Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File: dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier: gBXw5mDOPgG9BIqi1hxvpvi8ZTGv1WpbLyIznVCFajw=
Subject key identifier: 06:15:0F:99:33:D9:DB:49:C0:39:72:4A:E2:AE:FF:6E:F9:B9:73:75
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial: 0197B7EAC396771337F836CD31ECD671162D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:45 +0000
Manifest this update: Sat 28 Jun 2025 19:01:45 +0000
Manifest next update: Sun 29 Jun 2025 19:01:45 +0000
Files and hashes: 1: UdkvXpXGLdhITVh5jtCCMBnxb7M.roa (hash: HifSo99m/eGKn8WJh44GwrCR837RJMUrmbV81B/JjSg=)
2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: Qma+es8ui63mMpO1lxaDJkbNIC6pu4QlmntpLS885CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c3:96:77:13:37:f8:36:cd:31:ec:d6:71:16:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Validity
Not Before: Jun 28 19:01:45 2025 GMT
Not After : Jun 29 19:01:45 2025 GMT
Subject: CN=06150f9933d9db49c039724ae2aeff6ef9b97375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:d2:d1:d9:5c:48:15:be:40:79:36:58:08:
91:85:6d:ea:18:0c:8a:66:a9:4f:39:26:6d:09:97:
26:ae:94:66:b4:fa:f6:35:4d:21:17:2d:7e:ff:f2:
41:20:e2:06:f2:9b:6e:77:3a:86:36:bc:7d:c6:7e:
68:d8:cb:4b:29:78:d5:bc:9a:42:6e:e1:30:94:49:
2f:08:1e:bb:8b:59:ce:56:da:ed:d4:b1:7a:a0:8a:
dd:bb:a2:71:9e:ed:49:90:72:e7:ba:4b:85:7b:c6:
a6:f8:c2:6b:f0:47:eb:be:e4:d1:77:e1:ce:8f:01:
d6:e2:b7:a0:41:50:46:8c:cb:cd:2d:04:6f:66:d6:
4c:0b:e4:05:59:9f:63:d5:4a:c1:0c:67:62:e0:65:
d9:57:41:13:4d:c6:13:46:67:2a:84:65:69:5b:d0:
cc:af:8e:2d:42:df:6e:30:95:3f:22:c0:d0:d8:59:
e1:98:30:5b:b9:ee:51:d9:77:ef:41:89:18:15:a5:
18:a8:5e:c6:5a:71:c5:ac:51:29:46:7d:8b:be:f5:
b8:b9:43:01:1c:cc:19:6e:84:6a:ec:ca:ea:2f:09:
53:54:16:61:e6:e0:64:53:bd:96:46:dc:7a:11:c8:
d8:32:65:f1:5b:0b:35:b2:77:cb:1b:e3:6c:23:7d:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:15:0F:99:33:D9:DB:49:C0:39:72:4A:E2:AE:FF:6E:F9:B9:73:75
X509v3 Authority Key Identifier:
keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:61:4f:71:2a:e3:93:12:e4:ab:c3:a1:ef:7a:02:ee:ac:
d3:41:45:9d:9a:3c:41:12:f9:82:35:2d:03:5c:84:b5:a2:04:
9a:21:08:1b:8c:6d:32:77:27:90:f1:f0:dd:75:78:d3:c6:96:
69:87:69:eb:62:94:22:2f:c8:cd:8e:e3:c0:a9:c1:74:db:41:
f8:7e:5e:82:f5:d6:34:e4:09:36:f6:80:ad:e6:d3:86:85:7a:
a8:5b:e5:b8:3f:62:48:67:cb:26:48:91:da:a2:29:c5:1a:25:
69:9c:1e:d2:e9:a3:45:7c:f3:37:75:5e:b0:89:6c:3a:6f:cc:
b7:a2:5b:f6:2d:12:30:06:1a:56:cf:eb:70:90:d9:35:d0:cb:
ce:dc:99:a7:4c:42:4c:82:63:d4:8f:c1:ac:6a:19:e4:24:9d:
e4:9c:e2:75:1d:25:98:74:fa:95:bf:bd:3b:43:79:56:6c:81:
e3:99:af:7b:a7:4b:a1:aa:60:cb:0f:50:9b:0e:f1:0d:e5:55:
9c:f3:cb:f8:db:3c:23:f0:df:89:66:b8:9d:7d:fc:4c:fa:df:
da:12:fe:d8:cc:bd:e3:d2:70:0f:9c:cc:58:24:c5:f7:91:96:
11:0d:b5:05:1b:8a:19:ba:71:c8:5d:79:bc:8f:00:82:77:91:
28:e6:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:15 2025 by rpki-client