Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: o2q+Vcv0eOpxqNrtUWzI1IllS4Kw/T7B+jS06fVlcQY=
Subject key identifier: AC:FC:27:21:BA:2A:E7:5A:1B:F2:1C:86:BC:AF:69:FF:0A:DA:D1:4E
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 0197B6A22BC10EAB024D6C941055B10BD406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 028F
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: hy6GMrARqogCmwLJWLR992riIvx5n119VVEqyyhgzkg=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2b:c1:0e:ab:02:4d:6c:94:10:55:b1:0b:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=acfc2721ba2ae75a1bf21c86bcaf69ff0adad14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:7a:1b:52:f6:73:22:50:ec:41:b4:e9:1b:
57:de:01:61:34:aa:67:f1:f5:a2:5f:5b:38:96:7f:
7c:07:40:a6:9f:85:62:74:3f:d0:e8:94:45:ad:f4:
bd:68:a2:15:d3:40:b0:69:9f:9f:36:a0:f5:03:22:
9a:05:f4:67:7e:73:d8:a3:7a:bc:ec:80:0f:09:fe:
e5:4c:35:64:40:f5:7a:03:fa:01:23:02:cc:f3:78:
cf:52:54:9f:59:e2:e9:ea:3b:2e:67:3a:d6:24:d3:
4f:3c:3c:5c:93:e6:a3:47:44:32:f4:78:16:80:83:
38:57:dd:f2:4a:6c:17:2e:7d:17:a1:ab:03:7f:b4:
c4:3f:ab:62:9b:49:61:4e:08:3e:c6:1b:4c:37:a9:
b1:bf:a7:a8:2f:24:87:3c:a8:df:75:c4:57:32:9c:
20:96:f5:df:b0:1c:92:8a:41:05:d1:8b:45:16:20:
d6:08:5d:c0:7c:dd:df:79:27:35:6b:65:ed:0d:cc:
03:f9:29:bc:e8:99:52:87:7c:7c:3c:3a:a4:d0:a5:
49:d0:b8:8f:94:8c:c5:a5:a9:b7:77:ee:08:9d:73:
27:d9:7e:6e:b5:3f:1a:f8:ff:15:fb:f3:ea:30:07:
6b:53:a3:c1:a5:f7:f1:87:7c:5d:3b:61:4f:36:25:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:27:21:BA:2A:E7:5A:1B:F2:1C:86:BC:AF:69:FF:0A:DA:D1:4E
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e1:c6:cf:93:97:9d:ed:aa:2f:2c:2a:3f:da:b7:52:f2:91:
76:53:af:16:09:56:97:1c:dc:a9:a4:7c:6f:8e:a2:de:72:8f:
1a:d4:41:64:1a:9a:8a:f9:f1:f1:e2:b9:99:ab:73:8a:b3:ad:
4b:ff:a7:85:ff:3b:35:a1:9d:0e:e4:10:b5:00:46:ab:db:f4:
3f:c9:a3:db:fc:c7:c7:44:92:be:da:d9:5f:1c:de:12:f2:ff:
e5:14:5b:38:c1:a5:4b:e1:db:81:b3:b9:2c:5e:e5:b7:d6:66:
cb:e1:a4:fe:8b:f6:7f:c8:88:12:e9:81:bc:01:fc:40:87:0e:
5d:f7:09:e5:ef:52:2b:0a:14:fa:d4:6d:5e:37:a6:67:f9:72:
6d:be:1f:58:3e:e2:78:ff:d7:42:14:c0:19:80:a4:bb:62:1f:
2e:9b:14:0f:59:c9:31:b4:7b:f8:f6:50:c8:cd:5a:e4:7a:8e:
19:9a:ef:7f:dc:d3:c1:6b:e6:e5:39:7c:ba:62:d3:17:a5:c6:
df:c2:c0:78:6c:5b:73:86:5c:5c:e1:1e:21:ba:b4:dd:d4:93:
20:0c:98:a1:a3:df:ea:ea:1f:c9:cb:df:11:52:e6:82:94:2d:
ce:2e:dd:a8:eb:ca:5f:40:44:17:00:2b:4f:ee:fe:5f:8c:a5:
04:eb:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:44 2025 by rpki-client