Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: 5EjMAqZJuONknNBxF7ZDrFU2wQ0qvUya1rUVmWTauCw=
Subject key identifier: 45:3A:65:FB:E1:FA:7C:33:65:4B:8B:8F:B4:23:33:E6:BD:E8:89:3A
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 0197526B231140B898D7AD5E7D5B24B6E3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 0D5A
Signing time: Mon 09 Jun 2025 02:00:42 +0000
Manifest this update: Mon 09 Jun 2025 02:00:42 +0000
Manifest next update: Tue 10 Jun 2025 02:00:42 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: 9uDVjUGX8ZNcYullKokZWqYBsKJSBgjzLXbtxASwa3g=)
2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:23:11:40:b8:98:d7:ad:5e:7d:5b:24:b6:e3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Jun 9 02:00:42 2025 GMT
Not After : Jun 10 02:00:42 2025 GMT
Subject: CN=453a65fbe1fa7c33654b8b8fb42333e6bde8893a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:58:7d:f0:61:ad:c8:46:96:00:88:88:70:
d2:9c:08:b1:85:76:c1:3b:66:14:5c:85:90:bb:da:
1b:aa:4a:50:47:7c:cf:5c:11:cf:e2:85:67:f3:c6:
8d:b6:1e:83:b6:3f:bb:a6:cd:73:ed:d5:3c:48:78:
af:0b:5f:51:b8:32:11:bd:ae:0f:21:7d:b2:7d:e7:
8c:a3:08:ba:7a:a9:24:e6:bc:e4:22:40:80:01:e6:
2f:d2:47:5c:9f:51:51:f3:8d:a6:26:c1:f7:db:25:
bf:f9:6c:8c:5e:95:53:40:b4:6f:db:af:f7:70:f2:
1b:7e:f2:4c:18:c9:46:a0:f6:2b:96:6f:62:5d:bf:
3d:f9:18:a2:c3:36:61:23:4c:e7:fb:2e:d5:30:bf:
f8:0c:93:dc:ec:e2:3f:e5:8d:72:94:79:9c:dd:a1:
ec:95:a8:6d:e6:20:c2:4d:5e:a8:c2:45:4c:17:56:
e7:2e:57:93:2a:77:42:e4:34:7b:a7:ad:0a:4e:4d:
d3:5b:c4:89:d1:27:82:e4:7f:4e:c9:ad:cc:89:29:
0d:cd:1e:c6:ec:2d:1e:60:0e:b3:28:0f:20:9e:6d:
7e:90:83:1e:2f:de:0c:49:37:93:a7:f8:c5:c0:c0:
61:38:6a:06:3d:0e:76:27:37:19:db:1e:98:e8:31:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:65:FB:E1:FA:7C:33:65:4B:8B:8F:B4:23:33:E6:BD:E8:89:3A
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ea:a7:ae:14:1a:f7:36:22:a2:8f:cb:ab:14:67:91:ee:98:
82:42:81:92:07:1f:e8:35:a6:09:2d:12:28:0c:41:c9:98:9f:
fa:b8:41:8d:06:ca:e0:48:5d:cb:31:44:4d:ca:94:a1:fd:f7:
1e:59:25:95:d7:0e:c1:1b:d5:68:9a:62:8c:3c:de:65:e4:e3:
b2:91:f9:29:a0:92:f1:7d:bc:af:2d:2b:30:f0:09:49:ec:92:
4e:76:bc:c6:eb:c2:4c:c5:48:bf:08:45:4f:67:27:cf:62:b2:
3b:91:74:1c:45:52:32:a8:b9:de:16:37:4c:bc:82:21:28:3c:
e4:5c:5f:4f:e8:2e:9d:7b:0a:d4:93:a5:17:a8:72:f3:40:58:
ac:ef:66:cb:11:a9:66:6b:93:ec:03:ba:de:65:93:a4:68:18:
a2:36:c6:52:36:79:15:d0:0b:16:9e:20:45:c6:14:b5:57:db:
41:3b:31:68:bc:1d:f3:74:d8:d9:f8:70:16:07:75:f4:b7:9c:
57:49:5d:92:79:1b:cf:6d:41:69:28:0e:20:69:a0:23:97:e9:
9f:7e:da:46:47:12:2f:b5:55:1e:a7:91:3a:e3:ef:a5:1a:b7:
f4:1a:f5:c9:33:9f:86:0e:eb:6c:a9:b3:29:0e:04:41:3e:79:
ef:b6:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:53:58 2025 by rpki-client