Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: M1581G3NfajIuDgB/VSvCDHnvpc8MAesHEul69FiDJo=
Subject key identifier: D3:01:2B:C6:A4:39:D6:93:06:68:12:CC:EF:B2:5E:B6:C7:80:46:8B
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 0197B7B3634E0FA158FAB3470C410D40B390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: rzATI097PvN/n24u9rXKh2BHIOd+a2+gIYVDVOSzV7Y=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:63:4e:0f:a1:58:fa:b3:47:0c:41:0d:40:b3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=d3012bc6a439d693066812ccefb25eb6c780468b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:84:fc:4d:03:e4:54:8d:d3:ca:68:9e:68:
d8:76:da:b7:ca:f1:16:de:ab:43:0e:0d:13:fc:8b:
47:50:c1:99:2d:03:54:53:38:5d:66:f8:47:7e:26:
90:24:5d:b0:f6:8f:d4:d7:d1:37:3a:b6:24:54:59:
86:60:0e:f2:e5:0b:e6:3b:57:06:f1:be:7f:0f:05:
f2:22:18:20:f7:f3:fb:e0:a7:ac:e2:c1:1f:fd:86:
2d:1a:21:2e:04:df:e7:a5:99:bb:3d:e0:8f:54:7c:
e8:29:74:f7:5f:a7:e4:72:cb:10:14:c2:81:b2:51:
8b:8b:1a:12:6a:d5:63:ea:b4:f2:f8:35:99:f8:66:
a5:16:aa:b7:9f:ab:65:80:01:91:82:1a:80:5d:16:
24:02:76:b8:b1:41:f5:20:a8:3d:03:ee:c1:45:9e:
87:73:26:2f:54:cc:47:18:ee:87:3d:36:4d:e7:2a:
50:a9:63:07:5d:29:d6:b7:b5:11:6a:a1:99:51:98:
9e:aa:48:d6:77:ba:67:f5:ae:16:a4:af:7a:30:5d:
32:14:8c:ea:7f:e4:23:17:a5:f0:d5:15:97:41:16:
56:d0:51:06:4a:ca:72:7f:04:cb:1b:b4:74:7c:4d:
ec:68:f4:64:25:55:f3:3b:e6:0d:00:8e:38:80:97:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:2B:C6:A4:39:D6:93:06:68:12:CC:EF:B2:5E:B6:C7:80:46:8B
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f3:b6:08:56:b0:25:0b:87:69:aa:56:ee:5e:d3:10:e7:93:
fb:f4:a7:25:7a:ac:c5:43:71:9d:8b:33:16:9d:2d:a0:f4:2a:
e5:b1:dc:73:b0:84:25:c0:e6:8b:06:fc:62:7a:bf:cc:c9:63:
32:e3:f8:09:47:cd:74:2a:7a:a5:56:c6:fe:06:2a:3c:f2:3c:
66:0a:83:b8:e5:02:79:56:1a:69:23:21:df:df:ee:88:d8:24:
16:a6:60:fc:04:e1:be:11:f4:d8:25:70:ca:88:7b:0f:9a:29:
a3:14:6a:6e:1d:20:5c:89:49:27:d7:93:2b:5e:7f:f7:27:89:
da:c5:6e:76:9c:30:41:57:59:72:f7:13:7e:9a:f4:4d:d1:c2:
13:eb:a4:73:8f:99:f8:3d:e0:ae:c9:4f:09:bd:97:13:a2:71:
d8:01:11:e7:95:b5:58:aa:79:6b:e7:ba:fc:18:58:ca:0e:0f:
2e:b9:73:1c:bf:5a:31:d3:91:df:37:67:46:5b:c2:c3:66:82:
b7:f2:f2:a3:be:0e:d0:b6:3f:70:2a:db:d6:6f:e1:67:80:f2:
90:4e:fb:1d:f3:81:eb:04:11:43:ca:2a:35:c9:11:b4:36:be:
d8:3f:1d:f2:4a:46:17:32:7b:4a:38:3a:69:21:80:70:38:6b:
6f:ca:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:46 2025 by rpki-client