Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: 8DhLuIuYMuRKlpefdGCQ8H8U5SkSTr35bQ8fBT/uQkY=
Subject key identifier: C8:D4:61:EB:0A:71:51:69:F0:3C:F3:E6:5B:A7:E8:4B:87:93:9E:EC
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 0197B9A143EC6391C8A7469386028BEE6BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 03:00:42 +0000
Manifest this update: Sun 29 Jun 2025 03:00:42 +0000
Manifest next update: Mon 30 Jun 2025 03:00:42 +0000
Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: hWLKEECL/T1A3N9JwBXL0hk4MT80h1zglfEDsVJqOAI=)
2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:43:ec:63:91:c8:a7:46:93:86:02:8b:ee:6b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Jun 29 03:00:42 2025 GMT
Not After : Jun 30 03:00:42 2025 GMT
Subject: CN=c8d461eb0a715169f03cf3e65ba7e84b87939eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:72:3c:a7:f3:04:66:4a:f7:bc:d7:b0:96:
22:02:89:75:2f:1b:45:fe:45:0c:95:68:85:25:36:
5c:75:81:ea:5a:52:e0:aa:f3:1c:c0:b2:fc:cc:ee:
bf:1c:b6:08:e9:73:16:3e:c7:5a:0f:3b:e5:4d:a0:
e4:ba:f5:52:66:fb:3d:88:b4:89:69:0d:a0:a0:dd:
c7:27:e4:a9:3a:a8:f4:cc:7a:eb:e3:c6:e1:b3:20:
27:04:99:1e:ef:f5:c9:fe:d9:c1:91:b1:df:f7:4b:
0c:88:8a:20:79:96:99:a5:35:55:00:84:dd:8f:5c:
07:1f:41:10:83:63:43:18:02:88:87:6b:d8:df:07:
b4:65:a1:f8:f2:4b:a7:d4:1e:28:5c:c5:fd:0d:47:
fc:d4:91:fe:b8:fb:92:a6:a1:1e:cc:28:55:ab:05:
0f:60:9a:f8:6a:6b:95:b3:db:b2:8e:92:8a:33:38:
cd:ea:b6:03:30:4a:66:57:a2:1e:a9:24:bc:fc:67:
ad:e2:09:3e:b3:2a:71:59:52:58:be:66:bb:cb:5f:
6b:08:11:92:1f:c2:91:36:5a:53:af:b3:42:97:42:
99:9f:af:1c:2e:7a:29:28:51:fe:2b:cc:ed:da:9e:
0d:9a:23:b4:3d:c8:a8:39:89:35:a3:cc:ce:01:7e:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:61:EB:0A:71:51:69:F0:3C:F3:E6:5B:A7:E8:4B:87:93:9E:EC
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8f:0f:2d:f5:7d:1b:3e:10:57:3c:25:8b:d0:c4:c0:68:6e:
fa:70:1e:6a:66:76:7c:e9:d2:f2:07:07:3e:01:85:15:72:31:
b6:cf:40:c8:87:f3:8c:eb:57:e4:02:30:71:7c:96:17:db:0a:
ba:8e:a6:2a:bf:49:b2:1c:67:30:b9:e1:00:1e:a5:a4:ad:6d:
e9:35:11:cc:5d:d7:cd:3b:7a:cf:e5:b9:8f:c6:76:c2:14:98:
c7:26:d0:e6:38:6b:40:49:98:08:2c:9f:7f:9a:08:da:d1:32:
53:8c:0c:c1:31:2a:86:33:a8:56:94:8f:f5:be:b1:dc:87:0a:
e4:f8:22:ef:be:53:d7:21:45:5d:24:43:9c:de:7a:66:37:28:
9f:b9:0c:36:52:92:f3:4c:ff:01:ad:e9:27:85:38:3e:a3:e1:
38:35:08:86:13:61:ef:be:cd:4c:98:90:5c:44:01:58:5b:3d:
ce:f4:f3:6f:a4:7e:29:30:b0:00:3d:c3:71:63:b1:b4:4a:81:
db:bd:f4:2c:d8:7d:9c:d6:e8:66:19:df:52:cd:95:f8:00:d2:
73:24:fb:c1:47:83:0f:74:1f:40:96:78:e5:95:0f:7e:2d:e2:
94:95:84:56:46:48:f9:93:8c:ae:77:42:ca:e6:05:12:80:f4:
ba:e5:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:42:32 2025 by rpki-client