Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier: hixR9YR3Kx7eGx0Nonp+PXXpshhBE3WbiQEI7ffzosE=
Subject key identifier: 4B:D3:84:0B:73:38:73:43:42:8A:4C:82:A7:00:01:91:F4:3E:9D:43
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial: 0197B7EA32EF1B28AA3BA6D252581EF404FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: H3Mhue3zejWruKLELPHIFTekan/LSiI3FtVETEgzDHI=)
2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:32:ef:1b:28:aa:3b:a6:d2:52:58:1e:f4:04:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=4bd3840b73387343428a4c82a7000191f43e9d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:49:e1:f4:51:8e:b7:18:16:03:df:58:fa:
d6:af:95:21:0e:5a:47:db:19:8b:f0:20:7a:60:4b:
c6:fd:38:37:6a:39:94:66:11:75:e6:59:99:cf:9e:
32:20:b9:02:5d:c3:76:f7:f3:e7:57:59:5e:e0:b2:
61:31:62:47:b8:8c:d3:c7:80:59:6c:3b:7d:9b:0a:
ec:cb:13:a0:3c:02:69:8c:fc:c4:b0:aa:6b:5d:17:
c6:8d:c7:bd:c4:f5:34:ca:5b:2c:8d:82:73:03:e2:
ba:33:ec:5a:39:9b:ad:ae:c4:30:b8:db:14:8d:da:
ba:50:9a:0e:a1:e2:88:6e:20:6f:b6:9c:e5:39:e5:
68:13:40:22:1e:cf:19:bc:08:31:11:c9:38:11:f0:
bb:b9:87:f3:e8:93:84:96:78:fb:ca:04:c5:ca:93:
93:aa:6e:8b:83:bb:58:a6:60:95:1b:dd:fb:d1:31:
77:66:97:09:0b:c6:89:8a:1d:1a:da:42:04:c5:25:
0c:b9:88:f9:a6:d2:61:9b:20:23:e8:a9:ec:ee:7f:
70:23:09:72:f8:ed:31:4d:86:cd:98:95:18:ee:12:
25:53:03:80:30:51:9c:4b:24:74:3e:c9:a5:0c:24:
ec:d6:5b:e9:12:b8:dd:e6:eb:e1:b5:88:96:fd:d6:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D3:84:0B:73:38:73:43:42:8A:4C:82:A7:00:01:91:F4:3E:9D:43
X509v3 Authority Key Identifier:
keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e4:e3:90:2a:fb:94:31:26:00:c5:17:90:d0:23:57:94:22:
a7:98:58:d4:3d:b1:b2:b8:64:2c:0b:38:62:e2:de:0b:8a:76:
78:f4:87:1d:30:df:9c:5e:31:e9:0e:16:02:8f:e4:73:c0:06:
e3:37:b2:ec:69:11:f8:6b:8e:19:c4:4f:78:16:f8:73:86:2e:
a1:c7:b7:51:ae:62:7a:5b:c3:e4:50:db:68:01:70:13:78:28:
7c:8d:fd:13:02:d4:35:12:58:f5:31:2c:45:58:5b:9d:fa:bf:
00:22:cc:bb:67:a6:ef:bc:f5:96:59:82:87:59:6c:71:5d:d1:
23:20:65:80:1c:86:10:f3:64:44:d2:93:29:b4:c3:96:19:56:
d9:73:a5:51:6e:77:d7:63:09:52:62:f1:78:0b:6f:22:fe:4d:
4a:a4:c0:b3:68:40:bf:51:dd:10:39:a3:29:02:5b:dc:96:26:
e8:62:66:ae:2a:df:b7:52:7e:f2:a5:cd:09:ee:92:ca:e5:91:
0b:14:eb:37:4d:b1:93:36:c0:80:d7:08:89:1f:6a:96:b7:4d:
b0:48:a0:e8:f7:ca:c6:ec:4a:47:68:dc:52:5a:e9:16:17:d5:
aa:54:e1:f9:8d:1d:27:18:f7:64:c9:88:86:b3:15:e0:1c:6c:
84:69:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:20 2025 by rpki-client