Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: 7jOaDEVLIB2GWLggX7FQDSfEWouAAgr0BV+o8yWQRXs=
Subject key identifier: DB:0B:5E:21:89:65:38:BC:F9:65:05:08:5C:AA:4C:1E:21:85:0A:27
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 019780567D11E90636E3BB49D5FB8F2F4C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 00:00:40 +0000
Manifest this update: Wed 18 Jun 2025 00:00:40 +0000
Manifest next update: Thu 19 Jun 2025 00:00:40 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: sL3ylC5tqdXy/p9gU1LYPVqLsUTKcboZ66UVbOuw5eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:7d:11:e9:06:36:e3:bb:49:d5:fb:8f:2f:4c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Jun 18 00:00:40 2025 GMT
Not After : Jun 19 00:00:40 2025 GMT
Subject: CN=db0b5e21896538bcf96505085caa4c1e21850a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:a9:2a:84:55:ae:82:28:76:ec:96:71:b3:
71:a1:9f:d6:08:8c:0c:26:4a:ba:e8:0c:73:76:26:
88:66:0c:23:ee:3c:0f:86:28:9e:f4:25:bf:4f:e1:
f1:8b:1b:aa:c7:1f:ad:00:fb:36:f3:16:1d:9e:f9:
b6:f3:a1:17:69:f3:2c:2d:09:76:c6:b2:17:d1:b5:
0b:ad:6e:3a:d8:5b:b7:90:9a:d5:bb:8e:6b:71:1f:
e8:31:c4:44:f9:23:a7:0e:cb:8f:a5:78:33:a2:93:
59:0a:88:36:79:07:d4:21:fc:bf:1f:68:35:d3:38:
56:ad:64:f0:47:64:2d:ad:05:96:cb:68:f5:df:dc:
56:7b:6d:a3:e4:6f:bb:ef:24:1f:a4:41:ee:2f:33:
6f:8a:8c:c7:e5:b8:dc:9e:de:11:83:ee:2a:7a:5c:
ff:c6:15:ea:37:6d:69:bb:6a:b4:a7:48:dd:42:11:
fe:05:fd:67:97:05:a3:0c:d9:78:e4:19:2c:1b:fe:
06:70:e3:d3:21:e7:65:c9:e3:86:6c:e2:50:b1:97:
0e:3a:d6:69:74:84:cc:cc:b6:a9:b2:47:b9:e5:55:
d5:68:c4:0f:f5:2b:38:90:ae:9e:d3:c4:59:cb:2a:
ae:c3:46:13:6b:38:62:58:22:50:a9:53:9d:5f:ba:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0B:5E:21:89:65:38:BC:F9:65:05:08:5C:AA:4C:1E:21:85:0A:27
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:94:f5:d6:cc:0d:f0:7c:b3:52:a2:4d:76:11:27:ff:a4:
b2:0c:76:83:ef:f7:9d:63:2c:f4:00:6c:51:ba:e9:74:01:40:
96:22:fb:8d:d3:a0:05:23:de:7b:fa:9d:f7:88:07:2c:1d:82:
a2:86:19:e2:1c:75:6b:2a:b7:1c:d1:6d:8f:ff:b6:cb:7e:d4:
3a:fd:89:48:47:76:ab:fb:33:60:55:45:0b:69:18:d5:7c:a0:
73:9c:94:36:6b:c5:9e:39:9e:0e:b6:3a:f4:49:67:28:ba:d5:
cb:7b:c9:0f:82:d9:02:be:f6:63:e7:d3:e5:bf:98:dc:65:3d:
02:f1:9e:30:22:b6:de:b9:6a:cf:f7:de:67:3c:b6:c2:ec:4a:
c0:83:b5:d6:69:9d:1b:78:5a:73:4c:b6:62:6d:8b:6b:09:a4:
1d:69:99:8e:e7:d5:26:bf:5d:be:e5:4c:4b:e2:94:b8:21:b5:
d4:37:07:77:ba:4e:71:59:c8:c8:36:5f:fb:4a:9a:0e:79:4c:
e6:91:c0:5e:2e:4d:97:4f:25:9b:4e:cd:ba:d5:fe:f7:5c:c6:
03:40:dd:65:1b:32:df:a8:65:5d:22:7a:d0:08:37:6a:1c:4b:
bf:35:f2:dc:83:49:f7:8b:a2:53:1f:46:ef:7f:f6:10:5c:66:
ef:9e:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:37:00 2025 by rpki-client