Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: Xuk2m2Ci9wkc87hLyTSh5Pk4C8S13a1x694stbK6mQY=
Subject key identifier: 9D:C1:D3:69:7F:C7:9D:93:BD:BB:0C:3C:15:D5:F7:A6:1E:08:E4:E9
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 0197B6A20E1E7F25363A3BD14A4F6A63F4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: SMBZGLUVI7axvrIz3MhAlP3dKooqNUmMe3wnrizLTUI=)
2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0e:1e:7f:25:36:3a:3b:d1:4a:4f:6a:63:f4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=9dc1d3697fc79d93bdbb0c3c15d5f7a61e08e4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:15:de:d7:53:c2:fb:07:f5:de:8a:9a:f2:
f6:13:bf:b2:05:dd:4f:e0:96:41:19:5b:2f:33:46:
e2:63:87:d7:7c:5a:4a:1f:84:b1:bd:64:a7:f2:72:
b1:39:d5:c4:55:ea:7e:12:f5:2e:f7:79:82:b4:24:
73:24:d7:1e:6e:f6:8f:5d:58:a2:dd:ae:52:90:43:
d1:07:fa:83:24:7b:33:a8:c6:85:99:7d:26:58:a9:
b0:6a:f0:91:91:57:c3:f5:5a:62:60:cc:c2:ca:2f:
58:dc:79:1e:18:6a:9c:01:6d:3b:30:a1:f4:ab:6a:
51:b0:05:0f:77:81:4f:0e:6a:a4:fd:d5:29:ed:5b:
c0:6d:48:40:b8:c6:58:37:de:5c:79:f4:f6:07:1d:
42:c5:c1:50:3c:b4:51:86:b7:eb:1a:83:58:08:fd:
5b:f5:e8:86:54:b2:04:b8:9f:6a:52:de:ff:54:76:
ca:12:c9:e5:8a:8a:bc:8e:18:71:b5:54:a5:72:fe:
9a:07:cd:6e:e5:d6:38:81:05:d1:01:d4:6f:41:96:
98:7e:fc:8e:f6:7d:1d:31:29:d8:dc:00:8b:47:89:
20:56:83:1a:62:6b:08:e9:4d:ad:f4:d8:45:ea:6a:
67:f2:14:2a:c3:4a:af:8e:be:ea:b2:af:6c:fc:b3:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C1:D3:69:7F:C7:9D:93:BD:BB:0C:3C:15:D5:F7:A6:1E:08:E4:E9
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:2d:aa:0e:e7:03:6d:52:91:8d:01:f9:f8:cc:fb:af:4e:
ba:52:1d:c5:83:0c:67:e1:b6:cb:9b:d0:04:38:0d:82:53:b4:
31:c1:7f:95:69:3d:41:41:8f:9f:9a:dc:5a:c6:00:52:53:ac:
b9:57:5f:69:bb:35:d8:2c:64:c0:ed:e9:14:9a:70:3d:63:de:
cf:65:96:e9:25:23:a8:1f:12:43:b7:8c:45:b7:c5:6b:ec:6e:
a2:7d:bd:24:83:3b:cd:cd:7c:4e:f8:f5:00:9d:69:04:26:30:
4c:8a:7b:a5:6f:ed:2f:05:1c:d7:89:f6:fa:8c:bf:5d:7d:17:
a8:e4:c5:6b:93:e8:b6:4d:a5:6a:e6:fb:85:91:a8:06:a3:10:
fd:02:67:ef:d6:28:52:ae:b4:74:41:e4:e1:0e:0d:9f:4a:1b:
98:d7:73:0f:94:27:6b:c7:ca:5f:71:86:1b:b0:31:79:12:cc:
ff:c8:6c:61:2e:3c:5e:a6:63:06:e3:c2:a2:9a:19:e6:36:2d:
79:83:eb:f6:63:b9:2b:59:82:de:e0:a8:af:d0:2f:19:02:5d:
4e:c3:76:8f:6e:f4:d5:0f:78:09:e0:3c:ee:37:c1:92:c3:91:
d6:f8:f1:34:32:3e:52:a7:64:bf:29:59:4a:a5:26:72:ac:71:
60:d7:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:41 2025 by rpki-client