Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: LR8zCXuRTJ2nxW5aagjkn/N/Zjjt0yJitJg/UVUt97M=
Subject key identifier: 83:54:E3:C1:D3:58:12:79:A2:94:24:58:E6:B3:5D:E6:8C:E5:45:EA
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019674C2C2F8B322E50A4EF9388C952B80AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 058C
Signing time: Sun 27 Apr 2025 01:00:42 +0000
Manifest this update: Sun 27 Apr 2025 01:00:42 +0000
Manifest next update: Mon 28 Apr 2025 01:00:42 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: EuZSduGUC76hZA8ZuW6+SOKMvaHtLkUvelicvd3hbxw=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:c2:f8:b3:22:e5:0a:4e:f9:38:8c:95:2b:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Apr 27 01:00:42 2025 GMT
Not After : Apr 28 01:00:42 2025 GMT
Subject: CN=8354e3c1d3581279a2942458e6b35de68ce545ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bb:dd:a1:52:be:8e:e4:32:bf:72:85:aa:4b:
48:39:1b:dd:98:7f:bf:f6:2d:c9:a7:a9:21:d3:4a:
05:db:a9:87:c3:dd:71:9e:27:19:c0:98:38:b2:cb:
4d:9d:26:e3:5e:83:ca:7d:aa:89:ed:6e:bb:11:7d:
75:b4:35:bb:f2:af:cc:ed:4b:dc:ba:98:a1:3f:b4:
22:69:68:2f:1b:16:c6:59:50:51:f9:38:d2:cc:8a:
08:a7:26:1e:a6:b9:b0:90:ab:6c:ed:8a:25:05:ea:
4b:01:4f:52:a5:3d:db:1e:50:73:ee:ee:53:a6:94:
fd:89:60:f9:7b:df:f3:92:12:0e:1b:2b:a9:d1:fa:
2d:8b:cc:fd:ff:c2:ef:1f:17:f2:3a:c5:27:66:ba:
da:c4:42:31:16:69:71:5f:af:7b:a5:0d:4a:ce:2f:
a1:ed:a1:ae:b2:13:c5:62:19:9b:df:91:7f:b1:4e:
0a:bc:86:54:5b:83:ec:28:2a:6a:97:ae:76:0b:c6:
44:2c:20:91:22:e7:62:dd:ec:4c:be:3e:07:57:86:
ea:bd:76:60:ea:81:bc:75:40:5b:25:0b:4b:15:b9:
f1:f5:38:7c:4e:d1:a5:3f:87:85:03:73:21:c6:51:
24:24:5b:c8:5c:41:0c:0c:65:e3:33:05:f5:de:e5:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:E3:C1:D3:58:12:79:A2:94:24:58:E6:B3:5D:E6:8C:E5:45:EA
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cb:4b:be:16:61:00:b3:74:7d:00:8a:ad:ea:a3:02:62:75:
67:f8:e1:25:c2:21:a2:93:40:b0:9d:e3:c5:41:2f:94:0f:53:
9b:4c:54:a5:26:70:02:f7:ca:0b:0a:8e:b9:08:88:10:05:a4:
1f:b7:bb:b2:1b:34:28:ff:79:4b:4d:21:bc:1b:65:d6:b3:ad:
82:3a:a1:6e:18:24:a8:3a:2e:2f:04:69:d7:b9:bb:0b:ca:23:
a8:40:02:95:3d:9f:fb:13:dd:0d:5e:8d:df:07:b9:3b:9a:58:
76:30:6d:2a:47:2b:29:96:8c:e3:50:9a:c0:be:0b:fd:11:4f:
c0:15:46:84:3b:64:b9:75:a6:56:4b:56:df:4f:b5:cb:50:2b:
18:5a:21:e4:b2:ba:02:62:2c:cf:11:69:39:43:bf:ce:a8:c5:
aa:5c:1c:d2:d1:1c:b7:6c:a4:7b:0e:d7:b5:f1:e7:93:3c:d3:
b1:72:c9:e3:82:9d:c8:3e:21:7f:69:33:3a:bd:f5:cb:c1:70:
3b:5f:8e:43:f4:52:a9:69:b7:ab:79:a7:b8:56:8a:6a:2c:47:
93:d4:d6:fe:2e:9f:46:50:33:a0:5a:b7:f8:2a:7e:bd:36:84:
e4:d9:bb:dc:ee:eb:51:37:6e:b6:df:b8:95:df:00:85:cc:9f:
d8:d0:b4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:30 2025 by rpki-client