Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: Rj/q7dLTxVLLINW+Hi4+JuuLmHkcYZpY7Wl40zkkL5k=
Subject key identifier: D5:56:34:6F:33:A8:1A:79:37:BD:28:67:91:72:03:B1:D2:9C:BA:21
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 0197B6A16B5BC3FE01D1B2EF39B9A1E795BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0B89
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: z62BMyZWYWjc211ARHDQVtejFye1zBZ1itoK5vaZC+w=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6b:5b:c3:fe:01:d1:b2:ef:39:b9:a1:e7:95:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=d556346f33a81a7937bd2867917203b1d29cba21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:9e:de:09:f9:2f:84:ee:76:11:f5:e8:d6:
95:64:93:a2:53:48:7a:78:8f:ba:5f:63:cc:6c:30:
de:00:3a:dd:95:c2:07:5b:c1:ce:78:60:e0:d7:56:
4b:d4:f7:1f:03:d8:be:ba:58:4f:82:e4:bb:92:1c:
a2:a8:e6:c1:9d:97:3d:59:2d:51:26:b1:d7:76:ad:
ef:3d:b8:7d:e0:eb:18:33:d5:b8:37:a5:f1:61:88:
95:8a:fa:6c:30:00:9a:04:67:c3:78:dc:8a:c9:86:
4f:84:3d:09:c4:6c:c9:fd:bf:ea:c4:3b:ed:03:4f:
4b:45:33:2d:5d:83:f8:a0:37:69:80:e1:79:4a:e5:
c9:cf:0b:73:28:41:49:90:37:3a:5f:18:80:ba:4b:
2b:eb:b0:ab:9e:7e:f0:e6:ba:ac:94:f3:ef:4b:7b:
6d:da:02:7a:fa:03:95:94:49:94:85:a7:a1:4e:72:
90:71:0b:e8:53:8f:1e:3d:34:4e:ba:3b:de:84:bf:
0a:50:1d:0d:6e:64:f7:b2:33:17:c2:5a:75:c8:77:
8c:bd:e7:6c:78:a0:35:b8:39:12:04:92:bf:e2:c7:
04:2e:a3:da:d0:19:88:29:3b:54:38:a6:b7:b1:df:
6e:df:1b:57:ba:bf:49:50:61:ae:aa:2e:f6:1c:7c:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:34:6F:33:A8:1A:79:37:BD:28:67:91:72:03:B1:D2:9C:BA:21
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:51:28:42:28:c1:48:ee:97:ae:61:40:0e:0f:f2:ef:b3:57:
5d:5d:35:12:68:2b:d7:3e:c4:b5:ae:4b:58:13:17:e3:bf:54:
de:8c:ef:50:5c:20:81:d0:d6:2a:b6:7c:da:e1:f0:26:d0:2b:
8d:ac:8c:21:b1:d0:99:9f:2e:c2:57:ea:12:fa:00:9b:5e:ab:
dc:ab:a9:75:38:8a:d6:f6:e2:77:08:23:91:a0:5b:4a:57:66:
a1:b4:a9:71:86:af:cb:4c:f8:8c:6a:a1:e9:15:41:51:c1:e0:
65:50:0e:26:f8:fc:40:50:33:fb:bb:dd:6b:a6:38:c6:58:ab:
49:8c:2e:2f:d5:e7:9f:5e:c2:20:42:e7:ee:8f:c3:98:1d:57:
00:d7:41:52:12:00:1c:9d:8b:5c:40:46:cb:b6:ef:f2:c6:b1:
ad:36:e7:ab:fb:f8:4d:57:92:a0:9a:27:e4:55:72:1a:e6:fe:
79:9c:b0:3b:db:29:b2:c1:62:ce:d7:96:a0:33:62:fc:77:dc:
1e:cd:94:f4:c8:60:8f:1d:47:10:ca:ee:0b:f7:31:14:86:a8:
4c:4d:d2:c5:bb:a6:6e:56:aa:21:18:0c:8b:5f:da:6b:9c:5d:
a5:7d:d1:f0:3f:08:cb:11:f6:7c:03:ff:26:b7:d4:21:41:4f:
7b:f1:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:49 2025 by rpki-client