Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: vNt0WbOjaPpW3637ZgjVxYos8Id6L5KLoWAHOtXrqVM=
Subject key identifier: F7:EB:35:46:EC:F9:D1:D8:36:93:AA:4D:7B:55:CD:4B:2D:96:E3:78
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 0197B745A628DCBF3D0C23855A1AC68F599F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: y/QwylTSKnFrU+/kN2gAbZGh2cJ9pAqqL/RRLmY6BNQ=)
2: UfRDoAWDKGsXBQFJZfp7lG85sGU.roa (hash: 9M4lkZntB8nlVH2p7zUMp7EJK070pmxoOnJnaHWBY5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a6:28:dc:bf:3d:0c:23:85:5a:1a:c6:8f:59:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=f7eb3546ecf9d1d83693aa4d7b55cd4b2d96e378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:7a:4a:de:e2:01:07:6d:1d:c0:19:a3:4d:
26:91:6d:d8:3d:b8:57:91:d6:eb:2f:01:4d:b1:6d:
1f:e5:ce:90:de:58:7d:da:c9:40:60:e5:6c:83:15:
ea:1d:46:b6:69:45:ec:31:66:76:3a:e7:49:d3:2c:
c0:3a:0f:6e:db:e5:0c:30:cc:0f:6d:e6:e9:a1:0f:
50:ed:c8:20:4b:93:3a:17:bf:f3:5f:8f:9b:aa:39:
65:0d:20:2a:8e:ac:37:b6:09:2a:9d:e7:d4:37:96:
21:e6:ea:a5:1a:cf:fb:01:02:1d:95:59:50:de:ef:
6e:4e:49:6e:95:ea:1c:09:60:85:5a:0c:9f:24:73:
3f:b3:dc:e3:82:ba:84:48:3b:f9:97:6a:1f:f7:47:
b8:4f:c3:46:89:1e:8f:2f:7d:f0:81:ab:b6:79:0c:
91:da:7a:eb:5d:58:37:4b:d9:2f:6d:b7:e7:cd:86:
9a:41:3a:90:8e:58:92:9c:55:af:24:8e:5c:3b:6e:
0f:c0:c1:84:1d:0e:75:4c:eb:ac:bb:03:47:50:d6:
f2:a4:d5:84:1e:eb:fd:1c:28:c0:81:ef:47:e5:24:
47:f2:f1:6f:65:75:f4:ce:04:b6:e9:d9:10:61:22:
7c:4e:ab:a5:6b:13:52:8e:33:4b:d6:f2:c1:18:19:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EB:35:46:EC:F9:D1:D8:36:93:AA:4D:7B:55:CD:4B:2D:96:E3:78
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d2:bf:88:16:3c:d1:79:2d:8b:3e:b9:06:99:63:dd:80:dd:
3e:aa:2f:64:4b:15:24:b1:d8:b0:68:19:40:f6:f5:b3:43:e7:
58:fb:c5:44:9c:7c:d7:3e:88:2c:01:ec:20:ee:c0:0d:95:09:
1b:5d:17:7a:9f:7c:1a:52:2f:f6:19:c1:c6:ef:f8:b1:c9:2a:
29:42:f7:4c:53:bc:a1:65:66:ea:42:f1:73:37:c9:4f:2e:b9:
fc:1c:c9:57:e3:1a:0f:05:24:20:75:15:96:6b:58:54:8d:b3:
6d:cd:91:40:0a:3d:68:1a:bf:44:fa:28:8c:11:cb:61:79:d7:
c6:80:3f:fa:f4:8e:32:39:e1:b9:98:2a:d7:af:62:9d:3d:a9:
f5:05:b2:63:48:33:e3:cc:b1:70:a9:e4:d0:9b:06:c1:22:40:
cc:52:f0:3a:f4:65:ae:27:c6:9e:a4:9e:2c:6d:62:4e:b2:f3:
69:6b:ea:26:a9:be:f3:ca:b0:0c:fc:7c:62:08:66:c2:0a:5b:
fb:72:4e:04:a6:49:fd:e6:5b:92:7d:14:a9:11:b7:03:06:0c:
4a:2a:c4:9a:92:2c:ed:5c:0f:ce:40:c0:cf:5f:2d:7d:b5:6d:
e3:11:40:fe:67:a3:dd:95:c9:dd:24:8a:ef:84:f8:5f:24:4a:
f1:e8:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:42 2025 by rpki-client