Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: a/e6ItiFNRJ3yD/5CWIFlhGjtdGKYE8ccq444dwlMgA=
Subject key identifier: DB:BC:78:1D:A1:3A:9F:38:ED:3D:46:24:48:CD:37:16:DB:2A:83:A7
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 0197B6A0AEEE8922C898D6A980DA441547C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:13 +0000
Manifest this update: Sat 28 Jun 2025 13:01:13 +0000
Manifest next update: Sun 29 Jun 2025 13:01:13 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: jzk388XTDHqEZrQS9u8hu2hVrGY3AjuWDDTGLVHGizY=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ae:ee:89:22:c8:98:d6:a9:80:da:44:15:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Jun 28 13:01:13 2025 GMT
Not After : Jun 29 13:01:13 2025 GMT
Subject: CN=dbbc781da13a9f38ed3d462448cd3716db2a83a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:fd:ff:01:d0:cb:85:94:ad:08:d5:c3:99:
10:d4:0d:c6:17:e3:17:4c:32:19:c2:df:b0:24:ec:
01:7c:8c:c1:37:12:f6:61:c3:ee:4d:5a:13:98:73:
bd:2e:11:a8:1e:93:7e:bc:fe:bb:4c:55:20:b4:c0:
2a:39:85:b7:64:ea:fb:48:12:07:01:d5:e6:14:d8:
8e:83:01:5c:67:88:23:2f:12:c8:36:68:bb:e4:19:
ff:42:2f:2e:cd:5a:6d:01:1b:ae:49:17:3a:ee:41:
47:4b:9e:9e:17:51:17:2a:d4:44:58:7f:76:42:02:
e1:1e:0d:b8:b3:01:6b:01:7c:a6:a2:25:72:30:39:
87:73:ff:21:b7:28:83:f8:b8:9f:a1:c6:05:ac:b3:
1b:80:25:d7:55:22:26:de:73:c7:87:b0:a6:66:a9:
71:7f:c2:c4:3d:ae:9e:13:c1:da:b3:b0:96:5a:e0:
39:2d:df:dd:9e:66:96:8a:52:ee:4a:11:87:7d:f3:
c1:b9:32:99:a6:9c:c4:39:76:60:69:4b:75:07:f8:
38:63:aa:f4:35:af:4a:93:f2:4d:f7:63:67:ac:50:
19:93:a3:3f:cf:be:9e:cb:ac:b6:41:3f:0e:16:5c:
7b:5c:92:e8:9f:6e:f3:83:8a:53:4b:7c:bc:3f:14:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:78:1D:A1:3A:9F:38:ED:3D:46:24:48:CD:37:16:DB:2A:83:A7
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:52:e5:34:7d:b0:95:9f:8d:da:d1:95:44:e5:e8:a5:05:f4:
69:39:54:df:cf:d4:b7:de:35:fe:f0:5f:d9:71:9a:8e:c2:6a:
7c:48:20:f6:a2:18:da:62:7b:6f:30:0b:f1:ab:eb:5e:af:11:
12:c7:e4:43:53:a0:e4:99:57:e1:a0:d5:b2:5e:82:8c:89:3b:
4f:e8:cb:9a:1a:ad:e7:6f:5c:76:60:c4:c6:1a:24:a6:dd:68:
c5:3f:eb:e9:b7:af:70:69:ac:7c:30:ce:9b:77:00:c3:55:d8:
2f:3d:f1:e9:bc:e9:e0:d9:9b:b6:d0:75:ec:e5:e7:0e:28:e4:
d6:7b:7e:1f:a9:88:7f:2e:80:83:a4:ce:ed:0f:9c:93:2b:57:
af:e2:ab:9b:5b:f8:c2:ec:be:a1:fe:0d:36:a1:75:39:79:c2:
11:b1:0b:51:06:c1:5e:ab:5e:a3:11:00:6f:ec:e7:1b:84:e8:
77:5b:b1:86:cc:50:83:df:aa:f2:69:a6:4a:fe:97:a1:16:f5:
49:1c:66:16:88:92:b8:6a:81:32:5f:4c:54:d8:b6:b2:3a:7f:
71:7b:d4:30:6d:3c:f1:7c:a2:89:d9:2e:4f:fb:23:fc:60:e4:
42:10:ba:e6:2e:97:14:e7:0e:0a:5e:ef:d3:32:82:ac:0c:eb:
6b:58:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:06 2025 by rpki-client