Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
File: Dri8RONvrhbTcQL9DVGfKE1mPZA.mft (raw, json)
Hash identifier: 7Q77+7cIvThrKn3pZeFzuGDWPkCD/NTg4ZctR2cfey8=
Subject key identifier: 9A:10:07:37:09:39:2F:CC:CC:E6:7D:90:38:DC:4E:A7:DA:89:7A:0C
Authority key identifier: 0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
Certificate issuer: /CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Certificate serial: 0197B77C6B5BEA5E6E7E935E4F7E0D87FCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
Manifest number: 1500
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: Dri8RONvrhbTcQL9DVGfKE1mPZA.crl (hash: gKMi0RcI65Umu9/X5Qc5cDSLqeZU1Ywik5fKT9lmqIM=)
2: EnQM4_whnPJeaxWRQxPEz7dH7rY.roa (hash: anAGsxZMEMPM7WeK+BVeddK3oakg7+TLd3wIh7D05ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6b:5b:ea:5e:6e:7e:93:5e:4f:7e:0d:87:fc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=9a10073709392fcccce67d9038dc4ea7da897a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:19:f5:22:84:0a:e3:ac:09:50:28:3d:68:
d7:73:d2:d2:2c:d7:ed:d4:76:51:ed:08:d3:b9:af:
ff:85:84:94:c0:10:c5:6f:21:9f:cf:99:fa:32:54:
e7:2c:1f:b0:6e:c2:2f:e3:1d:64:3e:4e:79:f2:3a:
ed:93:a1:a7:e1:2e:db:de:81:ca:db:cf:e4:fb:d6:
cc:6d:22:b4:e7:d6:97:dd:3f:97:0f:52:ab:94:1e:
f6:0d:4a:4f:87:b9:06:ff:5a:d5:62:70:c2:52:b0:
29:ea:24:2f:1b:10:26:ed:ed:15:be:1e:91:bd:95:
b4:89:8e:d3:7a:58:43:52:2c:69:1d:02:59:30:a0:
6b:ce:7f:b9:13:8b:9f:5c:ae:48:ba:0d:52:af:86:
fd:68:a0:16:6b:a5:68:90:93:b8:e0:18:79:7b:26:
40:17:fe:81:dd:a9:31:26:09:ee:ec:dc:a4:ff:c8:
b1:4a:45:e0:16:e5:6c:47:96:68:58:4b:5f:17:0c:
48:42:21:fd:98:c2:bf:6f:df:1a:83:56:8c:dd:18:
b1:ab:e0:54:a7:a3:7b:53:0c:42:dc:88:42:1a:06:
13:ff:bf:e0:43:04:c4:59:aa:e3:ab:a4:0a:64:f7:
4b:d5:55:18:24:1c:5e:2d:e4:5f:0b:ea:94:e4:fa:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:10:07:37:09:39:2F:CC:CC:E6:7D:90:38:DC:4E:A7:DA:89:7A:0C
X509v3 Authority Key Identifier:
keyid:0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d7:36:e9:85:f7:e5:f5:5c:e2:97:8c:e4:cd:07:cf:c7:8d:
d3:b1:c6:e6:a4:a8:df:7f:c3:4c:9e:2e:3f:67:1f:20:f8:c1:
06:df:99:51:9e:c7:ac:a1:87:d2:91:25:a0:1a:54:53:78:f8:
93:14:01:b6:7e:47:33:39:9a:8b:ba:38:d2:31:59:63:b2:50:
3d:16:e4:81:24:e8:c2:c0:b6:b4:20:a6:36:b3:66:a4:45:ea:
98:9d:af:2c:0f:1c:c4:33:22:6b:e8:bb:65:b0:0f:2b:22:c2:
49:5b:a0:6a:bd:41:65:b5:70:7a:83:d9:c1:8e:84:a6:fe:68:
02:ae:3f:5e:ef:58:4f:a1:b5:22:ca:7e:82:ba:63:1f:cf:21:
f4:a9:c8:ba:aa:bc:31:4b:2c:e5:cd:3f:81:20:ce:f1:50:62:
ef:5d:d3:c3:d0:98:cf:db:b0:f5:57:c3:5b:7d:44:0a:7f:b3:
6e:1d:f4:4e:bd:b3:43:b6:c1:ed:66:96:a1:15:fd:88:64:ff:
a5:4e:6f:33:0a:ad:3c:cb:77:28:10:dc:c7:6a:69:58:fe:61:
78:d3:9d:92:51:6e:1d:9d:81:84:d4:c3:6a:db:d3:81:66:6f:
f5:34:d5:f1:8a:ce:f2:c1:39:4b:9d:39:7a:e2:45:aa:cf:db:
6c:7e:cb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:23 2025 by rpki-client