
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: /hXdpdkRW9dbJTKkEbXSwKxh0e1JGInW4BOBAVoPsNk=
Subject key identifier: C0:C9:C0:22:EA:E5:45:5B:41:C0:4E:BD:8F:1A:E3:5B:96:AC:E3:8A
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 0197D1AB4248EE96DAA40D92A1C788CDA65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0D3A
Signing time: Thu 03 Jul 2025 19:02:31 +0000
Manifest this update: Thu 03 Jul 2025 19:02:31 +0000
Manifest next update: Fri 04 Jul 2025 19:02:31 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: O28A7vZkBgMSp/Oyk8m8OB7wM9xmmUOg0wJ+J7gYJuc=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:ab:42:48:ee:96:da:a4:0d:92:a1:c7:88:cd:a6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jul 3 19:02:31 2025 GMT
Not After : Jul 4 19:02:31 2025 GMT
Subject: CN=c0c9c022eae5455b41c04ebd8f1ae35b96ace38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:d9:2a:43:bd:6e:b7:27:01:7e:b2:f5:33:
aa:5c:aa:68:8f:91:49:0e:ad:3e:47:d2:24:35:63:
8d:dc:2a:1f:5a:51:52:29:b3:68:c4:34:02:62:55:
49:01:2c:4b:0e:10:cc:fb:61:df:96:20:fb:72:b0:
50:3c:0e:a2:05:10:74:5e:a7:40:57:79:3d:03:c7:
88:94:9d:37:bf:84:74:28:4c:a8:8e:29:a4:0c:b5:
d2:2a:35:2e:e3:96:01:99:18:ef:1b:49:b4:96:e6:
c5:e6:6e:4b:1b:dc:10:c0:a3:ac:13:20:7e:d1:b9:
9b:88:80:af:f3:79:d6:0a:7b:01:92:a3:e7:66:47:
0f:c3:ed:06:57:b0:63:b7:29:66:87:1e:60:a4:c2:
c5:85:41:a3:9c:2c:9b:03:57:5d:a3:1b:f0:6a:d1:
c6:be:62:84:e8:9e:ac:ac:1e:3c:8e:55:b6:8f:a3:
ff:2d:14:3b:08:76:9c:87:3d:f7:6c:66:ee:6e:0f:
ab:2d:1c:74:37:b0:a9:e9:f6:f5:2c:a5:f2:07:ac:
69:1f:31:88:12:af:ac:f8:dd:32:e0:c9:5c:53:f7:
f0:72:98:39:18:2e:93:87:02:6d:ef:03:4b:30:1a:
68:5a:65:24:4b:4b:0e:3b:0f:11:bb:62:75:9d:ab:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:C0:22:EA:E5:45:5B:41:C0:4E:BD:8F:1A:E3:5B:96:AC:E3:8A
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:44:c8:6d:53:0c:99:aa:74:15:5f:29:fb:de:0b:92:7b:0e:
81:18:87:75:b8:07:71:fb:0d:f9:cc:55:a1:0b:47:70:d8:91:
5c:99:1b:aa:e3:81:1c:6f:33:18:18:75:97:a7:cf:51:f9:ed:
d3:f7:1a:9d:34:32:b2:f6:44:98:fb:56:d9:3a:8b:12:1f:7f:
dc:67:0d:55:d0:d9:b8:2c:b8:06:08:46:56:bd:e4:d1:13:cd:
eb:09:e6:23:7e:a7:15:c0:f7:c1:13:3c:05:5f:f0:15:ba:1d:
71:26:61:51:04:0d:b6:4d:67:9e:5a:ab:15:6f:92:f3:a4:a2:
10:be:76:3f:2b:a8:21:2c:3d:b3:a4:35:37:b6:79:a7:3a:5f:
b2:84:9f:c2:10:dd:98:15:30:36:b5:b4:b5:0e:d1:fa:b4:46:
ef:7b:ec:44:f3:21:d0:1f:ba:ef:8a:eb:05:61:8b:0e:98:fa:
a4:52:6d:03:5d:36:d5:73:6b:d0:bd:db:cc:22:49:ae:cb:a8:
d0:d6:a4:d3:21:d2:c5:1c:01:23:9f:e4:a8:7d:4b:c4:ca:11:
49:07:9a:1b:41:a5:97:35:5a:70:e6:9a:20:d2:d1:47:d6:08:
51:9a:ae:86:79:09:5b:61:94:00:15:24:0d:63:e6:4f:08:f5:
bd:a0:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:25:56 2025 by rpki-client