Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: 7CKoYCF9rrvs3xPesTUUncBzPPzBpX4Dhvzj3cd1xc4=
Subject key identifier: EC:EB:06:FD:6D:B8:3E:C2:8C:9F:B4:C5:6A:5F:AE:9F:76:C5:51:67
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019769CE8A9226E61F53DE2C150C34627117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 15:00:32 +0000
Manifest this update: Fri 13 Jun 2025 15:00:32 +0000
Manifest next update: Sat 14 Jun 2025 15:00:32 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: yv4GUokiDE65U5vRqlAOVbv5i8mLbCtsMmHC2+llBc8=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:8a:92:26:e6:1f:53:de:2c:15:0c:34:62:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jun 13 15:00:32 2025 GMT
Not After : Jun 14 15:00:32 2025 GMT
Subject: CN=eceb06fd6db83ec28c9fb4c56a5fae9f76c55167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:03:f3:40:04:bd:a7:f5:2d:74:d1:a3:2f:
7b:34:d0:cb:05:8a:34:ae:e9:3b:73:5a:81:97:a6:
16:20:a3:6d:88:c4:16:09:f9:de:4f:32:09:b8:ac:
86:39:e1:b8:ab:61:c8:8c:af:ca:34:91:6f:ea:64:
b2:1d:45:d0:d6:7a:be:6f:7c:bd:d9:23:e4:9d:29:
79:cd:f0:04:18:2e:c0:61:15:35:76:35:56:ca:07:
ea:88:14:1b:c4:77:22:83:13:be:fe:22:e1:a4:91:
e7:cb:b5:43:cf:bf:41:d9:57:1a:6a:b5:b2:2e:ee:
99:79:d9:56:5f:4e:e4:02:b2:ff:d1:1f:60:56:82:
fa:a1:15:87:be:ab:6b:5a:83:c9:0c:67:f8:09:35:
63:5e:4f:4e:a5:5a:6e:4f:e5:60:77:56:4a:61:7c:
08:35:18:4d:70:26:40:8e:3c:c3:2c:d8:1c:2f:c5:
a9:0e:23:63:06:38:db:45:49:ea:dc:c1:04:81:27:
8f:c8:35:0b:55:02:dc:2f:ee:84:8c:d4:51:44:69:
d9:e5:4e:31:d0:14:dd:05:aa:79:f7:50:bb:60:f7:
0e:d1:22:15:05:7f:bc:8d:f9:d0:68:ee:75:f2:c1:
8c:de:16:90:e4:2b:01:2d:1a:b7:9c:29:2c:2c:90:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:06:FD:6D:B8:3E:C2:8C:9F:B4:C5:6A:5F:AE:9F:76:C5:51:67
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:5e:a2:48:c3:5d:92:ec:c5:d3:91:15:16:eb:5d:36:d2:
b5:c4:1e:60:81:1c:71:6e:a0:bc:39:01:b2:3d:8b:e2:cf:bf:
8e:5d:76:17:59:45:e8:c0:e8:bb:db:90:e6:45:ba:2e:d9:eb:
6f:30:61:b0:0b:6f:a0:51:6e:40:1f:4d:29:6c:1c:98:71:bd:
7a:5d:ca:9f:fe:a3:c7:26:31:4b:1c:aa:29:9d:78:0a:51:76:
34:50:b2:e6:2b:7b:1a:f7:2e:fd:6b:b5:49:90:68:f1:71:a6:
ef:f2:d7:2b:07:6b:06:89:1f:52:77:f3:87:d6:ae:cb:2c:00:
a0:3c:45:df:1b:af:3e:38:6b:e1:e1:1c:73:20:c8:d8:e0:50:
cc:bb:3e:e3:fc:6d:3d:28:5d:55:5f:2d:0c:fa:08:a9:d6:8a:
c9:76:e3:c1:45:bd:20:ab:5a:13:29:e9:83:02:6d:e9:7d:5f:
97:b2:77:49:46:51:60:5a:f7:20:b4:5b:e3:f4:d5:20:12:4a:
70:c2:28:be:7b:9d:e6:91:19:7f:df:d4:17:25:82:70:19:2f:
5b:a9:35:3d:fc:0a:92:87:d5:64:d3:a2:af:03:37:23:fa:a8:
a2:b9:cd:74:e0:72:58:d7:0e:06:92:1f:a4:8f:1a:c4:21:6f:
97:4b:a6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:51:54 2025 by rpki-client