Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: S0UVc5oOYyQk0VceQQh2jmatw7Ig+72jkM5/g14FxG4=
Subject key identifier: 8D:69:F8:01:64:D0:26:25:32:34:12:97:25:30:FE:54:0E:84:F5:FF
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 0197B6A06CD0B6D11DC813AD4DB85ECE5DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: fJU+QwrpP6SFikRaTwTq3rrSLollxuh34TjNgyP9EQI=)
2: M1fWkBIHAuVSUFxtDGIthqqmrJE.roa (hash: +6gCxjSejI/as6boiaKhDkfwSxB7S4u8Oz//yZsKkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6c:d0:b6:d1:1d:c8:13:ad:4d:b8:5e:ce:5d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=8d69f80164d02625323412972530fe540e84f5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:53:ab:b4:e6:53:3f:66:76:00:80:43:61:
67:af:51:91:ba:e1:b6:29:71:ab:57:4f:44:d7:f7:
93:15:b9:fc:a9:89:6d:28:2c:78:9a:36:fb:96:29:
d1:da:c3:ac:60:f4:48:39:cd:98:07:10:71:3d:fd:
b7:b8:4a:9a:dc:63:e7:36:6e:e6:d3:0c:fc:08:54:
55:26:e4:9c:3c:27:7f:ba:82:90:20:42:a8:f4:59:
bd:8c:7f:e2:91:d8:39:41:be:62:4e:17:32:12:78:
04:90:61:ac:2f:be:7b:5d:69:46:3d:ae:02:99:b4:
d3:dc:56:54:4b:32:28:e1:79:7b:e7:5f:54:38:79:
e9:d2:a8:2a:33:37:d7:a6:18:64:35:06:68:a2:68:
99:9d:6d:77:90:dd:85:86:8a:90:f3:a6:0d:a3:56:
84:f5:89:49:c0:1a:0e:f6:02:6d:0a:44:eb:a0:6a:
25:2d:9b:1a:4c:3c:16:6c:20:f7:29:91:97:2a:56:
00:a4:03:97:00:4f:39:81:79:1e:3b:2b:b3:e9:17:
25:9f:ff:fb:7d:01:22:5e:b5:26:a6:85:2f:8d:5e:
4a:9a:73:75:16:cb:17:1c:97:2f:23:b4:a7:c9:18:
a4:8a:2e:99:b3:2e:0e:f5:2d:5a:ee:49:fb:64:3f:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:69:F8:01:64:D0:26:25:32:34:12:97:25:30:FE:54:0E:84:F5:FF
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:38:44:85:36:70:98:10:a6:18:21:a4:88:d7:61:1c:d0:1b:
29:da:3f:4f:e4:13:8d:88:33:5c:99:47:22:1f:cc:29:c3:5f:
45:dd:78:3d:09:13:ce:c6:64:69:7d:fe:ea:65:42:4b:5c:e2:
7b:7b:5d:8f:25:7f:0e:44:3c:50:f0:cf:f8:58:d2:4f:50:d7:
83:e2:ec:97:8b:0c:02:37:4e:81:2f:44:92:64:54:36:76:0b:
8b:2c:de:40:9b:47:17:a6:96:1f:2a:97:28:f6:62:88:fc:15:
bf:ce:0a:9e:e8:1f:ad:9b:f1:04:fc:e6:0a:58:dc:a9:eb:13:
05:27:10:28:bc:79:41:a9:a5:c5:d3:a0:55:6f:29:c2:2a:36:
dc:f3:09:3e:12:9b:31:79:73:98:bb:66:9d:7c:46:27:65:e1:
4f:dd:18:e4:88:63:63:fc:af:dd:10:87:5c:c7:74:8e:20:f3:
5a:96:9c:c7:7b:53:5c:d2:39:f6:be:62:d1:d9:79:fd:b8:9c:
e6:2f:08:29:bf:ff:cd:27:d6:6d:f2:ba:87:4f:12:47:b9:f6:
52:be:3b:3a:1e:2a:b1:33:9c:1a:55:0d:37:0c:27:fc:ea:c2:
8f:eb:f1:28:bd:1f:7e:22:d6:0a:74:33:45:0c:7f:28:8d:f1:
eb:f0:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:03 2025 by rpki-client