Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: ++x6QbX/aT9xXUB0zvrXejSXg92xLlQRCv0Bv2t6m7E=
Subject key identifier: 68:86:FE:C0:9C:DF:BD:B4:26:9E:BE:6D:12:D4:12:B8:6E:02:D0:87
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 0197B70E9800BA7FA1161C79A7A45FFAF45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 126B
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: +/DNKBzZbfiU3gn+zjXgNohQAj5NL4pTQUW+oKz2f58=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:98:00:ba:7f:a1:16:1c:79:a7:a4:5f:fa:f4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=6886fec09cdfbdb4269ebe6d12d412b86e02d087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:1a:73:ad:3a:5a:05:69:44:15:58:74:7e:
29:08:78:6c:1b:43:db:56:cb:e8:c1:65:18:5a:7e:
e2:31:41:c8:48:1d:d2:39:be:ce:18:bb:0a:70:33:
4f:7e:af:58:94:db:a4:f6:ef:6c:5e:0d:e1:6d:cc:
2d:0f:ad:16:cc:e5:be:02:d4:09:27:35:85:d6:9a:
c1:aa:d1:c9:a8:18:60:38:15:51:84:80:47:96:74:
a4:4c:0e:ea:23:73:62:8b:08:cd:2c:f8:57:98:c6:
9a:de:dc:4b:1c:99:92:04:e8:ea:9d:62:f5:e7:90:
d3:9d:47:bc:71:01:7b:79:65:39:8c:90:7a:5c:bc:
04:7b:0d:b8:bb:65:dc:09:d0:e4:f2:fe:8d:99:dd:
4d:1a:fe:e4:f2:f1:1e:54:c7:96:26:bd:98:b8:d5:
6d:61:93:78:2f:66:8a:12:bb:19:89:80:0e:14:58:
7e:29:40:60:3e:25:46:fd:37:19:26:a8:24:f6:95:
5d:e6:27:b1:28:e8:f1:d8:4a:33:3f:d5:11:e7:c6:
06:23:c9:2a:ea:7b:e1:e9:49:46:6b:fb:ea:1a:bd:
e2:74:7d:0f:47:29:25:98:02:26:94:15:71:2d:74:
77:9d:02:9e:26:b3:d2:a1:54:5b:c3:6c:ed:33:8a:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:86:FE:C0:9C:DF:BD:B4:26:9E:BE:6D:12:D4:12:B8:6E:02:D0:87
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2f:70:99:84:02:09:1f:78:e8:5c:04:59:0e:31:2d:1e:62:
93:a4:0c:34:e2:59:fc:31:f0:2f:be:e6:c1:5a:d6:38:18:d7:
cc:a3:55:99:45:b5:1a:91:42:c3:16:77:a6:5b:c0:a3:2f:71:
27:33:3c:09:53:85:db:a2:5c:17:d9:fc:3a:16:39:e8:32:4c:
44:fa:1f:54:e4:13:32:52:f4:4d:93:28:f2:11:3d:d4:73:a4:
b5:2a:94:47:ae:c4:b0:2a:84:f7:9a:93:2a:a4:43:ac:69:73:
36:d7:62:23:7a:63:db:88:bc:bb:2a:4b:7d:e8:ef:ad:c7:0f:
19:1b:3b:05:73:b8:46:57:ba:65:9d:3a:bd:ab:03:83:dd:37:
87:a7:27:45:fb:5f:8a:24:7e:dc:71:b9:d8:6b:ba:27:3e:0d:
f8:0e:e0:22:3d:a4:dd:59:20:8c:fd:84:25:99:01:25:a9:f1:
d0:dc:64:26:62:f8:a0:23:fd:a4:18:6c:99:d0:28:86:70:74:
48:a9:c9:98:a3:51:6e:e9:12:aa:7f:23:b1:d7:6c:7c:9f:fc:
41:4f:dc:66:a2:3d:2c:0a:73:a8:1f:4a:96:5d:38:5b:fe:d9:
c1:8a:16:fe:f7:63:24:92:35:59:b8:59:79:84:dd:ee:36:d2:
dd:6f:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:07 2025 by rpki-client