Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier: CBIV5nmEatk+u4dK6Lx9FgbHoxYehI6u4MSD6rRlvVE=
Subject key identifier: 4F:89:BD:E6:DD:25:3C:79:8F:FC:EE:23:2A:A1:A0:0A:12:C6:C7:E2
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 0197BFDABFB3A5B589E2D65AC345D56532CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number: 10B9
Signing time: Mon 30 Jun 2025 08:01:13 +0000
Manifest this update: Mon 30 Jun 2025 08:01:13 +0000
Manifest next update: Tue 01 Jul 2025 08:01:13 +0000
Files and hashes: 1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: FcTVjotVUhMIKmVF+falGVIBJT9wAY+wNQT2/vXK/LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:bf:b3:a5:b5:89:e2:d6:5a:c3:45:d5:65:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Jun 30 08:01:13 2025 GMT
Not After : Jul 1 08:01:13 2025 GMT
Subject: CN=4f89bde6dd253c798ffcee232aa1a00a12c6c7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:86:b5:cc:86:a2:b2:30:a5:30:4d:22:b1:
fd:5a:d1:98:7a:87:17:4f:56:fd:73:87:8d:33:7e:
8d:da:45:35:14:36:c7:18:ca:48:bd:a8:7a:b6:16:
4d:6a:ae:1b:78:a6:71:14:4e:e7:41:32:6a:4f:8a:
09:48:8d:fc:18:ea:cb:fa:12:68:2b:03:89:3e:d8:
22:b9:49:94:b3:dc:87:55:b7:41:3b:98:91:db:63:
80:89:e1:6b:12:be:f6:20:d0:a6:18:5a:af:60:a2:
b8:4a:24:28:f3:b1:9a:e4:1a:c0:72:ce:de:c6:db:
b0:1b:66:2f:3e:50:8d:0f:1c:34:c5:58:75:56:77:
7b:01:de:21:a0:50:89:29:7d:b9:c8:28:a9:68:70:
8d:5a:f6:f6:21:d5:51:6b:2f:e1:1f:a5:30:fa:d9:
ba:6f:df:f6:da:26:17:a9:02:2a:e6:54:07:d6:cd:
b5:e0:0d:21:88:0b:ca:cd:f8:34:25:ed:43:d3:c5:
52:57:71:85:47:c7:eb:8c:36:a9:72:6c:c3:53:1c:
dd:7b:0b:a3:2b:b6:d1:00:20:8e:20:3e:f2:10:8b:
db:3d:04:0a:63:13:e8:76:3c:45:5a:63:33:a4:1f:
36:3a:54:c6:47:c5:9e:b5:86:b8:96:11:25:66:66:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:89:BD:E6:DD:25:3C:79:8F:FC:EE:23:2A:A1:A0:0A:12:C6:C7:E2
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:75:11:f6:16:c5:51:33:f7:e8:75:f6:e5:1e:5d:7e:a7:6f:
65:f1:79:b5:ae:ec:39:05:8a:83:bc:5a:66:dd:dd:e6:d4:9d:
d1:4f:cc:cf:3b:b8:da:df:bc:66:00:bf:e3:07:f4:92:46:5a:
84:23:92:0b:42:a0:7b:19:12:94:4c:27:30:3a:13:f7:0e:45:
48:f8:a7:f1:6f:ee:42:e6:27:59:f6:e0:14:5f:99:4f:d6:af:
60:f4:d2:a0:bb:b5:3b:c3:7d:79:47:a9:fe:94:9d:09:bf:fd:
58:e0:a0:1c:c5:eb:f7:86:dd:53:59:56:cf:da:68:95:8a:6b:
ce:15:79:ad:5d:64:c3:0f:c1:29:ff:e0:d6:d5:e6:c3:73:84:
ec:1c:bb:7d:d6:d7:4b:60:bd:f0:52:09:95:31:b9:c8:56:58:
6a:e8:dc:1b:14:49:c8:3f:a8:f2:70:9e:18:2f:4d:71:d6:56:
5f:7e:b9:a4:53:62:ea:90:38:88:52:04:0a:1f:74:33:d3:57:
99:84:15:1b:df:93:7f:5c:98:9d:f6:08:50:d0:75:02:69:cf:
4b:a2:d7:eb:39:0d:d9:57:36:82:6c:82:97:c2:1a:f8:de:e3:
2a:4b:62:16:d6:d9:73:2e:1a:9c:e9:90:74:ef:fd:b2:1d:cd:
ab:7b:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:22:06 2025 by rpki-client