
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: ROmTRAt4iRTOqrCxsnUH2+B6laPgoyzTVvhgyQkBY24=
Subject key identifier: E8:D2:77:2B:E9:5B:E7:79:B2:0D:F8:FB:3E:E0:42:C9:A9:DE:45:EE
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 0197B6A056533EEC5BA3F42D07FE3BD71237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: stYR+iCVlgQk8u58Wa8XGpSgAvZSa5wuNZ5ycfs4ruU=)
2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:56:53:3e:ec:5b:a3:f4:2d:07:fe:3b:d7:12:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=e8d2772be95be779b20df8fb3ee042c9a9de45ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:fb:9a:fe:15:9f:82:ac:be:56:30:1d:cf:
e6:9b:cd:5b:d0:1c:45:9d:56:0f:fb:32:70:88:a0:
09:66:7c:7c:e3:14:f1:4b:a6:67:70:28:fe:35:10:
fa:27:f4:06:4e:a0:da:3d:1f:ba:87:8b:c4:3d:0b:
d2:52:e8:91:c3:53:22:de:3f:61:c1:35:ff:ed:df:
8c:10:87:5e:11:df:a1:b7:9a:b3:4a:c6:09:ef:ff:
d0:c8:fa:0f:ca:c7:68:bd:74:e1:e8:a7:b4:1a:0d:
2d:32:95:43:06:37:bd:e8:10:b8:34:92:3f:13:0c:
e7:ae:9b:54:bb:e6:a1:7c:86:59:9c:67:21:79:ec:
b4:29:85:62:4c:37:69:60:0d:e2:62:9b:ac:23:b5:
0f:d7:5e:4f:f7:51:47:00:3b:f7:af:73:fe:b1:6b:
4c:3d:dd:41:73:bd:4d:97:73:d1:91:12:5d:34:ab:
ea:38:85:14:1c:d0:94:20:5d:0a:03:dc:47:cf:09:
c8:3b:7e:25:95:29:b9:bc:75:9b:43:c3:ed:7a:82:
59:73:50:e7:d9:04:e3:65:10:1f:01:12:8c:bd:07:
56:29:f7:da:e5:b8:13:82:8a:02:dc:60:f1:d0:bf:
91:6f:78:d9:ee:1c:fa:58:73:60:4d:db:a7:fe:e2:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D2:77:2B:E9:5B:E7:79:B2:0D:F8:FB:3E:E0:42:C9:A9:DE:45:EE
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2f:9b:57:bf:29:f3:8c:78:5b:63:f5:09:ce:e0:b9:62:52:
96:45:a4:24:03:cb:d1:c1:ed:d7:12:bb:b1:66:4f:5a:7b:8a:
f6:a2:36:64:fb:f3:a2:2b:5e:ef:24:08:92:06:e9:2a:8a:f4:
f6:bb:0c:e4:6f:ae:33:5f:95:a0:71:af:99:2d:28:35:01:e8:
a8:fd:89:0d:5f:d6:1a:a9:3d:bd:28:9e:e0:86:30:39:b7:9f:
ee:f7:a4:b4:4c:48:a0:76:23:c1:71:f3:9a:8a:06:f6:66:d0:
10:e9:26:89:24:fb:1a:aa:c5:f4:25:1b:77:1d:a8:e2:aa:8f:
16:af:a0:9a:8b:df:6b:b6:b5:ac:fd:19:4b:c8:52:10:68:fa:
f4:6c:8d:b6:3b:2e:1c:60:e4:42:08:04:d9:ac:bd:44:22:10:
23:01:4f:43:46:37:77:31:e0:3d:25:3a:42:0a:7f:fa:16:7a:
80:2e:de:5b:0f:b6:59:06:83:04:54:df:10:3f:f2:4e:bc:48:
e1:b0:84:a3:4f:cf:84:86:32:45:ad:0f:62:da:12:d0:53:5a:
6c:c2:10:12:c6:6c:5b:15:44:3e:4c:4a:d6:89:39:5f:e1:ca:
81:93:32:ba:27:32:c6:f2:46:0a:1c:a3:14:8e:4c:a1:6c:96:
8f:7c:b7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:56 2025 by rpki-client