Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: /nbM0v3wL414qYIbXnt6mDeAVCPdSLqZmsx6acj5NEs=
Subject key identifier: 56:34:1F:AE:B0:86:5F:7A:3A:DD:92:CA:FF:07:06:AE:D9:CA:63:8A
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 019768BBB72934C6FB8082FF6B94B3D07584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 14D1
Signing time: Fri 13 Jun 2025 10:00:21 +0000
Manifest this update: Fri 13 Jun 2025 10:00:21 +0000
Manifest next update: Sat 14 Jun 2025 10:00:21 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: nFT9ZedJQdvrE9JEeO3n+aoy1Tw5WL1+nMwBG1ECbno=)
2: WodU5gDNw3cjAmLp67NGPeKWzm4.roa (hash: YXZKSjPXGmgzYL0wl21TgIMvnXm5A4XUDZj4O/e7fR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:b7:29:34:c6:fb:80:82:ff:6b:94:b3:d0:75:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Jun 13 10:00:21 2025 GMT
Not After : Jun 14 10:00:21 2025 GMT
Subject: CN=56341faeb0865f7a3add92caff0706aed9ca638a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:46:0d:a8:f7:03:ee:0a:00:62:8e:f9:23:
cd:9a:fd:36:23:30:a9:1f:08:ef:a7:fa:ac:67:7b:
87:fb:a2:cb:9f:4b:bd:63:f9:bd:88:dd:12:bf:6e:
5d:2d:4f:4b:2b:2e:ad:ce:fa:5d:62:98:49:9d:83:
91:7f:35:6b:01:13:9b:24:a4:8d:45:37:4c:9f:f5:
e4:65:ab:57:ea:6c:cf:87:83:02:d4:6a:b2:48:dd:
27:bc:c5:b1:fa:b7:9c:b4:ff:bb:00:38:93:8a:78:
77:02:35:68:74:48:ba:28:a8:8a:a3:06:59:3f:07:
76:a5:2e:03:ad:de:cf:41:ce:42:97:4c:79:2f:ca:
ea:38:aa:b3:7f:fa:39:48:a2:c5:31:03:08:67:a4:
89:93:0f:d3:cf:c4:80:1f:c7:96:d9:ae:51:65:b1:
3f:67:f5:bd:a8:20:7b:32:1b:0f:c2:3c:15:46:f4:
a1:81:09:35:cc:9a:79:78:cb:a0:89:fb:cb:f9:31:
f4:5b:e7:52:da:64:3b:45:8a:d7:2a:12:ef:fe:76:
26:f0:97:dd:ef:b2:37:42:04:d0:8d:ec:90:b7:d4:
cc:f1:e0:2b:c6:a8:42:b8:e8:4b:bd:ad:f0:a0:73:
1e:c6:c3:2a:8a:d9:74:0c:21:12:59:ae:a3:6c:ba:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:1F:AE:B0:86:5F:7A:3A:DD:92:CA:FF:07:06:AE:D9:CA:63:8A
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:dc:32:c9:4d:8d:d0:64:02:85:ee:f7:d1:a9:c7:0e:1d:9d:
e0:aa:8d:16:6f:8b:ae:de:e2:99:39:52:5e:55:45:f0:7d:4d:
86:c0:29:00:4c:24:4c:e4:87:9a:1b:fe:56:d5:01:04:b0:d0:
1b:0b:ad:06:75:1e:80:06:bf:b2:5d:7c:a3:d6:2c:72:1e:f3:
92:f2:2e:3a:8e:86:89:3b:2c:83:7d:cc:c8:29:2d:ed:eb:36:
5b:23:9d:e3:08:d9:80:d7:ce:27:ff:4c:6d:3e:3d:dc:77:62:
4d:92:53:6f:67:b4:a1:97:99:2e:f4:23:16:15:db:9e:10:67:
a4:ef:b0:9b:39:36:ed:da:5c:58:c1:e2:54:8a:7b:93:f7:3e:
91:a3:70:0c:f8:34:14:c6:02:90:53:0b:c9:0e:45:d3:e2:4e:
2a:83:b2:1a:c5:9c:3d:cc:d2:66:df:13:05:ad:90:37:d4:80:
68:92:3a:93:fc:d6:c9:11:11:3d:fe:2b:5d:df:14:97:33:96:
60:bf:14:8f:2a:54:b0:fc:c0:bc:f6:d3:99:9a:78:06:9e:0a:
46:46:55:d5:7a:c7:eb:79:ec:d6:48:ce:8d:cf:a2:88:cd:2e:
7c:69:97:5c:79:15:5a:a9:ca:0e:12:33:69:14:9e:0f:67:4d:
c1:d7:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:44:46 2025 by rpki-client