Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: HT48k7U9ovcl90deVZ+/OBL/A1iH8CR6UNbQaXbkA5g=
Subject key identifier: 6F:9C:D9:A9:23:7B:22:2D:22:98:1E:F1:1E:41:A4:EF:C2:31:78:56
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 019768F299664D88D91B5BBFBA664163030D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 06F7
Signing time: Fri 13 Jun 2025 11:00:18 +0000
Manifest this update: Fri 13 Jun 2025 11:00:18 +0000
Manifest next update: Sat 14 Jun 2025 11:00:18 +0000
Files and hashes: 1: 3ybDPKiA0wDv8fgYqqJjrGlrgZo.roa (hash: Lzgk9VM3/0+YuHabQnt8dL/9QNx4stqWd1uOafztoy0=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: xqYuaB0LL9twjl5WtMLy0pM5eQToDK7KQ5dqCIrTEvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:99:66:4d:88:d9:1b:5b:bf:ba:66:41:63:03:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Jun 13 11:00:18 2025 GMT
Not After : Jun 14 11:00:18 2025 GMT
Subject: CN=6f9cd9a9237b222d22981ef11e41a4efc2317856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:b9:a9:53:36:a3:08:0f:47:d3:75:e8:14:
a7:26:b0:ed:52:a0:39:45:75:ff:51:be:9f:50:e5:
b1:33:81:df:33:b1:0a:cb:6d:7a:87:20:32:f4:3d:
1c:de:a9:f4:4a:15:54:7a:3e:c8:67:53:60:21:e6:
16:1d:fb:a4:29:03:c7:cf:0e:06:18:bb:b1:30:9c:
90:79:05:62:40:e9:11:fd:62:66:66:de:37:0b:39:
50:1d:65:34:aa:39:83:09:ef:e5:98:3a:d3:ce:7f:
2b:8c:8d:d5:9c:b0:8d:2d:da:78:6e:96:cc:7b:41:
22:3c:a0:38:76:2d:fa:53:7d:18:42:fa:4a:40:08:
54:75:31:28:11:a8:5d:56:57:23:70:ad:8d:57:11:
76:21:0e:d5:17:47:83:22:2f:87:52:de:d0:0d:96:
92:29:9a:51:55:fc:48:a7:06:58:bb:be:35:85:91:
1e:33:e0:8f:60:43:15:5e:3e:53:d8:14:e7:01:ad:
bb:f4:3a:34:fa:ea:72:46:6d:8c:7b:9c:57:7c:1f:
ec:d4:4c:4e:60:bd:12:ba:7e:01:fe:53:40:01:1c:
cc:19:20:d9:ed:b9:b5:88:70:d7:1d:74:dc:69:33:
dc:a2:31:8f:d6:ed:36:29:a3:9a:4c:2a:86:7b:d8:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:D9:A9:23:7B:22:2D:22:98:1E:F1:1E:41:A4:EF:C2:31:78:56
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3b:37:7e:d5:bf:7f:5a:66:2f:0b:bc:f4:c3:7a:93:d5:e8:
f9:42:58:80:78:25:a8:a6:03:8b:20:dd:26:a5:4b:8a:cf:36:
3d:84:0c:35:1b:c5:71:ff:3f:0b:c9:2e:ae:79:4f:8d:2e:cd:
6e:6e:1e:a4:99:ce:8a:0c:af:e8:48:92:34:23:be:81:18:39:
55:ab:07:d6:c4:2a:4e:66:76:7f:53:c0:5f:54:0c:c0:53:50:
38:62:c7:83:ad:64:fc:c1:95:a8:4e:cb:79:e0:77:3f:1d:f7:
89:07:5c:3a:31:52:36:ce:5a:5a:3f:24:4f:54:86:a1:8f:73:
ba:b5:9f:fc:ba:e7:22:18:a1:ec:57:f3:16:57:fe:7a:8e:8d:
ff:77:37:5d:35:e5:c7:8d:69:2c:66:72:2f:30:ad:29:9e:43:
ef:e8:b2:af:a9:45:3b:34:30:64:8d:c2:de:c0:4a:39:7a:ee:
c4:ed:dc:e9:68:8f:9e:3c:b5:94:90:7f:87:84:06:0d:79:d7:
e5:85:e0:f6:b3:33:42:ed:7c:ad:90:24:45:18:ba:71:fc:e1:
5c:53:a1:36:2d:8c:cf:01:bc:db:26:94:25:8e:35:39:7b:fd:
5f:69:5b:73:ae:f7:ab:fc:28:75:a6:02:a7:d0:a4:36:eb:8f:
a2:08:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:35 2025 by rpki-client