Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier: cWwR6YI6X7IrtcWgJ88vQbvMfkj+nAixSDUJF5HQAS8=
Subject key identifier: 2C:84:89:45:BA:FC:D0:6C:21:6A:EC:45:61:F0:2E:AF:41:DE:65:52
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial: 0197B6327FC95F5F6D59802C73402DDD5BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number: C5
Signing time: Sat 28 Jun 2025 11:00:52 +0000
Manifest this update: Sat 28 Jun 2025 11:00:52 +0000
Manifest next update: Sun 29 Jun 2025 11:00:52 +0000
Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: DPIBWpzeMnDHK0FdRKYJnjgky5ebU+eEjiWZu2vq1vc=)
2: xjqb8HoLRLAR-p4-R3Sb4dWDULU.roa (hash: 1mq/X/AhDxzJxbocaN5soLh/qNxvhHjRbgctopoVrKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7f:c9:5f:5f:6d:59:80:2c:73:40:2d:dd:5b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Validity
Not Before: Jun 28 11:00:52 2025 GMT
Not After : Jun 29 11:00:52 2025 GMT
Subject: CN=2c848945bafcd06c216aec4561f02eaf41de6552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c8:22:ec:17:3b:d3:bd:8c:16:24:b0:0b:4f:
46:9f:5b:6b:d8:ec:02:4f:d2:bb:59:a9:7c:2f:17:
88:ad:f3:96:67:b8:c0:ee:11:13:9a:55:46:39:0a:
8c:b8:ff:5f:1c:51:fd:35:42:f2:da:47:b5:b7:e8:
48:42:87:c6:17:60:20:26:e2:45:9a:a9:c7:d4:31:
1b:fc:5f:bb:95:96:0f:7a:f8:cc:04:d9:c3:52:1e:
60:59:c6:0c:d5:dd:1a:31:d9:1a:1e:47:31:96:40:
02:a5:16:5a:44:e7:ff:38:8e:1a:ab:43:58:79:cc:
5c:37:38:8a:0e:b7:65:93:dd:ca:65:5e:11:16:8c:
28:7c:6b:b6:f1:42:94:9e:53:20:c6:d6:35:78:0c:
ce:b2:d8:43:4e:16:a9:47:f2:f0:cf:a0:3f:fa:74:
b4:59:05:64:b3:7f:30:ec:6a:c7:20:c4:1e:37:b1:
58:5c:df:f6:51:d4:47:04:88:5c:dc:97:f8:e5:fa:
b7:92:28:fc:00:3f:f0:00:9d:0f:14:9d:8a:f0:07:
a0:d5:bf:90:92:54:01:90:d0:eb:fc:aa:e1:d0:02:
f3:65:f8:2d:0f:70:21:c4:4b:dc:5d:49:14:e8:1f:
be:89:a5:86:8c:24:a1:37:1f:2a:08:eb:aa:8b:5d:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:84:89:45:BA:FC:D0:6C:21:6A:EC:45:61:F0:2E:AF:41:DE:65:52
X509v3 Authority Key Identifier:
keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:08:4d:9e:d8:b7:97:a8:f3:c7:d9:e5:82:8f:10:e5:9a:c2:
0e:84:ee:8a:9d:fa:78:00:61:52:ca:61:59:0b:f8:1b:e7:5c:
30:bb:d0:fd:cf:32:fb:4b:61:96:c3:9b:e4:4d:18:3d:2c:72:
30:91:fc:f5:9f:38:98:b3:18:3b:7f:65:c8:58:3f:30:63:e9:
b4:86:8d:a3:4e:2f:36:19:f1:5b:03:30:3a:3f:71:1e:4f:f2:
11:40:f6:aa:8c:b8:60:24:23:d5:14:c7:89:da:c9:d1:33:78:
81:32:14:74:05:5b:19:4c:44:36:8f:6f:c2:2b:e9:d6:95:b7:
59:a7:4d:7f:ae:ce:c6:c5:33:e4:93:7b:82:b5:2a:18:b3:c9:
e4:31:d4:21:72:77:40:b8:63:7c:80:b7:23:b7:66:6b:95:c9:
14:08:26:74:cf:cd:20:a3:a0:5e:ab:63:87:ee:33:e7:7c:d9:
21:c1:16:76:73:76:4e:a5:bf:10:b6:48:bc:7c:85:2c:16:86:
d1:d6:19:24:dc:f1:96:1d:3b:2b:46:cf:5a:95:0b:a6:0e:02:
6c:fe:3b:10:a5:28:f4:d1:46:9a:66:15:89:a8:98:67:d6:fe:
08:bf:56:05:2c:84:96:8e:62:32:e2:7c:c4:86:bb:19:0b:b4:
55:5d:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:18 2025 by rpki-client