Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File: DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier: m4No5hphGP5gvGeMd68Frhws9nTHRPhb6irbTmKYSeU=
Subject key identifier: BF:6C:99:A2:8C:68:0A:57:87:8F:32:FE:53:B4:3D:97:21:FE:6E:42
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer: /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial: 0198737416EB7962EC43B6D99192AFB5EB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number: 0DE0
Signing time: Mon 04 Aug 2025 05:00:44 +0000
Manifest this update: Mon 04 Aug 2025 05:00:44 +0000
Manifest next update: Tue 05 Aug 2025 05:00:44 +0000
Files and hashes: 1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: FlcWUiBF1yDvM7wGTTLuFTi/VnV6U+cKaOzoymPdwfc=)
2: _mseEGqhmjk5DbDhY65kEG9l3Do.roa (hash: 4EKC+djlGJVTHQZoZJyp3llh1Qpa/Gw18st2TTUCkbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:16:eb:79:62:ec:43:b6:d9:91:92:af:b5:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Validity
Not Before: Aug 4 05:00:44 2025 GMT
Not After : Aug 5 05:00:44 2025 GMT
Subject: CN=bf6c99a28c680a57878f32fe53b43d9721fe6e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:12:6a:10:fe:63:f1:e5:ef:26:5e:da:a8:
9c:22:a5:31:93:bc:67:0c:74:55:e0:56:c1:cc:e0:
85:b3:8a:f1:e8:40:4e:84:f2:a8:d1:4c:49:11:53:
9b:ac:6e:48:3d:7a:e5:06:88:2c:d7:91:1b:0e:41:
8d:9d:e9:41:9c:e5:62:40:35:7d:59:1b:17:d1:3a:
c0:53:7e:14:13:49:bb:db:7c:c4:a1:71:ad:e1:16:
f1:64:40:8f:68:d0:fb:5e:e1:0b:38:ed:eb:e5:ec:
bd:1f:56:7e:4b:4b:e7:c1:0a:b1:83:b8:1e:9f:fa:
d3:a9:bf:83:b5:e1:f7:26:9e:06:28:82:86:a5:23:
30:1d:b5:28:b3:43:3c:39:52:6e:dc:ad:a1:40:b4:
38:93:99:35:5d:b3:a0:5e:a9:11:4d:ae:07:c0:7f:
ab:36:fe:8b:2c:3c:ae:f1:6f:5f:22:6d:16:75:83:
33:7e:64:6b:5f:4e:43:5a:76:5d:20:74:a6:22:4a:
c1:20:61:ca:7e:d4:7b:fa:d0:93:ce:cc:1d:ef:88:
6a:c0:53:f1:bc:cf:82:8b:7f:40:ef:96:1d:7e:1b:
94:ec:ae:ac:25:ac:88:88:ee:df:99:1d:d3:38:a2:
88:6c:67:c5:a2:40:45:47:90:ea:c3:21:48:c1:5e:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6C:99:A2:8C:68:0A:57:87:8F:32:FE:53:B4:3D:97:21:FE:6E:42
X509v3 Authority Key Identifier:
keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:2e:e9:cb:12:7e:80:05:78:2d:73:db:47:d4:6b:9b:2d:
53:49:5f:65:d7:0b:97:4b:71:9f:50:1b:d6:16:33:5f:e8:cf:
ed:a5:de:1c:21:45:ff:be:51:fd:e2:91:f4:fb:e8:d0:64:b5:
df:b6:98:42:44:12:1c:90:ef:63:f5:55:92:8d:03:f3:69:0b:
13:8b:65:22:f4:90:58:57:42:6c:5b:ef:b5:d9:74:6e:45:24:
b3:8d:1c:9b:50:94:e5:d3:26:ee:c3:2b:e6:ca:67:27:d7:da:
0d:bd:e4:f8:10:40:47:25:b3:c3:15:f6:e4:1f:39:45:61:75:
06:57:9a:a8:da:c7:4c:26:f9:85:a4:6e:da:63:de:97:fa:f2:
04:42:93:d3:e2:8a:d0:db:42:ab:ee:17:ae:97:49:03:c7:55:
d7:3a:de:68:b8:e6:4d:7a:ec:ed:08:98:d8:ea:be:91:fd:c1:
1f:e8:12:63:f4:22:0d:e6:53:53:ad:38:71:1b:ff:04:ad:27:
5f:a9:a2:82:1d:23:a2:70:11:70:e6:b8:59:35:7b:5e:12:a2:
f2:ae:4b:14:7d:08:51:b5:eb:50:95:24:11:ac:cb:2f:ce:23:
a0:70:95:46:fb:56:ad:21:49:d5:8c:f6:e6:7c:59:9d:f3:40:
53:18:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:36 2025 by rpki-client