Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: NrBHFFU98V1lBc447HiVCHTQXqyHmC/y3W4osDbyl6M=
Subject key identifier: 47:B8:E4:31:9D:37:CF:1B:DF:C4:71:76:57:75:8F:57:B2:3A:57:B7
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 0196797B78972D8E0A48DEE614D1F8480D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 067B
Signing time: Sun 27 Apr 2025 23:00:57 +0000
Manifest this update: Sun 27 Apr 2025 23:00:57 +0000
Manifest next update: Mon 28 Apr 2025 23:00:57 +0000
Files and hashes: 1: 3ybDPKiA0wDv8fgYqqJjrGlrgZo.roa (hash: Lzgk9VM3/0+YuHabQnt8dL/9QNx4stqWd1uOafztoy0=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: wIkmy5vaaSVsKl7RBEZhPEh4R/EXxa+cSt5Uc1hijdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:78:97:2d:8e:0a:48:de:e6:14:d1:f8:48:0d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Apr 27 23:00:57 2025 GMT
Not After : Apr 28 23:00:57 2025 GMT
Subject: CN=47b8e4319d37cf1bdfc4717657758f57b23a57b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:56:57:35:25:10:45:2b:b6:6c:8e:45:7d:
56:c0:8f:03:4e:30:f8:8b:8c:ce:c8:70:bc:70:16:
e4:9b:4b:b6:80:83:57:b1:cd:43:89:20:d1:23:32:
79:46:62:7e:35:c5:2b:a4:8e:39:9d:a9:02:55:11:
0c:01:dd:cf:3f:1f:2f:0c:76:9a:d7:9a:0f:e8:9b:
fe:5e:80:85:1b:ea:94:34:3e:24:7b:11:82:5b:c8:
55:52:c0:e3:bb:b8:09:6e:f9:60:cd:37:ab:1f:db:
90:46:8b:5b:19:3b:13:88:c1:5c:78:8a:b9:fd:35:
f8:4e:7f:4e:ad:39:cf:5a:58:8d:70:77:97:6e:db:
9d:1d:bc:48:d4:98:d0:40:57:0c:ac:44:23:19:38:
4d:2e:39:8f:4e:cb:d1:ef:c7:3f:d2:c6:f7:c3:e2:
62:16:01:b3:23:5b:5d:b3:d6:80:28:08:b6:f4:bc:
94:e9:d4:19:89:ba:20:8a:3a:8d:ab:64:51:3b:5c:
31:d2:4f:30:34:16:1f:04:79:a6:5d:34:bb:72:da:
ce:aa:f8:b6:08:ea:c7:9c:a6:2a:35:9f:5b:07:9e:
76:b1:96:6e:71:46:1c:9f:06:77:9e:d9:89:ad:15:
6f:70:2c:23:af:49:cf:0d:0f:8c:b6:c0:31:86:a3:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:E4:31:9D:37:CF:1B:DF:C4:71:76:57:75:8F:57:B2:3A:57:B7
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:98:f4:06:09:0a:5a:c4:07:6d:75:4b:ec:86:bb:4f:6c:b2:
34:23:46:29:db:97:5c:a3:07:b3:4c:de:9e:2b:8a:09:63:dd:
1d:18:6c:5a:38:c2:23:5e:06:83:cc:8d:93:1f:3f:01:6b:a1:
90:76:17:3e:0c:6f:81:e2:27:d8:52:b5:61:9c:ca:c2:f9:19:
aa:d5:13:e8:e4:12:a5:52:c8:80:54:fe:0b:25:9e:5e:29:6d:
e8:92:91:6a:23:ed:43:86:9d:cb:1c:e2:3a:73:ee:8b:a3:fe:
90:23:38:14:84:2e:2b:77:b1:1c:b0:41:65:d7:1d:23:57:be:
8e:4a:34:f7:b7:d3:02:d2:c9:de:d3:9a:8c:b2:94:42:5a:fd:
85:cf:61:cb:81:b8:31:2e:35:58:6a:4c:cb:ef:67:67:1e:a5:
81:1c:d3:52:2d:f4:22:3a:fe:54:64:9e:7a:27:b8:b9:ea:a7:
fe:ba:78:12:29:f5:98:0c:e0:f6:8b:98:23:10:a1:f4:31:7b:
c6:d4:c8:9c:be:1e:dc:e1:76:ce:a4:55:3d:79:6f:d6:b8:5f:
25:e7:4d:2a:2f:5b:e8:48:73:18:92:b8:5c:52:c0:11:8e:fb:
5b:0d:7d:67:bc:69:50:37:23:34:df:71:63:87:50:af:91:f7:
bb:da:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:36:31 2025 by rpki-client