Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: xJMOcOlSfD9+IoMl55qEHze9Q8BLpNwn8W4i9zIGSaE=
Subject key identifier: BC:0E:6C:F7:7D:96:32:14:B6:85:DB:F8:DB:34:70:7F:C5:65:DF:44
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 0197C2A529CB43DE9D684E8B98B5E411203D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 03CF
Signing time: Mon 30 Jun 2025 21:01:33 +0000
Manifest this update: Mon 30 Jun 2025 21:01:33 +0000
Manifest next update: Tue 01 Jul 2025 21:01:33 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: /l1bZRtn7ZVIj5GnNAt3Ead0oCwCJq8zE8lSiD8/uo8=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a5:29:cb:43:de:9d:68:4e:8b:98:b5:e4:11:20:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Jun 30 21:01:33 2025 GMT
Not After : Jul 1 21:01:33 2025 GMT
Subject: CN=bc0e6cf77d963214b685dbf8db34707fc565df44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:29:60:ca:1f:fa:8a:bd:9d:a6:28:6c:46:
67:0a:cb:5f:14:3d:a5:b0:4e:42:70:fa:7a:06:a7:
c7:c9:e4:58:31:8b:a4:9d:55:7c:4b:c2:54:a9:ff:
c1:a7:0b:6f:69:69:16:f9:c4:14:66:1c:bf:dc:47:
72:33:d8:c1:a9:48:be:17:f5:71:3a:53:72:d5:8d:
68:84:d7:f1:13:f5:8e:be:fd:8f:45:2e:c1:37:24:
05:cd:c5:2f:d8:53:3f:fe:d9:26:e7:cd:1f:80:cf:
cd:8c:a8:7b:79:e8:44:55:4b:ec:72:8f:da:e8:cc:
cf:10:f5:b7:bf:2b:66:92:70:d7:e1:01:6e:4a:0a:
97:85:e2:e2:a3:4f:5f:8c:2d:cd:4c:a4:1d:50:a1:
4b:c9:04:4e:d0:f8:10:a4:9b:3f:d3:96:ab:5e:94:
99:32:49:0a:a6:af:3e:cb:fd:33:42:ec:a3:f9:ca:
47:5f:2e:86:00:2c:35:db:2c:ec:5e:fc:f6:bc:34:
a6:d8:d8:b4:df:d7:b7:29:f2:29:0d:9e:c6:1b:54:
1e:e2:38:df:e2:46:e5:43:72:d8:fa:31:1b:08:04:
12:d0:12:2e:e3:ec:07:1a:23:d3:26:a0:64:64:39:
5e:c3:0c:fb:36:fe:9b:38:7d:c3:3a:4a:87:13:7c:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0E:6C:F7:7D:96:32:14:B6:85:DB:F8:DB:34:70:7F:C5:65:DF:44
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:06:74:2a:77:86:7c:5d:49:f8:f4:2d:51:66:b1:65:62:ad:
98:ae:a5:b5:b4:9e:6e:b7:37:4b:d0:08:2c:d9:93:29:5c:b1:
60:5f:b1:92:f4:1b:0b:fa:91:8e:a4:0c:b5:d8:41:19:24:b3:
e2:cf:f0:97:69:a1:54:1e:ea:a6:5d:75:43:96:ee:13:3a:17:
f3:90:cd:2e:e9:96:3d:7b:e1:12:c8:31:db:af:c3:53:a8:2f:
7e:f2:f5:bc:f1:74:b6:f3:30:04:63:79:4f:e1:07:b5:53:4d:
5a:56:5a:cc:33:6f:8c:83:f8:6d:ff:e5:e1:42:1b:2d:03:fd:
b1:ba:ad:27:c4:b7:a7:26:22:07:84:c1:6f:ef:c6:28:f9:c6:
bc:ef:d7:a0:ec:e7:2a:16:b5:12:aa:75:43:e9:a1:e3:5c:4b:
74:05:d1:57:99:12:09:ba:eb:0c:f9:f0:61:cd:f8:cf:fd:77:
4a:3c:72:1a:1e:de:d1:74:94:6c:36:bf:ee:ce:70:e9:ed:2c:
fc:4c:ec:40:bb:00:8d:85:6f:6b:5a:1f:e8:e4:6f:80:70:77:
17:4a:c2:a1:60:6e:09:ed:f1:c7:ba:ca:8d:dd:92:ea:87:61:
e0:19:00:83:af:3a:12:ea:5b:55:f3:7c:5f:47:0e:f5:f3:06:
91:9d:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:45:22 2025 by rpki-client