Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: 3hS7aW+/9b9uG2R9ea+rpOO1rVeFnZzySGOedzlfbWg=
Subject key identifier: E5:9C:D3:71:5B:66:7D:1B:20:13:FA:17:08:A5:9A:EE:81:7D:49:E8
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 0197B6A19108ABACBB503C5EF8EB0A07F0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 1522
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: A2CGU8JBE7WjWFFRDQhE5L7B1sJnUv3H8p+TuHn0nTI=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:91:08:ab:ac:bb:50:3c:5e:f8:eb:0a:07:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=e59cd3715b667d1b2013fa1708a59aee817d49e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d2:25:65:5d:2a:09:74:50:79:13:a2:42:0c:
8b:5a:24:93:29:30:c2:7f:95:4f:17:cb:df:56:68:
82:6c:06:b2:b7:0d:bc:6a:9f:cf:42:80:4a:f4:c4:
53:bb:46:c3:2f:b6:da:80:6b:c0:75:fb:16:87:d4:
c1:09:08:f8:d3:77:60:0b:14:df:02:6b:51:38:57:
b6:47:12:34:85:65:d5:f3:75:31:d5:06:74:1f:0e:
9b:99:c6:aa:e4:35:15:38:36:17:87:f8:03:17:bd:
bd:48:b4:5f:29:48:6d:99:07:57:7e:58:48:17:7b:
e6:32:17:02:bb:07:9a:8b:fa:72:1c:a2:60:e8:5e:
1a:5a:5a:6d:e9:56:47:fd:00:60:92:87:56:d0:ca:
38:f5:cd:59:e1:4f:25:2e:a6:7a:12:2a:6b:14:23:
c8:e7:e3:33:bf:2d:1d:e2:71:cf:8e:6f:35:b4:29:
17:99:2f:39:7a:31:13:08:10:e6:bc:c6:69:05:d0:
84:db:ad:e4:45:1d:3f:ca:b4:3f:6f:3e:5b:46:0a:
ee:18:4e:9d:08:97:95:7f:32:ad:3e:3e:80:2c:f7:
20:b8:98:bd:71:5f:27:9f:65:ed:f4:5f:64:fc:a0:
c4:7a:2d:18:a3:56:4f:b5:e1:ee:9e:b3:dd:47:8f:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:D3:71:5B:66:7D:1B:20:13:FA:17:08:A5:9A:EE:81:7D:49:E8
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:16:7a:27:ee:0a:d5:14:ca:24:a7:0e:9a:df:5e:cf:55:49:
5a:65:2c:ad:a5:92:2b:7b:37:4a:33:af:22:b8:9c:98:3c:1c:
61:44:1f:94:a0:3b:a0:be:34:b0:39:be:1e:b3:be:a7:16:4c:
94:4d:ac:89:79:d2:e9:2b:d1:1b:84:dc:22:25:0d:1f:81:f6:
c2:e8:79:df:f1:a5:ae:37:8b:5b:01:3c:60:fe:29:14:a4:23:
ce:05:9e:8d:5a:37:a2:21:52:a2:be:4c:7a:cf:04:59:0b:c5:
a8:e1:dd:7c:5f:04:83:a7:d3:99:ca:be:eb:07:19:37:08:21:
97:d6:2e:21:a7:ec:af:91:42:d2:4e:3f:28:79:f2:2f:28:68:
2e:d4:a4:96:dc:41:18:b5:d4:fb:87:5b:5a:4f:a1:6b:7a:5c:
3c:13:fc:33:9c:c4:a2:06:9e:0d:1b:ff:50:f5:72:95:8f:01:
a7:2b:7d:b1:bc:eb:cb:1f:b0:63:42:cb:7f:57:95:05:2c:7b:
bc:fc:a5:ee:b1:80:f5:84:0d:b4:e8:01:3c:61:ae:c6:11:17:
f6:f7:c3:3f:04:de:53:44:1a:c7:0f:01:40:7b:00:33:0f:1a:
ae:8d:e1:76:bc:2e:2e:fd:b4:60:8f:21:19:c9:92:67:90:b9:
98:0e:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:12 2025 by rpki-client