Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: qoazrJHaJ7L+qEvVlI7UVloNByxPYNokb9VhTN4WLhg=
Subject key identifier: 8F:AE:37:99:13:1C:36:9A:8A:E9:08:4E:73:19:A6:E0:4A:B7:6B:19
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 0197B70E654B0DBC9391A8D401C75AED6A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 0DA8
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: vvuWEgxeZpunVJnqm16hPM8FO7JFW7VcgzjM8BuZS4M=)
2: NfxOkyabvxkDjJyXjcgpTv_relY.roa (hash: gFCHNUeKHs4QF0iUA6YO68TkrbI25pBG+SYBY+DhWPg=)
3: x5OcpBtDjdmsNegcpqKRcYGfe4I.roa (hash: tztbQVf1Csx2bxGYr7VD6e2RtMD/c7biQ+Jk1Ftm9xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:65:4b:0d:bc:93:91:a8:d4:01:c7:5a:ed:6a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=8fae3799131c369a8ae9084e7319a6e04ab76b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:01:c1:78:22:e6:d2:3b:cb:3a:1b:23:f2:
6a:47:02:97:26:a6:8f:a1:85:cc:bb:a3:1e:38:3d:
9f:64:ff:1c:38:7d:32:44:d9:55:00:90:26:35:26:
d0:12:1a:50:a9:9c:35:db:34:e0:9d:60:e2:d3:a0:
35:e2:74:3c:47:e4:c0:3e:ec:b4:2c:e4:84:ae:8d:
c7:f2:d9:cd:fe:5d:9f:4a:82:25:c9:28:97:26:cb:
ef:15:37:fc:db:5f:6d:70:7f:48:07:60:11:84:53:
55:b2:4b:c3:5e:cc:26:17:f2:6e:1d:97:6a:05:e5:
9f:9d:46:60:bd:e4:15:1d:e6:47:5f:d7:db:23:ac:
9e:50:49:59:06:eb:fb:d6:30:9c:c1:14:72:c9:eb:
db:c1:6e:2b:5b:89:71:6a:91:bb:ca:00:6d:bb:5f:
6c:5b:15:11:45:2a:d9:32:57:4a:7e:93:c9:41:80:
ff:d3:69:bd:00:60:b3:76:07:b8:bc:26:83:be:15:
c4:c3:5d:5a:c7:9a:df:ee:96:82:c6:f0:3a:ef:fe:
07:f0:6b:51:d9:cb:3d:71:09:30:de:49:d5:92:be:
94:d8:fe:15:31:07:42:bd:b5:c3:61:24:b0:44:e1:
ac:e4:cc:ae:19:8a:a7:c9:bc:56:75:dc:08:ff:7f:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AE:37:99:13:1C:36:9A:8A:E9:08:4E:73:19:A6:E0:4A:B7:6B:19
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:09:87:83:5c:06:72:f4:6d:73:aa:6a:c4:c8:3b:ac:67:50:
f7:05:06:a7:a7:69:e2:61:88:c2:c7:49:0a:9a:f3:4e:9c:50:
11:00:a5:2e:d2:64:95:11:50:d2:f8:a2:47:65:8e:05:23:b1:
32:60:37:bd:ef:a9:7f:73:76:9e:13:36:33:ee:a6:fd:5b:c4:
02:34:11:4f:e3:1f:44:91:f4:d5:df:9e:eb:7b:aa:8f:43:38:
8a:28:18:18:d3:cf:27:71:28:91:a8:a1:af:26:2e:03:f4:8e:
52:41:28:65:9b:da:f5:d3:28:5a:5f:d1:21:c9:11:3c:fe:08:
61:0c:d2:64:f5:04:52:34:58:73:18:59:6b:d4:25:26:1c:2b:
9d:e8:a9:7b:be:30:ca:e6:80:3d:2f:9d:c7:eb:90:f1:c2:59:
98:18:04:42:e5:0e:43:af:05:51:c4:7b:7e:50:48:45:23:b0:
d9:3e:4c:38:72:7f:a2:6f:49:b7:14:dc:cf:7a:34:70:19:16:
16:e0:ce:c4:17:81:41:e5:02:fd:94:5f:48:92:f1:2a:2d:23:
7f:69:0a:48:46:4f:1c:7e:26:93:cb:48:23:99:0c:79:02:b8:
8c:03:23:cf:01:ba:d1:ca:94:c9:8e:b4:a6:93:e7:81:64:31:
26:43:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:45 2025 by rpki-client