Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: Di5ihQrlk4Lll49ISP3ExFXSnqfCHGCtu5SpbtlIx0A=
Subject key identifier: 17:35:1F:0F:C3:EC:E9:B1:0A:6E:1A:6C:FE:4E:2D:B1:51:24:45:52
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 0197B6A0CF23ACE70A8C9A087AC2C6116C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: 7i8JH2gDDE50EmzV6j2wTHTOrXc.roa (hash: N1lOwseUmLTmn9OgnciUdbf6hlxuHBxxnuvg8UgK1o8=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: fovDP/QqRp0mh09QgMXGC/Cjizmq7/kZFiQGHGo6lo0=)
3: Q5TavcFKtR_0I79BfhZ4NkPDGaA.roa (hash: EO/fBdrumGLJMFUy0n9hpgnFqYeN6WeBPt+jfe8wV+o=)
4: pLsgoPgZwon5ItvVTFUsJaF7654.roa (hash: GzKHsFlhzzykyT0JK5oyDh4dgIyu8uoam0jj3L6SzGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cf:23:ac:e7:0a:8c:9a:08:7a:c2:c6:11:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=17351f0fc3ece9b10a6e1a6cfe4e2db151244552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:24:93:25:25:92:28:2a:ce:07:e8:3b:e0:
ca:7a:0b:17:67:01:0f:00:a1:fb:ce:23:b7:4f:0e:
d5:08:e0:74:7f:8f:63:e6:bb:a4:d1:9b:9a:5b:cb:
33:fc:68:c1:fb:b0:a5:cf:0d:a2:84:0b:f4:e4:18:
13:b7:2c:81:92:b5:d6:3f:bc:5e:d2:0f:cf:94:3a:
f6:5b:45:e1:88:41:1e:64:b1:70:32:d9:24:8f:fc:
dc:b1:3f:2e:f4:88:b8:c2:42:01:45:be:8e:d1:9d:
ea:92:01:bf:ce:42:f0:ec:91:4f:b3:9b:c8:65:2f:
47:1f:ed:3f:52:23:e3:a7:a9:ee:fd:3a:c8:29:c6:
87:8c:2b:6f:27:c2:b2:f4:f8:c4:37:8d:df:8a:08:
0a:db:f1:a3:24:d9:4b:68:63:ee:79:67:04:01:6f:
f6:a9:b0:1f:e8:a4:cd:5f:f9:43:2b:53:30:e4:4a:
d7:69:ae:c8:09:e1:be:9c:25:58:3c:37:ea:60:90:
c8:bd:55:30:2a:60:f9:c9:09:0e:ed:4c:7c:60:31:
b1:c3:85:f1:e7:56:f8:82:41:7e:0c:c6:b9:b0:c0:
23:e4:3b:85:81:27:77:0d:fe:5a:5b:f9:ab:65:b0:
06:74:fd:14:9a:12:7a:d5:30:00:02:68:d4:4d:66:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:1F:0F:C3:EC:E9:B1:0A:6E:1A:6C:FE:4E:2D:B1:51:24:45:52
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:20:dc:c3:7d:58:cf:27:78:4d:fe:ad:90:b8:fe:3e:34:af:
fb:d3:5b:1c:ca:5d:0a:1f:ca:0e:28:3c:35:f8:55:d0:c2:5c:
b8:e7:0b:40:ea:c8:13:7f:a2:19:8e:f0:d3:f8:65:90:0c:f0:
8c:f2:7b:1b:92:2c:4c:b6:aa:eb:58:c2:77:3b:b3:b0:b5:43:
09:c8:ba:5f:40:43:b2:19:a2:f4:a3:95:72:31:be:98:ed:57:
21:bf:88:0f:ab:69:29:0e:59:ad:92:62:db:86:69:1b:fa:53:
45:63:53:47:79:b9:50:f9:8e:90:e9:80:01:26:30:be:79:28:
65:fb:db:fd:6b:20:9a:6d:bc:4c:a9:72:99:73:a8:50:e0:5b:
bd:70:27:02:d6:15:95:69:b1:61:39:6a:c2:91:1f:30:d5:0a:
35:f0:96:e5:44:ff:d5:0f:b3:a8:3b:16:fc:9b:e3:30:93:60:
25:01:53:1a:9c:a2:4f:74:98:89:ec:f1:01:3a:bf:c4:4e:c6:
00:be:71:32:4c:b6:7b:0f:68:54:ae:39:4b:62:d3:a8:a6:82:
73:2d:05:c5:e5:60:48:51:4a:24:47:37:68:2e:6b:65:16:4b:
f3:32:c6:d4:6c:09:3e:07:29:a5:e3:5b:aa:be:bc:24:8a:60:
01:65:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:31 2025 by rpki-client