Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: ZaWeGRSr/O+7ASU6Ihhvbzfz7F9RkZNpaO2cTZTd8IQ=
Subject key identifier: A2:78:23:D9:00:12:1B:B2:71:69:E1:D7:59:23:F3:88:F8:09:BB:3E
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 01987298D179B9C349C78B1086DB298F22D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0694
Signing time: Mon 04 Aug 2025 01:01:14 +0000
Manifest this update: Mon 04 Aug 2025 01:01:14 +0000
Manifest next update: Tue 05 Aug 2025 01:01:14 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: Yp/FGmPCEfp2FMmkvontPHfB19d6own23/DECQALHjk=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d1:79:b9:c3:49:c7:8b:10:86:db:29:8f:22:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Aug 4 01:01:14 2025 GMT
Not After : Aug 5 01:01:14 2025 GMT
Subject: CN=a27823d900121bb27169e1d75923f388f809bb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:55:e7:f2:b1:e5:28:4d:0f:31:38:03:3f:
a7:86:fb:f3:b3:3d:ea:ef:a6:72:be:f4:d4:4e:3f:
7d:eb:8a:a3:f5:df:0f:3b:c8:0f:bd:3b:63:19:92:
08:7a:c7:5c:d4:7c:cf:22:18:52:68:97:44:3f:83:
f6:f4:ae:10:07:bf:12:ee:a5:6b:ce:e5:26:aa:1a:
ea:cc:19:ff:93:f7:2c:2b:11:b1:19:b9:3e:5e:7e:
3c:00:59:79:23:09:f9:01:95:20:5f:0b:33:31:31:
ad:00:ba:9b:85:10:ee:f2:dc:9c:df:88:fb:71:e3:
38:15:e8:a4:1c:fb:c5:84:0c:7f:ba:62:7f:90:12:
2f:9b:31:72:c2:55:9c:19:d9:de:79:53:d8:43:4a:
f5:37:e8:95:83:d6:3c:7e:27:9c:f2:55:6b:dc:1b:
30:ed:39:8e:70:ac:d8:37:b6:2a:02:9d:c6:d9:bf:
4f:68:2b:08:c8:db:ee:40:ac:cc:e9:6a:c7:9b:cd:
7e:ea:6c:a8:35:f0:3f:f9:50:b0:ef:50:61:41:d7:
64:c1:bc:2a:b1:40:ea:b8:14:5c:87:27:a9:e1:11:
e6:ec:33:86:ff:84:29:7e:7c:98:a9:62:a8:46:37:
8a:f8:de:ec:f9:47:2c:dc:6a:bd:de:87:20:7a:7f:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:78:23:D9:00:12:1B:B2:71:69:E1:D7:59:23:F3:88:F8:09:BB:3E
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:52:31:b0:60:e7:a1:2f:f4:15:94:88:8a:9a:b2:e1:19:b0:
9d:91:9e:c6:a0:61:38:93:56:25:a7:d4:60:ff:fd:dc:0e:84:
ab:72:93:97:e7:5f:c9:92:55:2f:82:f1:fc:8e:cc:95:8c:4a:
b3:c2:f9:65:26:1a:6a:fc:af:e9:4a:20:a2:1e:75:65:61:81:
a6:72:ac:37:8a:3f:b1:d9:f6:0f:05:05:cc:af:e0:86:50:f2:
cb:a8:96:d5:a8:4d:5d:a2:ac:b3:93:22:e2:23:3d:c0:6d:75:
b2:62:b7:63:d5:81:f7:5b:c5:3d:3c:a4:be:c4:cb:52:ba:84:
a2:d7:a0:f1:67:6e:3d:e4:47:3c:b1:7b:a5:d7:60:d1:22:11:
6b:a1:a7:2c:05:57:43:e9:ae:f7:43:63:5e:73:22:ef:73:85:
c2:fa:9c:25:fe:97:a3:cf:00:2d:00:f0:36:f5:08:09:37:f0:
1c:99:b0:0e:d3:d5:02:2d:fc:e9:f2:0f:72:3e:0f:c1:a2:9e:
66:f5:5e:5c:80:4f:d1:14:bb:97:b9:75:ad:b4:4a:3c:cd:6b:
4a:92:4c:4e:dd:b1:26:8f:6b:e1:60:bb:d2:f3:26:78:78:e8:
9d:07:90:bb:dc:6a:cd:00:df:b5:3e:f3:27:c2:22:e2:79:6d:
38:c7:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:06 2025 by rpki-client