Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: RddwhqArrzDcoheN9599R51XIubM2mRHEsUCC16AQlw=
Subject key identifier: 30:F0:AB:97:58:47:9C:DB:27:23:1B:40:35:4B:EF:AD:F4:FB:93:5B
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 0198733CEC03926D1695D82770D4B26EB2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0973
Signing time: Mon 04 Aug 2025 04:00:28 +0000
Manifest this update: Mon 04 Aug 2025 04:00:28 +0000
Manifest next update: Tue 05 Aug 2025 04:00:28 +0000
Files and hashes: 1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: 5n5WDQlQ4zSPF79tOJ2CDw9Ng8RVEjLtCW3qM3MCH1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:ec:03:92:6d:16:95:d8:27:70:d4:b2:6e:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Aug 4 04:00:28 2025 GMT
Not After : Aug 5 04:00:28 2025 GMT
Subject: CN=30f0ab9758479cdb27231b40354befadf4fb935b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:76:f6:32:2f:4b:6a:54:5a:26:3b:6c:db:
21:8e:8d:20:db:a1:49:50:f0:63:85:33:b3:a1:bb:
06:45:1c:f3:81:53:4a:98:ad:7c:20:c1:2d:1a:11:
ae:4d:70:30:dc:f7:94:ef:c3:c5:2d:1b:dd:d5:c6:
a6:26:8d:23:7e:99:8f:16:6d:b1:41:50:0c:99:b0:
3e:0e:c9:92:ca:ed:ef:2c:b9:06:c2:b8:e5:aa:31:
00:fc:2c:e5:14:f7:3d:de:23:56:34:94:d6:cf:79:
a1:0e:3d:df:07:6c:00:37:3f:cc:a2:24:89:f4:32:
12:f4:0a:66:8d:d1:f7:1c:7d:6c:b8:78:e8:ec:a5:
a5:69:a6:4c:32:19:4d:5a:12:b2:e3:35:8d:65:5f:
56:41:92:4f:a3:04:6f:91:5a:1f:20:ba:e2:eb:40:
be:74:2a:d0:1e:cd:a6:1b:d5:d3:ba:6e:9b:70:9e:
7e:ec:4c:7f:d2:52:0a:4e:93:36:b1:4b:b2:c2:b9:
13:ab:e3:3c:cc:8a:0b:f5:12:0f:73:b9:39:83:e9:
1d:62:7f:73:9a:17:d3:94:43:72:32:99:8a:02:59:
37:9c:78:54:c3:9a:43:42:3e:16:bb:1c:1b:9f:e2:
34:9c:9a:18:52:ac:f1:6b:03:c5:5a:36:f0:bb:5c:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F0:AB:97:58:47:9C:DB:27:23:1B:40:35:4B:EF:AD:F4:FB:93:5B
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:07:4f:50:ed:c2:76:80:3e:80:b3:7d:95:e8:e9:02:56:f8:
aa:7d:c6:41:5f:34:ab:33:0d:bb:7e:1e:16:02:05:87:15:89:
10:9d:e9:a7:f6:52:99:b3:ac:d1:b6:49:40:4f:f8:77:00:58:
b2:ec:59:fa:96:64:d4:80:f1:b8:ff:c7:06:d6:d2:52:66:78:
3a:fb:14:14:5f:85:d1:83:5b:7d:6b:ca:77:25:ab:03:28:3b:
ba:48:1e:8b:48:77:08:f6:e7:15:41:09:93:2c:7c:f7:dd:17:
ad:12:61:12:82:6c:0d:bb:b7:7c:6b:e6:3d:52:c6:27:32:48:
86:56:aa:89:ca:c9:b1:6c:f3:30:78:7e:e2:01:5b:fc:77:e8:
87:92:a6:2f:d3:9c:da:f3:9a:ad:88:9b:aa:ad:9c:5f:59:ef:
b6:7f:08:5f:b1:4b:03:1c:28:0b:87:9b:c5:f4:e5:7a:fe:74:
7c:14:82:ea:03:39:60:c3:59:ad:b3:bb:9a:6c:91:38:46:c0:
6c:b6:13:b6:9b:ab:85:69:df:cf:36:b5:81:aa:50:6d:91:c5:
88:74:94:c4:e5:4a:fb:a4:80:b8:86:da:91:67:6f:df:7a:1a:
96:aa:6e:04:71:3a:1f:94:f7:c0:e1:cf:61:5b:cc:42:81:60:
78:79:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:20 2025 by rpki-client