Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: EP30KQPhWoYCnEldCakSQpjuXVqEb+07uXQmMGUAOD8=
Subject key identifier: F0:A3:8A:BB:B2:01:CC:AE:97:FD:77:6B:61:D1:D2:3A:9A:30:5C:BF
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 01974931411A3DFF8CC3074DBD18E021C34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 05FA
Signing time: Sat 07 Jun 2025 07:00:54 +0000
Manifest this update: Sat 07 Jun 2025 07:00:54 +0000
Manifest next update: Sun 08 Jun 2025 07:00:54 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: 0lx3olwUYWP0njQIiQC8l3kuOPveh3XP4Vw3a0vfcoQ=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:41:1a:3d:ff:8c:c3:07:4d:bd:18:e0:21:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Jun 7 07:00:54 2025 GMT
Not After : Jun 8 07:00:54 2025 GMT
Subject: CN=f0a38abbb201ccae97fd776b61d1d23a9a305cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:b7:aa:e4:65:e2:89:8a:c6:fc:b6:da:23:
90:41:a8:6a:cf:66:86:4b:02:71:a9:0c:67:b3:84:
93:e2:62:a4:0c:8e:92:49:51:8b:65:cd:44:ed:fd:
52:a1:0a:e1:b4:4b:79:dc:29:fa:d0:0e:0a:f1:46:
c9:61:33:87:62:3a:4c:f7:7c:85:8a:5b:f7:57:43:
d1:3b:37:85:56:bb:00:84:b9:f8:c6:9c:f1:68:a3:
5a:41:e2:55:ba:9c:19:a8:0d:07:63:c7:e9:46:9e:
6e:a9:3a:05:f9:5f:4d:50:75:cf:32:18:24:03:3d:
60:d1:b7:1b:24:ed:79:b6:82:f8:96:e0:01:8e:39:
2a:e5:f3:4b:01:d3:1e:73:42:02:60:cd:73:4d:1d:
55:da:0b:a3:c1:b7:53:57:aa:d6:dc:c1:e3:78:7b:
18:70:5d:28:89:6e:d7:02:69:72:98:a3:60:98:bb:
e0:08:5c:1b:20:20:f3:fd:df:4c:27:6d:c4:4e:20:
ec:e1:63:40:34:1f:82:2a:4d:71:c8:99:ab:42:2d:
28:f6:d9:e3:6e:a7:cf:81:7d:5b:76:19:09:91:ed:
10:b9:1e:db:aa:f2:37:48:6d:e0:f7:c4:8d:0c:3d:
d3:e1:ac:e8:21:da:89:45:44:50:3c:79:50:0d:36:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:8A:BB:B2:01:CC:AE:97:FD:77:6B:61:D1:D2:3A:9A:30:5C:BF
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:99:d9:a0:94:b7:18:52:64:6d:76:8e:af:b9:38:96:85:10:
63:e3:b3:11:25:41:c4:54:e8:53:6a:e1:21:d3:ff:9d:9e:d6:
d3:67:d6:6e:b5:70:39:97:ae:4b:2d:19:7c:96:fc:53:a0:88:
3a:c6:b3:64:ff:fd:c8:4e:c1:7d:f1:47:7a:7d:f0:75:45:43:
0e:d8:75:35:09:1d:14:33:10:54:3a:64:67:9e:8c:45:8a:71:
92:4e:94:99:99:ef:49:39:92:e9:55:6a:7b:d1:9e:5c:6a:7f:
17:1a:35:10:c0:53:7d:79:69:35:48:09:60:e8:c7:a1:f8:20:
3c:f8:54:28:c6:e2:64:2b:66:ec:d3:5a:80:a2:bc:d0:69:8a:
4b:bc:93:9b:26:ed:d7:80:5b:72:44:76:2d:24:d4:61:93:fe:
b0:bd:71:18:44:3d:cf:57:72:22:8e:63:d9:60:6e:02:0f:ea:
f9:b4:81:ca:e8:64:48:eb:f9:f8:78:a6:81:ef:97:dd:9c:17:
d9:5b:21:b1:87:c5:2f:1f:3a:13:5a:c5:7c:66:02:69:04:6e:
51:19:dd:2a:c1:68:e0:40:15:39:04:25:fb:1a:a8:e9:bf:d7:
12:5d:f8:97:63:e8:81:6b:ea:e4:37:88:19:bb:a3:af:58:a5:
7a:85:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:15 2025 by rpki-client