Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: Gv2wctE+74VNp860MVJ4u6SUYsoqME0vreAMYNwX2vc=
Subject key identifier: 56:57:D4:81:EF:F3:47:4E:66:D8:D5:9C:DB:45:07:B9:E8:68:29:B4
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 0197B70E8FC2312A0281375ACFF96A00EAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0F9A
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: Pi1EGioZmY1T3l+XjVyoNnzfjKE/rNZByagDunCW3EY=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8f:c2:31:2a:02:81:37:5a:cf:f9:6a:00:ea:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=5657d481eff3474e66d8d59cdb4507b9e86829b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:69:73:cf:84:9d:31:fd:ef:33:ed:83:46:
15:bc:aa:80:37:42:33:9a:69:e0:55:48:a6:0c:6b:
80:b7:b4:49:6d:c4:60:b4:d9:1f:9d:da:2e:6f:34:
c7:75:0c:29:af:aa:cb:6c:2d:af:01:9b:31:32:05:
19:a1:6e:94:5a:b0:e0:a7:90:b6:26:94:0c:f5:9e:
56:d3:ea:cc:ca:3e:bb:5b:56:fc:92:4a:50:b7:ac:
36:d9:31:13:c4:7c:24:b0:67:0c:39:68:7f:aa:79:
b3:10:1a:b5:a7:72:c8:27:d1:33:80:aa:84:a6:ea:
99:7c:a5:42:a1:15:8a:98:4b:f2:af:0d:63:c5:42:
4c:e9:02:9c:d8:e7:8f:6a:2a:e5:8b:7e:05:ac:a5:
16:17:37:e8:e6:c0:56:ca:8a:96:0a:ba:c4:9d:03:
fb:33:32:9f:0d:ca:7f:03:01:8d:10:75:86:45:92:
d6:3a:e2:6c:83:0f:59:c7:0a:24:7b:0d:1c:67:3e:
1a:2f:c9:b9:d0:67:cb:55:ca:91:a6:38:38:05:68:
c9:1c:59:e7:0a:7b:45:ef:48:29:6d:1c:4d:fe:0b:
ea:c4:80:c7:15:25:20:94:90:41:0c:8f:d6:85:8d:
4e:7f:d9:01:11:31:e4:c5:2c:3b:33:36:d6:1b:e5:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:57:D4:81:EF:F3:47:4E:66:D8:D5:9C:DB:45:07:B9:E8:68:29:B4
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:76:49:12:12:78:49:10:37:1f:36:29:dc:cf:f2:e7:93:08:
66:73:fa:b1:c6:ad:6b:0e:4f:eb:96:62:ef:e8:f5:32:a7:10:
56:fb:78:fa:cd:ff:25:7d:7f:88:a5:65:2e:0d:96:de:ef:e7:
86:88:ac:35:8b:b5:b3:33:aa:28:9e:26:4c:6c:1e:27:b6:4d:
af:18:df:fe:42:f6:2c:de:64:4d:d3:f4:70:3f:3c:2b:ea:e2:
aa:6e:d6:eb:01:e2:7a:c7:50:8a:e0:66:53:de:15:92:84:a1:
65:04:c7:ae:52:b3:fd:58:42:e9:4f:74:d0:b6:2e:86:0b:30:
12:0d:b6:4e:10:36:7e:82:81:cc:57:93:43:06:2e:9c:03:c5:
38:9c:dd:ca:ee:8b:71:af:bd:1e:66:17:08:47:19:23:85:5d:
bf:e9:47:2f:db:19:cc:3f:4d:3d:4c:84:2a:c8:f9:a5:8f:a2:
58:76:3a:fa:26:ee:36:ac:ea:8d:52:26:37:fe:e8:df:1b:2a:
c9:c4:7d:e4:3b:1a:d2:25:1e:6c:69:2a:74:44:a7:75:04:b9:
49:59:2f:d3:87:96:cd:eb:4e:23:c9:ab:d8:c6:75:6c:ef:45:
b0:0b:5f:2f:cc:12:a1:87:3a:a2:72:7e:c9:7c:4c:b9:f9:f2:
28:0f:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:06 2025 by rpki-client