
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: 3TiZq0e1mR1B050hNDN/SLfD1xLYiA1T1K9MYdEu6xg=
Subject key identifier: 62:97:32:F7:7E:65:01:B9:CB:31:A1:85:9A:92:77:4F:43:48:EB:21
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 0197B6326EFEBDC71FAEFCC295D6D3122234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 15C9
Signing time: Sat 28 Jun 2025 11:00:47 +0000
Manifest this update: Sat 28 Jun 2025 11:00:47 +0000
Manifest next update: Sun 29 Jun 2025 11:00:47 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: 6S+DNWBMam1zSyYx8y4/woLIBkhXmqPp+DnRQD7j6LQ=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:6e:fe:bd:c7:1f:ae:fc:c2:95:d6:d3:12:22:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Jun 28 11:00:47 2025 GMT
Not After : Jun 29 11:00:47 2025 GMT
Subject: CN=629732f77e6501b9cb31a1859a92774f4348eb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:c5:e6:69:9b:3c:dc:75:5f:bc:2d:5b:f1:
b4:e0:a3:ed:da:0f:be:9a:ce:5e:de:03:99:84:7a:
57:90:43:93:7e:b9:3c:2c:89:c7:5c:dc:5e:c1:1f:
c5:3a:b8:a9:96:33:41:c9:bd:c3:b7:9e:6d:23:15:
4b:44:f0:3a:f9:4f:d7:54:b0:51:6a:cd:c5:c9:cd:
ef:d0:8b:fd:98:e5:be:01:7c:34:33:d6:6e:40:e0:
e7:9f:b3:f8:69:a8:a3:7b:07:fe:72:35:c3:0a:c4:
78:96:37:f4:d4:1a:a5:d1:7d:88:12:89:15:2f:d4:
46:1a:14:16:39:31:55:bb:87:2f:c4:69:49:e0:07:
39:6c:88:d7:b1:d6:1b:ec:19:5c:2c:43:9a:d8:44:
eb:6f:df:fe:7d:bb:36:5d:f7:e5:a9:71:0f:ce:96:
1e:97:8f:fa:f3:d7:a1:cd:03:96:6d:bb:42:9b:63:
c4:8a:91:95:dc:18:e2:24:1d:d6:4b:b2:f5:f8:2a:
16:30:af:56:13:a3:de:0e:48:32:64:f3:14:08:69:
4e:16:1d:9a:ae:7b:5d:02:e0:23:52:7f:7a:94:39:
c6:d6:5f:6b:fd:9c:61:1e:89:33:ea:25:be:df:05:
cc:4c:10:9d:29:31:fd:25:8a:d1:d8:a2:20:7d:d4:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:97:32:F7:7E:65:01:B9:CB:31:A1:85:9A:92:77:4F:43:48:EB:21
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:9c:15:45:db:b3:5d:2a:f4:ee:bb:59:d3:c8:fa:7d:ae:
47:3c:1a:0b:5c:d6:e6:52:db:34:e0:ec:79:4e:f5:99:09:7b:
6c:81:53:1e:5b:3e:e0:ce:93:9f:ff:e4:0a:0f:8a:9e:72:a2:
00:73:f7:a0:58:18:15:91:91:3b:a4:56:e6:da:75:a4:5e:70:
05:94:35:94:f6:1f:cd:ae:6b:17:9a:64:2b:f7:54:b8:29:20:
e1:16:85:ee:10:74:b8:56:9e:65:f5:f0:a6:fe:ee:bd:8c:22:
23:d0:f8:8e:7c:30:7d:cd:e0:4e:fc:f8:c7:5d:49:a9:79:fd:
5c:54:29:e2:3a:de:4a:d4:0a:79:23:78:9f:c4:4f:99:b1:7c:
c0:d9:08:0d:b4:f2:8c:d1:b5:49:37:ae:d4:bf:a4:5f:7b:c6:
47:40:1d:f0:7f:2e:22:5c:2e:ac:5c:83:be:5a:a5:c9:a7:a3:
cf:d9:19:da:33:40:fe:ba:02:93:b0:75:b0:f2:8b:4a:7b:49:
49:4f:ca:f6:87:35:fe:bf:f9:94:02:39:0f:b0:8c:18:7c:77:
1f:39:46:62:3e:16:8b:17:b3:7a:ad:52:fc:e6:ff:8b:f9:a0:
6a:87:07:fd:68:b9:44:8f:3d:3b:db:61:f1:68:38:c1:55:80:
60:55:d1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:02 2025 by rpki-client