Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: W90MaD9XPrOYDs8uWQgJBKh5IJzzEuFuWP2WnqpEOu4=
Subject key identifier: 41:B7:5F:44:55:DD:3E:92:8D:B1:08:63:60:3B:DA:18:8A:71:F9:AC
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 01987C0A52159B9C73A3081C6C6742EDB26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 0ECB
Signing time: Tue 05 Aug 2025 21:01:47 +0000
Manifest this update: Tue 05 Aug 2025 21:01:47 +0000
Manifest next update: Wed 06 Aug 2025 21:01:47 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: Er31DXNAD5ONnWlmRbIeianmwFFelTvFsy4fd69y5Oc=)
2: yAX7kXvWm92680l11R9uBAFGQnY.roa (hash: PzHY/wJJLxlCCbW9yVair3ky9z1XDsrY5r4NVGBKmjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:52:15:9b:9c:73:a3:08:1c:6c:67:42:ed:b2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Aug 5 21:01:47 2025 GMT
Not After : Aug 6 21:01:47 2025 GMT
Subject: CN=41b75f4455dd3e928db10863603bda188a71f9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:f8:27:25:b8:cc:fc:26:45:1e:7e:5a:95:
37:38:09:ab:0a:92:a0:a1:97:d5:d0:7b:79:3e:6f:
14:8a:85:bf:44:44:f2:6d:14:3d:eb:6c:27:62:b0:
47:91:cf:ca:12:cd:9e:5c:48:c5:fb:80:d8:60:51:
1d:8f:18:70:8a:39:71:ee:d5:0e:01:be:2b:33:1c:
f6:7a:5a:c4:1b:11:ad:d0:ec:8b:c4:1a:57:d1:95:
f3:cd:35:4a:44:7b:5d:0f:33:23:d2:1e:9f:00:7e:
24:4c:2e:c2:82:f5:5c:fd:c4:d5:7e:34:2f:cd:05:
95:ff:cf:25:81:8b:bf:06:cd:b7:79:4c:b9:4a:5c:
a3:58:53:0d:78:3f:e7:f3:68:0f:04:46:7e:af:11:
45:6b:1e:f1:0d:e5:1e:7c:c6:7d:64:e2:40:64:38:
c9:99:15:ed:53:53:73:25:21:ec:ac:04:8d:4c:e1:
99:ea:eb:89:11:9b:17:5b:80:44:56:b1:38:a4:60:
b0:f5:a5:95:0a:92:8e:01:8e:f2:fa:22:93:fb:e3:
d1:01:e3:17:b9:22:94:f3:7c:0a:b9:e9:99:f6:ec:
2f:de:0b:83:37:f0:c8:50:33:ec:62:aa:96:3d:38:
00:4b:70:14:f2:be:b2:8d:4d:ce:2f:36:b5:07:cd:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:5F:44:55:DD:3E:92:8D:B1:08:63:60:3B:DA:18:8A:71:F9:AC
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ef:98:35:4d:be:03:2e:aa:a3:ba:a6:5a:c6:d8:d4:c1:39:
34:f6:b9:55:98:02:08:bf:6f:c2:cc:11:00:51:1b:d2:ec:f7:
aa:90:61:65:56:d6:72:9b:7f:cc:b9:dd:9e:ca:88:a6:30:57:
fb:c4:21:3b:5c:06:9b:a5:7c:dc:3c:63:e6:7b:0c:12:7c:98:
36:a1:93:80:a7:b8:ee:19:40:43:62:bf:03:b2:7d:e6:cf:d3:
bd:9e:a6:6b:95:08:8c:0a:f3:15:f6:4c:f8:8b:c7:ce:c4:14:
ec:e6:e9:e2:f9:2f:5e:55:67:a6:68:fb:9b:7b:61:19:ae:92:
13:2f:64:b8:c2:39:92:5f:14:37:d9:40:8f:fb:5c:ca:35:b6:
8e:ec:71:70:09:15:65:d0:76:d5:d2:e1:65:b2:07:e7:dc:c8:
b7:96:1b:47:ec:5f:d4:30:43:07:ff:34:a6:49:64:be:6a:7d:
8d:5b:76:4a:b6:5c:a3:68:c4:98:19:f7:2b:94:6a:ff:74:cd:
6e:a3:96:61:ed:42:54:df:af:ba:15:a4:05:0b:51:2f:d9:f3:
0d:d2:fb:fd:6e:9b:87:e9:b7:02:ee:7a:dd:4a:6b:de:10:6b:
a0:5f:2f:b7:0c:a0:95:e3:96:57:82:9f:88:c2:a3:1d:01:b4:
96:8d:5e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:12 2025 by rpki-client