Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: PJnQ5ym6kw+SAQlh6qdu94OSq6aBbMkBtjYcVN9LAfY=
Subject key identifier: 8B:07:DF:F6:D1:41:0A:6A:38:C5:7F:03:26:CE:1F:4F:6F:6E:01:C5
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 0197C500E9C7BD41717E064FD3B2851B36AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0D9B
Signing time: Tue 01 Jul 2025 08:01:00 +0000
Manifest this update: Tue 01 Jul 2025 08:01:00 +0000
Manifest next update: Wed 02 Jul 2025 08:01:00 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: 9YmoTu7tMYWRHZ9JElC6IIWSBbkwfnBLcfw8Gf1eAjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:00:e9:c7:bd:41:71:7e:06:4f:d3:b2:85:1b:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Jul 1 08:01:00 2025 GMT
Not After : Jul 2 08:01:00 2025 GMT
Subject: CN=8b07dff6d1410a6a38c57f0326ce1f4f6f6e01c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:4e:f9:cb:3e:f1:26:34:fa:35:92:7b:39:
0f:25:43:33:ff:08:da:52:bd:38:5c:24:5d:f9:ff:
b7:11:89:01:fc:54:93:59:73:e6:b4:4d:2d:ed:c5:
a4:e2:a0:d0:19:e8:40:dd:c9:c1:21:3c:bd:b4:e6:
3c:25:cc:7a:53:ac:69:ee:bc:69:fd:d7:85:26:c5:
45:70:e0:e9:3f:04:a9:23:98:24:b6:2f:ea:bd:e7:
77:c4:e8:16:d5:46:76:af:b3:e7:ca:0a:89:51:f4:
7d:90:5b:67:05:9e:a4:4c:73:ed:b8:db:06:c8:83:
61:38:58:f1:da:bd:e8:27:9b:7f:2a:ff:8c:2b:ba:
eb:6b:08:55:ea:2d:9e:49:7f:3d:75:f8:6e:6f:5e:
1e:64:41:c5:f6:c0:ce:9f:1c:d0:68:b1:08:ca:d6:
11:75:99:d8:12:bc:2e:2a:26:0f:ea:55:80:32:52:
07:81:e5:27:ae:a2:4e:36:cd:46:0b:49:2d:b7:18:
1c:f4:85:f1:40:a8:45:f6:73:fb:b3:52:1d:90:6d:
f2:13:3d:a8:d7:74:ac:3c:98:c4:8f:6e:3c:61:32:
f6:1e:be:2d:56:53:25:f3:5b:58:9d:18:42:e0:cb:
2e:99:94:79:9e:99:2a:50:12:5b:c3:f0:20:71:37:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:07:DF:F6:D1:41:0A:6A:38:C5:7F:03:26:CE:1F:4F:6F:6E:01:C5
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0d:4e:23:83:25:c8:35:29:0e:45:47:cd:b3:78:01:90:27:
3b:11:79:b5:ba:00:4b:80:db:f0:d1:90:56:fe:8f:1d:da:f8:
e4:7d:2b:88:84:83:8b:79:ce:f3:08:73:39:b0:21:8a:76:82:
57:1f:a8:26:5c:0a:d4:c6:dd:ff:20:50:51:80:f8:89:27:53:
0f:85:6b:6f:13:42:07:04:17:81:fe:33:35:52:9f:5b:44:3b:
76:91:dd:ea:77:21:45:2d:b0:2b:6c:04:c0:5f:f4:75:e3:41:
68:7c:bf:1f:00:49:96:02:5a:55:9d:7a:7a:1e:18:c1:9e:20:
0b:93:5c:db:17:52:ee:69:d5:57:d9:08:7c:79:88:e3:bb:9f:
7a:a8:f0:c8:a6:7e:65:5a:19:20:5f:1c:7d:0b:b0:75:b3:1a:
4c:54:ff:84:24:6e:33:78:b7:44:61:e0:a7:6c:52:5b:a7:14:
22:49:33:c8:c1:c5:fa:f9:9d:21:39:8f:24:2e:6d:44:9d:a3:
72:a4:c7:31:1b:52:93:31:09:ab:bb:b5:39:11:e8:45:02:35:
40:a3:aa:62:77:2c:95:4d:fa:2f:75:f6:bd:25:3b:00:9f:8e:
1c:f6:ba:a5:bc:56:aa:ec:39:10:db:80:74:c7:35:36:de:39:
43:43:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:20:49 2025 by rpki-client