Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: UMWRuQ9O5fZh9viznPFNt5p3+/9HRLGj9p6eVmMco6Y=
Subject key identifier: C5:91:79:C8:58:87:1E:AE:FA:7D:E8:4A:3D:5D:A2:08:E2:69:34:2A
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 0197B70E6988F5C416E40361EBEB1A4910A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 0400
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: y9RddX5tQP2onQ3SfKmIHi/xHnbdbVarKkhr0B1hCFU=)
2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:69:88:f5:c4:16:e4:03:61:eb:eb:1a:49:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=c59179c858871eaefa7de84a3d5da208e269342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:58:b6:b1:66:9d:ac:29:fc:be:fd:8e:63:
02:cc:56:04:41:8f:85:55:7d:5b:f9:f8:0a:c1:8b:
db:9f:72:5b:03:24:a2:93:4e:1e:62:d3:8a:c6:95:
8d:7f:fb:97:e8:ac:0c:76:c1:f3:71:e6:d2:eb:cc:
5e:73:d8:54:3d:b9:41:98:45:f5:6b:4c:d1:f6:3f:
74:76:7c:f5:65:0d:95:d5:a9:c3:68:37:96:a1:cf:
e9:82:b8:d8:48:57:e2:c8:b8:57:ef:4f:fd:79:19:
ac:5b:68:ec:0d:49:4b:a3:c4:25:2c:03:dd:18:cd:
b9:b4:c4:ba:a3:8b:88:a8:b5:fa:af:db:44:62:9e:
f8:91:cf:d1:08:ea:18:8a:9b:54:e2:0a:90:ff:99:
fb:1a:ab:f6:41:09:56:7b:68:29:6f:cf:94:a6:c2:
6e:58:81:a2:1c:8f:6b:55:86:cf:83:8f:00:31:ac:
37:2f:a8:f7:b0:df:ec:9d:7e:9b:69:82:9c:c5:b4:
62:10:b8:b0:17:59:11:de:3b:08:dd:3f:ee:e8:d0:
14:86:7e:30:9b:5d:b2:bc:5b:0a:8b:8f:60:63:6d:
56:00:f3:9e:ac:8f:58:df:11:3f:14:a2:b5:95:b5:
97:de:a1:9a:c5:fd:dd:31:cd:60:50:b9:6b:e7:a5:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:91:79:C8:58:87:1E:AE:FA:7D:E8:4A:3D:5D:A2:08:E2:69:34:2A
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:f7:96:7d:e2:90:28:d4:cc:6d:5b:e7:ed:b1:ee:ed:83:
b8:70:7d:28:08:ea:af:0c:c3:c3:bb:8f:e7:a6:a5:5d:43:f9:
8f:dc:37:a6:69:37:74:c5:e3:1b:88:5a:55:eb:15:ba:71:e0:
ed:f5:72:87:98:13:92:d1:84:a8:f0:2f:56:0c:f3:c5:89:95:
a3:ff:0a:9d:10:6f:e4:83:d7:ae:c2:98:f0:d7:53:36:9e:ba:
95:56:13:c0:c4:49:ea:a1:be:49:91:6c:0c:7b:aa:6e:c1:b0:
bd:2f:fc:da:51:56:26:d2:e4:09:0a:27:5b:a0:cc:38:b8:aa:
ce:ed:c7:ed:24:0b:22:a4:03:93:5e:e7:e1:85:64:28:d3:85:
65:93:4b:27:49:eb:d6:a5:d5:19:c7:4c:ed:5c:5f:7a:30:21:
2a:32:6b:ca:27:02:c8:96:4b:84:6a:5a:53:a9:9e:4b:69:47:
2e:04:41:7f:f1:ce:91:cc:f7:13:45:92:88:19:c7:d8:ac:c1:
9d:4a:e0:49:4a:29:1e:b5:50:03:89:95:1a:09:42:3d:da:2d:
3d:c1:78:80:c8:a6:25:cd:cb:a1:57:e0:ed:e7:04:d4:88:da:
31:6f:9b:44:b9:c4:7d:fa:45:06:81:0f:37:e5:fc:04:15:66:
06:44:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:03:53 2025 by rpki-client