Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: 1m5kGefedkl/O47rUmkJe7oXTeMbDh5vwmQ/ZOL63LI=
Subject key identifier: B6:0D:C7:EF:E2:01:41:36:77:00:7D:52:AA:BD:52:20:6D:AE:F0:55
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 0198865681DBC33D90DE3910731EBA1081FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0D08
Signing time: Thu 07 Aug 2025 21:01:12 +0000
Manifest this update: Thu 07 Aug 2025 21:01:12 +0000
Manifest next update: Fri 08 Aug 2025 21:01:12 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: mhl/3KjqGEWLO641nVCRICEIu+wNIjquGTaarQJvN78=)
2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:56:81:db:c3:3d:90:de:39:10:73:1e:ba:10:81:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Aug 7 21:01:12 2025 GMT
Not After : Aug 8 21:01:12 2025 GMT
Subject: CN=b60dc7efe201413677007d52aabd52206daef055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:e9:3d:99:ee:b1:df:a6:1b:7f:1a:79:5e:
1c:94:ca:97:31:ae:fa:ff:4d:05:a2:30:d3:f4:ce:
c6:d7:87:04:13:a7:02:0a:8a:df:af:b2:43:79:26:
d2:bf:cb:90:b1:9d:c5:c4:99:0a:a3:a4:a0:8f:01:
62:d7:6e:d5:f6:5a:c8:c8:9b:2a:9f:61:d8:58:0c:
6f:b1:3f:69:dc:22:71:b1:88:34:a4:c5:0e:98:67:
5f:d3:10:25:22:2a:a2:6b:ee:2f:1a:c7:07:af:3a:
31:c8:04:dc:5b:9a:ff:45:82:21:82:92:4e:4e:e7:
93:21:9b:78:63:07:56:4b:ad:10:5b:67:6b:13:97:
bb:08:f3:96:98:13:be:89:34:04:0a:fa:13:60:18:
80:29:34:1a:cd:bf:5c:e5:59:5b:b0:6c:55:16:77:
a0:91:7f:b1:a9:89:4f:3a:eb:69:c8:a3:c8:73:ac:
b2:33:ae:14:fb:70:65:35:0a:8b:a5:77:9f:6d:28:
5b:52:9f:4c:0a:0f:69:6c:ea:8a:52:65:e6:0d:da:
47:ae:34:13:95:91:79:fd:c8:36:a7:3b:87:60:07:
91:33:8a:eb:3e:e9:a0:21:ba:b3:f9:ca:ad:37:99:
79:e4:32:30:42:f0:23:92:25:fa:70:e0:4e:ad:4a:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:C7:EF:E2:01:41:36:77:00:7D:52:AA:BD:52:20:6D:AE:F0:55
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:84:50:16:20:b1:2b:cd:8b:9e:3f:c3:d7:b7:01:2d:82:57:
3e:ba:e1:f7:d5:35:3b:ef:89:b9:7d:28:09:5f:92:b1:5f:70:
ae:9b:ec:73:56:a7:af:91:b7:bb:52:a5:7b:41:10:e9:25:00:
1b:16:ee:ed:d0:99:fe:10:ed:6f:8a:c9:d2:33:2d:cf:f7:b3:
d8:29:7c:43:05:d4:df:2e:79:4d:4b:1b:c7:a7:92:ef:b7:c2:
52:d0:b4:61:f5:2a:c5:62:3c:a0:1f:57:4f:f9:aa:b9:88:52:
b5:81:6f:7d:4c:28:51:f6:bf:03:1c:51:1c:88:16:d3:fc:d4:
f6:a5:58:18:7c:c7:c3:6d:27:b5:00:1f:e3:d3:26:f2:dc:bc:
2e:08:19:38:90:83:13:ea:67:41:5d:83:77:81:3a:51:c9:5f:
87:80:4e:c3:0f:24:87:e5:9d:4f:67:c1:a2:5f:df:09:f0:6a:
9e:91:e9:68:c4:1d:db:45:a3:ba:dc:1b:07:1c:75:03:54:1e:
50:e5:54:c6:19:f2:fb:b9:47:d0:bd:a6:a0:2d:9f:58:48:7d:
fa:00:90:dd:8b:57:d1:8c:58:73:d9:b5:4a:a8:fa:69:58:4e:
40:56:10:54:bc:00:f8:c2:19:00:dd:5e:f8:8e:1b:f3:eb:17:
d8:53:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:05 2025 by rpki-client