Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: cQ2F5D6OCRYI34ei6CUGX+Ixmtif/I0YQ+qQgbWfTwU=
Subject key identifier: 93:D2:C8:93:31:2F:50:7F:15:3B:44:22:AE:F4:F1:FB:36:CD:F3:E6
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 0197B6A22F412D6789D6F629769D18F0DCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: GczJqHABV+LMVNk09ZYRq0H8jEObVXyHnpeUD1kDqqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2f:41:2d:67:89:d6:f6:29:76:9d:18:f0:dc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=93d2c893312f507f153b4422aef4f1fb36cdf3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:7f:58:48:2d:17:0b:aa:3b:7b:a4:fb:99:
f4:16:91:a7:b2:19:05:41:cb:1e:1a:f2:d9:8a:c7:
f2:be:85:83:17:8d:3b:6c:55:1a:42:08:59:c4:e5:
3e:54:31:9a:82:38:26:ec:03:6c:7b:5d:44:05:c4:
7e:73:c8:9b:ab:de:95:ba:b9:a7:e2:a8:a7:f0:d4:
7e:46:06:7b:c1:ad:1a:c5:f2:a4:45:06:fe:a0:93:
d5:f5:f5:4b:6c:0d:d6:33:4c:5e:0c:af:b4:70:36:
7e:47:ec:1f:bc:00:17:18:fb:53:dc:ee:09:8f:cf:
8f:89:e7:73:2c:a5:2d:7c:c7:e7:56:29:41:f9:64:
30:fe:a1:61:ee:59:4b:df:04:c7:11:fd:84:9b:52:
03:10:1a:10:69:50:74:62:1e:c2:ee:74:e0:6a:d5:
8c:ab:70:a4:d2:90:08:c5:12:d8:a3:46:83:f1:85:
f5:29:33:7d:63:99:5e:fe:08:4b:da:51:2a:e1:8d:
20:55:68:b5:17:7e:ea:e4:d0:d6:59:31:66:f3:d8:
44:b3:bf:fe:de:f1:79:60:af:99:e6:9b:95:93:e8:
d9:22:94:b6:1b:9e:eb:8b:40:26:87:42:89:3a:8b:
50:d0:37:68:bf:4e:f5:6f:be:1b:2c:4d:b0:38:92:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D2:C8:93:31:2F:50:7F:15:3B:44:22:AE:F4:F1:FB:36:CD:F3:E6
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:b3:23:aa:21:a3:ab:df:b1:b6:35:f1:bd:89:db:95:9b:
32:62:b9:1e:be:5d:b4:cf:01:e6:d1:25:a0:8c:c8:89:31:90:
b0:a0:0d:c4:44:2f:db:13:55:fb:3c:50:9e:79:01:9d:cd:61:
e8:c8:37:75:39:10:85:67:cb:7b:7f:50:9f:2e:ba:8d:f1:e7:
5e:6f:99:fe:23:eb:a6:17:b5:41:5f:14:dd:9a:9d:41:8f:68:
ff:4f:4c:57:64:a1:a8:9f:1e:1d:81:ad:86:b1:c0:b4:b1:3e:
33:30:f9:af:7e:67:0c:23:bd:75:a6:98:c6:8b:a4:39:82:26:
ae:9a:a2:88:cb:08:d6:27:41:49:f2:ba:de:6b:53:91:0c:72:
a0:11:a3:8f:a5:7c:be:5c:59:0d:71:7d:e3:44:08:53:82:db:
be:06:07:54:b5:97:bd:11:7d:4e:33:33:f0:58:b0:36:14:78:
e9:d1:96:48:e1:1b:68:79:b1:1a:4a:a7:6d:c9:44:e9:82:c8:
fd:58:6c:00:f2:0a:15:f3:b6:d6:e1:a6:60:23:44:2d:c5:d6:
98:64:31:96:bb:79:42:82:ce:b3:09:5e:b2:6b:48:71:af:78:
3d:71:81:4a:ed:61:3c:c3:67:af:75:ad:ab:a6:bc:2a:a3:7e:
f8:e1:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:14 2025 by rpki-client