Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: ZJX+WnxYnrE+5kp759CgxrG/+yRMB4EGHmMo1KDP3WY=
Subject key identifier: AA:C9:99:93:6A:8B:80:5D:52:2C:2B:34:9F:3D:E0:5F:AC:69:D3:06
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 01977075B359461FB7E2DD0693812FAF7F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 1526
Signing time: Sat 14 Jun 2025 22:00:51 +0000
Manifest this update: Sat 14 Jun 2025 22:00:51 +0000
Manifest next update: Sun 15 Jun 2025 22:00:51 +0000
Files and hashes: 1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: sLI4IrmlGiQJUbiSezOCabCQ3D3u01/XOpLn1a4AAtA=)
2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=)
3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=)
4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:b3:59:46:1f:b7:e2:dd:06:93:81:2f:af:7f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Jun 14 22:00:51 2025 GMT
Not After : Jun 15 22:00:51 2025 GMT
Subject: CN=aac999936a8b805d522c2b349f3de05fac69d306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:aa:77:53:d3:fb:46:38:41:aa:17:08:00:
70:73:6b:fa:78:4d:d3:bd:71:bd:5f:a4:cf:b7:09:
f7:91:55:30:d0:c8:2e:b6:85:aa:36:a7:f1:32:7f:
72:6a:8f:49:ea:cb:66:ca:d0:c0:34:30:63:2a:44:
70:02:65:7f:e6:1e:c7:be:a7:32:8c:70:00:b6:69:
84:d9:ad:13:9b:79:0b:70:13:17:b6:98:a7:e6:a2:
d2:bf:88:a5:e5:66:49:23:f7:5e:eb:da:f4:89:45:
fc:8f:32:da:f3:d7:62:e6:45:7d:20:31:a8:26:bd:
68:a8:66:7f:7f:cc:cf:41:7b:fc:9d:0c:e7:b2:f6:
3e:e3:ec:90:eb:10:68:e4:e6:d8:83:72:84:46:0a:
63:b0:03:a2:e0:e1:1c:c8:98:21:e8:14:23:55:91:
aa:c9:7c:87:ca:8e:0f:c9:a8:ca:2d:b2:13:a8:e6:
ff:e4:09:3a:7f:4a:c2:5b:0b:39:da:9b:cd:9b:16:
9a:bf:80:ca:62:c0:d9:fb:90:5d:71:8f:15:e6:2f:
06:90:3e:e8:69:e0:d6:ac:40:31:57:2a:88:9c:2a:
9f:92:9b:b7:38:e5:da:5a:fd:cd:02:de:5f:8e:61:
bf:54:a9:0d:4f:ff:a2:35:a2:d1:e3:85:37:63:d6:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C9:99:93:6A:8B:80:5D:52:2C:2B:34:9F:3D:E0:5F:AC:69:D3:06
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cc:68:69:29:cb:32:9d:43:06:c8:78:fb:2f:ab:9e:f2:6c:
55:93:ac:21:e3:4f:1c:33:cd:17:3b:71:f5:42:c2:d6:a3:a2:
7d:a7:5b:42:7d:90:b1:22:87:d1:f2:27:8f:0b:b2:44:cb:6c:
9b:0a:6a:1d:1e:fa:75:07:9d:6c:2c:3a:c3:0f:fc:bb:50:73:
5f:be:b2:47:61:06:51:12:67:af:bf:24:9c:0c:f4:f8:8a:23:
1f:fc:e9:1b:8e:fc:da:21:f4:26:c5:5b:90:fd:9a:67:ca:10:
3a:0c:3c:4b:9e:fe:9e:30:8b:a2:4b:b9:d5:e2:ba:c3:5f:3a:
76:87:d0:fd:bb:14:29:09:69:ec:e6:d6:8a:a3:01:e3:e9:f9:
af:3c:85:29:50:91:36:79:e5:a2:d7:4e:f4:53:68:d6:82:2d:
e4:82:97:33:9b:e1:6a:91:5f:5b:60:36:4c:14:27:55:15:fc:
26:2c:3f:0b:8d:77:a7:9c:6a:52:ad:56:dd:1d:37:4c:6f:35:
a5:66:16:c8:7d:0c:97:b9:b0:35:0b:00:29:52:a1:6e:e0:78:
37:8f:3e:b0:27:f8:88:93:fe:64:2a:22:aa:af:a2:07:6b:36:
a0:a5:4e:b5:22:09:7d:ac:48:1a:1a:a4:91:5c:44:fb:8e:c8:
41:68:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:13 2025 by rpki-client