76:aa:57:25:2a:43:60:6f:c5:
06:cf:f2:ef:02:49:1c:72:53:5a:e7:d6:bf:1c:74:12:cd:84:
eb:51:bb:f8:90:74:da:b7:02:fd:cd:7b:73:87:8f:f7:41:de:
ea:20:f9:3f:7a:91:57:3d:a6:f1:0b:ab:d8:c3:70:08:d1:f3:
ba:4a:4f:f7:8a:68:a1:ee:ce:ea:5c:73:eb:50:69:8b:08:4d:
14:09:a8:61:64:16:74:f4:ad:89:6f:2d:f7:0a:e3:9f:9d:5f:
ec:ba:d4:07:ef:10:f4:e3:d3:d1:09:fb:6a:10:53:63:de:50:
a1:85:f3:a0:01:70:65:c7:ff:f0:da:a8:f7:c7:1e:8c:7e:12:
74:82:87:ee:6e:35:18:a0:13:62:47:4f:f6:1d:ab:43:9e:31:
fe:ac:5b:d8:d6:d9:97:b4:43:b5:80:b8:e6:32:08:e5:f9:e3:
4f:36:b9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE9GyI3yjJsXWchSJ+M2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODE0YTVmMDhmYjQ3NzExZDcxNjBiMDI3Zjk5NmRmYjYx
MmYwNDUwHhcNMjUwNDIxMDIwMTAxWhcNMjUwNDIyMDIwMTAxWjAzMTEwLwYDVQQD
Eyg2ODVjMDIwY2E3OGU5MzNkYzVjMzQxNTNiYTkzZmI2MjY5NjY3MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcV+ShqhU13MvRPLwI2tA7tXaNpP
V7QzRaIZE7E00HUiAp3nn82ZysY1VyzE0A4fCoRn7xlEwlwPY0md1/cS5OxnBchC
0Ks6mHp3bgduMAHLn6tvMcb3usJuHFSn4SLFMVA4ZVIZ7hiSnrZwBYZj+yP2oXLy
LASoYM1Y0bzBm/luw/VvIS9JijiSMECDARlsbve4PbSWi1K8ZMTwyo1jcZZgjMGa
qp+iMkKsOn21KL9efHXRznqAEaaWgFGaNL0LfTFhFH5YQE1x2xzs3+dN3RCldE7w
YgBkX0S6qhDCulLfQBIA0UoMxUBa7956hr9T/GudBsoedZaqUKKRHEfkswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhcAgynjpM9xcNBU7qT+2JpZnA4MB8GA1UdIwQY
MBaAFA2BSl8I+0dxHXFgsCf5lt+2EvBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84YTY4NGItMDM3NS00MGU1LWI3MjYt
Y2U3OTg1YjU2MDkzLzEvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84YTY4NGItMDM3NS00MGU1LWI3MjYtY2U3OTg1YjU2MDkz
LzEvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9FtPBQf
SW+W8gfINNb0wqQrNUT/ufiw0Ez/FxzerphYDspsVpvV7mlFWaoF2F46Q0qTrifP
hdbGsaBm7wsYloqKzI6XiXoIfmzIXYmwfqNUdqpXJSpDYG/FBs/y7wJJHHJTWufW
vxx0Es2E61G7+JB02rcC/c17c4eP90He6iD5P3qRVz2m8Qur2MNwCNHzukpP94po
oe7O6lxz61BpiwhNFAmoYWQWdPStiW8t9wrjn51f7LrUB+8Q9OPT0Qn7ahBTY95Q
oYXzoAFwZcf/8Nqo98cejH4SdIKH7m41GKATYkdP9h2rQ54x/qxb2NbZl7RDtYC4
5jII5fnjTza5oA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:36 2025 by rpki-client