Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: Yovkb0sMbxrczq2oDJa+6KiFW8uNB13L2TCTLkFQe3Q=
Subject key identifier: E0:F2:C5:92:08:9E:12:2E:54:50:F2:22:D6:39:27:D9:E9:D4:28:42
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 0197B745ACDC6F00AED2973AFEA83B5CBB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: 808eb-9aLu41roSMSaHO8r-sCJ0.roa (hash: rCM5eGiyr6wuq7y0i6XZdzgH6YJOrFxOSIfhu9ZqAu0=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: ZBbhe9uQOyJsmKdjRqpkkQBAjKB5b5gAM7GhTglGK9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ac:dc:6f:00:ae:d2:97:3a:fe:a8:3b:5c:bb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=e0f2c592089e122e5450f222d63927d9e9d42842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:7c:5c:3c:c9:25:a3:1e:94:6b:ee:9a:ad:
05:b5:72:31:fe:a2:46:52:72:47:76:3c:6c:9b:62:
f2:30:be:a0:71:54:1b:e0:61:c6:15:8c:9f:4c:de:
6b:e8:17:6a:f7:a8:3b:9a:79:56:75:b0:b8:8d:dc:
a5:18:9c:bd:29:b1:9f:f5:29:ae:91:5b:cf:d2:08:
f3:7e:17:e3:af:70:20:53:86:93:a0:1e:2c:ea:6e:
25:33:85:a9:f4:51:e2:92:69:35:e1:4d:44:f7:55:
8d:18:84:36:e5:72:6c:47:fd:ee:32:b2:fa:8c:19:
29:d2:db:f9:f3:73:6f:a4:7d:35:b9:96:7a:c1:eb:
2f:28:83:d6:ac:e9:33:44:11:5a:72:07:8d:11:8a:
6d:63:5f:9b:ef:73:53:38:31:9e:e0:f8:3d:23:72:
35:2a:ca:9b:2c:b3:d8:b4:a1:a8:df:c2:42:e4:9d:
ce:fb:cf:d0:bf:18:c1:22:ca:29:b3:4c:6a:8d:2f:
e1:85:a9:b9:78:50:f3:18:26:e7:3a:3c:8d:26:c8:
3c:c5:7f:1a:03:5c:94:de:5f:1d:76:9a:cb:b7:c6:
8f:d9:b5:7f:2a:ca:94:9f:05:7f:94:97:20:cb:aa:
f4:dc:d0:cf:c8:08:da:3c:6e:ff:82:dc:53:48:5e:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:C5:92:08:9E:12:2E:54:50:F2:22:D6:39:27:D9:E9:D4:28:42
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:1b:03:59:51:f9:9f:43:0a:99:b2:d8:03:22:c2:57:d2:
f8:82:6f:50:bf:61:ea:b4:27:dc:a3:09:3e:7c:5b:ed:7c:52:
d1:a4:4d:a7:a7:11:bc:df:18:c0:f0:71:a9:d8:05:e3:6b:99:
e6:73:52:8e:73:eb:c2:66:3f:5e:20:a0:84:8a:94:a3:fe:32:
ea:18:17:1b:d6:1c:be:b8:34:dc:3b:0a:3e:6d:c9:b3:1f:cc:
71:3c:9b:f2:17:31:95:f0:ca:d3:73:8e:00:e6:b4:f1:b5:61:
be:53:d3:00:ff:76:56:f2:10:fc:d9:ef:8b:9c:2b:3e:23:0b:
a2:5e:bd:d4:31:1b:ee:d4:b0:b4:72:63:c1:59:af:00:63:4b:
c8:7c:e4:33:85:e0:3d:c0:6b:a9:8d:b9:40:cb:30:55:d1:3a:
25:55:e3:a1:da:02:8a:6b:f1:72:a6:9b:93:89:8c:91:6d:5a:
ce:f6:2d:c7:bc:99:0b:b9:3c:e8:66:da:df:18:55:81:9e:e7:
ec:5b:7d:fb:c0:e2:c9:43:01:e9:a2:89:af:67:03:0b:8c:62:
92:3b:db:eb:88:b9:a3:2a:5c:d2:18:16:ce:3c:23:1f:86:a9:
a1:cd:ba:7f:71:67:57:ba:5b:3c:b0:dd:b5:8c:98:2d:9b:72:
19:1a:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:41:43 2025 by rpki-client