Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: gFvZzVOjzAAbA8vNghZHabDUY5Jy8FsSssxwcNeisBE=
Subject key identifier: 44:3F:11:9D:22:84:6D:0D:8E:BC:DB:11:CA:22:E4:34:81:8A:D3:7A
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 0197B9A1B5CFD3B732ACEEB17507B8A0EBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 0224
Signing time: Sun 29 Jun 2025 03:01:12 +0000
Manifest this update: Sun 29 Jun 2025 03:01:12 +0000
Manifest next update: Mon 30 Jun 2025 03:01:12 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: tOMLDWM5LStnaYyBcH8xAHh2LMgKgVPyXxT86j8uMD8=)
2: uMFOgPoc2NWCSxPiOG6b1D8E-ZI.roa (hash: R/unw2gN5aPMxs/UeuzYe+LHJKBGKVUf8WbT/53nntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:b5:cf:d3:b7:32:ac:ee:b1:75:07:b8:a0:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Jun 29 03:01:12 2025 GMT
Not After : Jun 30 03:01:12 2025 GMT
Subject: CN=443f119d22846d0d8ebcdb11ca22e434818ad37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b8:4f:7a:6b:91:27:64:8f:d3:a9:3c:cd:d3:
db:f4:e6:b7:2a:bf:00:e0:3f:5e:20:18:fc:ff:16:
55:6a:04:85:5a:f2:8d:db:63:6a:97:bc:d1:24:f0:
9e:5c:36:32:02:38:14:7f:f8:67:71:6b:bb:ff:6f:
e3:92:af:2c:d5:a4:c8:ec:b1:96:b0:f9:a6:c5:bc:
8d:48:8f:9d:f5:82:a6:ab:5f:e1:91:06:7a:55:9a:
0f:8b:c6:a3:c0:1a:2a:2e:ed:51:73:0f:3d:17:dc:
4f:44:d6:89:e5:86:1f:5b:30:59:1c:14:9a:5c:d9:
b5:84:a4:5b:a8:0c:85:ec:1c:db:ed:50:8b:21:0f:
91:54:fb:b5:28:4a:19:dc:d2:c0:23:3d:f5:6e:2d:
a9:cc:cc:67:60:4e:32:39:d4:3a:94:bf:f8:64:74:
bc:c0:ba:e7:a2:99:64:27:b0:c9:3c:fe:42:00:e4:
1a:fb:e1:76:43:67:36:08:25:cc:b7:d1:20:d7:d6:
5c:0e:08:39:a6:d4:3d:ca:21:b9:7d:4f:ca:d9:51:
6b:f7:a0:38:d1:d0:00:21:2e:43:55:73:d9:11:ea:
da:4d:c6:9d:96:f3:3d:48:b0:5b:54:d5:ed:11:86:
5c:ce:91:aa:b9:41:92:91:85:1d:5d:ae:76:ac:52:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3F:11:9D:22:84:6D:0D:8E:BC:DB:11:CA:22:E4:34:81:8A:D3:7A
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b6:6e:2e:e2:90:de:fb:2a:fc:c7:b8:0c:86:e2:6f:ef:a2:
17:40:bc:ee:33:32:8a:1c:78:ed:90:c8:32:3e:22:86:47:8e:
aa:20:e9:aa:c2:c3:33:7d:72:0c:ec:be:52:67:95:b1:69:fe:
d8:18:25:26:05:de:c5:24:9b:53:d6:8b:7e:52:2c:ed:82:a0:
53:4a:b8:3d:cb:28:29:68:30:50:cd:51:c1:7b:d9:30:be:01:
a0:f1:b8:8a:48:a5:6d:2c:06:be:fb:06:33:95:a5:a2:b0:5a:
01:16:2b:f6:ff:49:0b:da:6f:14:97:24:4f:49:35:1a:a8:52:
83:9d:24:1f:f7:a3:5b:56:52:4e:3c:18:a6:82:cd:60:ce:e5:
89:3a:4c:1b:f3:ee:2b:b6:ad:68:34:5f:99:49:66:a0:61:a7:
7c:51:5e:34:d2:43:71:99:c4:08:f2:9a:74:0c:f4:31:ce:a7:
69:6a:f0:10:0b:6e:76:67:29:ee:c3:ac:14:95:b3:28:8d:5b:
25:5d:81:02:65:13:cc:e8:09:60:16:4e:d6:d6:af:e8:9c:fd:
27:70:65:2e:37:ac:97:a8:ae:ae:c4:66:c7:04:ae:84:76:84:
85:82:31:6b:08:23:85:79:1a:fe:dd:27:20:24:42:69:50:0e:
15:10:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:15:05 2025 by rpki-client