Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: LlsjS77NRxMiSztgst8sqC/rSYA9eOlj28YrJjTBa04=
Subject key identifier: 66:CE:C9:CC:6F:33:6B:DD:7E:95:73:91:2E:0B:94:35:9E:BC:D4:E8
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019896A6A9E3EE88473036C6B06B33DA065B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 0101
Signing time: Mon 11 Aug 2025 01:02:41 +0000
Manifest this update: Mon 11 Aug 2025 01:02:41 +0000
Manifest next update: Tue 12 Aug 2025 01:02:41 +0000
Files and hashes: 1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: iTcLWtN4ncArRST1Q/Kg3BHdT8tMx/sAT9KUpdSqi2w=)
2: U1RYzEbHmiXutqW8M0GkGkDLUKA.roa (hash: 8576dkRYk3dW0Y6uWzvcN1Y2+IXW0jM0HiarzKgHeX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:a9:e3:ee:88:47:30:36:c6:b0:6b:33:da:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Aug 11 01:02:41 2025 GMT
Not After : Aug 12 01:02:41 2025 GMT
Subject: CN=66cec9cc6f336bdd7e9573912e0b94359ebcd4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:10:f0:4d:4f:76:92:bd:e4:2e:78:52:cc:
2a:95:55:31:57:65:8d:c1:df:23:ec:39:2b:c2:ea:
95:e9:45:70:1d:7c:d9:e0:38:2f:12:13:66:51:16:
33:26:9c:18:c2:9a:e3:da:52:7c:9e:da:d3:34:c0:
a3:fe:88:fc:24:f5:69:7b:1e:ae:db:63:71:43:a1:
81:a4:86:7e:5a:9d:fc:14:f3:b0:58:1b:3c:d8:d8:
8d:4e:cb:30:f4:1f:41:8f:6c:37:b7:76:29:4a:8e:
02:6f:0d:8e:74:a1:65:b6:c7:72:78:5c:f0:56:44:
57:b6:68:41:ee:c2:84:bb:8f:48:49:98:f5:dd:6e:
61:99:1b:8d:42:03:3b:ec:55:b7:92:f4:47:02:75:
0b:01:02:9b:63:46:06:d5:e0:28:58:57:08:07:5b:
5c:c3:7a:da:4f:2c:79:b1:bd:4a:c3:b6:c9:ea:33:
d7:fa:5f:03:4a:d4:67:1e:5f:2b:c7:91:b5:ac:cc:
4c:68:7c:fa:57:d5:1a:1c:98:81:0d:08:d7:87:07:
53:5a:3e:7c:61:85:cb:a1:af:00:31:fe:2a:58:ef:
a6:b3:0b:c0:d5:90:8b:48:8a:7c:9c:81:46:56:5a:
a8:2e:6f:27:80:bd:f5:75:68:72:86:63:59:cc:46:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:C9:CC:6F:33:6B:DD:7E:95:73:91:2E:0B:94:35:9E:BC:D4:E8
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6c:ae:d7:f6:82:6c:4c:d1:be:1d:97:63:b8:4f:ad:98:94:
1e:b8:91:d4:cc:31:90:60:ff:77:27:fb:41:ae:b7:7a:3e:0f:
ba:5d:e7:49:95:14:39:52:7c:cf:08:6b:38:1d:85:4c:d7:fe:
1f:cf:e9:86:08:78:2d:02:f3:4b:65:07:16:d8:5c:1f:86:87:
7c:3f:e9:fc:6d:54:01:43:2a:33:ee:95:51:b9:16:a1:49:df:
57:ed:5c:1f:75:03:dc:30:83:25:b4:04:13:86:0c:8f:7a:a4:
22:43:27:56:98:db:c9:c6:4d:ef:00:4b:8f:77:6e:d7:2e:5a:
dd:22:ce:69:99:eb:0d:61:f9:e4:4f:c9:4e:8f:6f:4d:82:04:
c6:4d:24:98:fd:e4:98:e0:db:57:56:37:6a:97:45:32:49:73:
22:cd:45:24:bb:81:bc:51:77:f0:f6:b1:c8:10:a7:ea:c6:3b:
6a:7b:bd:76:25:e8:e4:41:52:fc:28:03:83:94:c4:2e:58:fb:
ff:4e:d9:31:ac:ef:14:94:81:6c:08:82:4a:62:04:cc:df:c7:
64:c1:ce:09:2d:72:86:78:6d:ec:f3:47:ce:96:a0:f7:b7:fd:
88:3e:07:08:9f:54:0a:ee:59:d1:00:c2:ab:56:2b:e0:c7:78:
55:9d:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:15 2025 by rpki-client