Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: G5JDy57QDeUs8zVksJtXA6mL1QmRcKhK0lWojzaLY18=
Subject key identifier: A2:C3:B8:92:40:F1:7A:08:54:89:4A:3C:79:A1:1C:42:60:FB:22:95
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 0197B6A19EA141C23E366062C675B4F3A6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 0319
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: xVjp/6SgAXvNH+cih6DsBMLlAAhG3WBkogI/QG8DB7g=)
2: S_7zCzKI7ogFykDCB9smaQVWqXk.roa (hash: mF9Q6AT4rOdp1L23mn4M/sQI8pPZFfLdxAWMPoSdESs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9e:a1:41:c2:3e:36:60:62:c6:75:b4:f3:a6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=a2c3b89240f17a0854894a3c79a11c4260fb2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:58:78:a0:63:bb:51:59:6c:22:38:14:fe:
9a:f3:dd:0e:0b:b6:a5:27:61:46:db:68:8e:37:83:
f6:8d:a5:26:e1:14:40:c8:c6:65:7f:33:81:b8:18:
47:e6:86:22:7a:d4:a8:73:76:bf:b0:dc:af:3a:b5:
e4:e8:f8:56:eb:24:9c:dd:d1:9e:cc:b0:dc:5d:9c:
f4:12:5a:9f:6f:7d:8b:a9:9a:c1:1c:02:6d:17:11:
44:9f:b0:1f:87:6b:9b:51:d6:c3:a0:04:2f:bd:5d:
5e:9a:60:b1:01:c0:63:e9:2e:2d:68:1c:9c:44:d1:
58:6b:fd:14:53:32:b5:ee:68:4f:35:1f:c4:a0:53:
49:79:95:3b:b2:d6:20:c5:9f:16:a3:d1:73:9e:b1:
6d:85:b1:44:95:aa:ba:35:02:79:e5:f0:a2:b7:69:
35:dc:8e:49:c0:53:33:48:e6:91:bb:d0:30:49:7b:
94:78:0f:be:99:9b:1b:34:57:eb:54:ab:06:d6:7d:
96:9b:6c:45:87:d7:b5:27:56:75:67:90:0e:13:84:
e8:1c:37:c0:86:6c:00:59:14:56:53:4e:dc:98:32:
d1:3d:3d:03:a1:02:c9:f9:b6:c5:3d:44:3d:2b:9c:
ef:62:f7:c4:5b:35:bd:21:31:b5:c1:5e:35:c2:51:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:B8:92:40:F1:7A:08:54:89:4A:3C:79:A1:1C:42:60:FB:22:95
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:f8:16:93:cf:52:59:b2:0e:90:86:27:0f:ff:0a:96:ef:
d3:15:5d:e0:25:c9:17:92:e5:73:0c:a7:14:60:18:6a:de:2d:
e0:64:4a:69:27:b4:9f:92:c9:fb:22:b7:0a:d9:0b:f7:9e:86:
92:d3:7e:d2:ad:1a:9a:5f:14:fd:08:d7:61:24:8c:cb:60:5f:
c3:13:b9:52:c0:c0:1c:74:5b:6c:3e:07:d5:90:93:19:49:f3:
ba:1c:1d:7a:3c:73:cd:1f:b0:cb:0d:e0:5f:6f:7c:e4:37:c6:
b1:d9:37:67:26:eb:ac:8c:26:89:8a:7a:34:68:16:a4:1e:e3:
4a:12:aa:74:55:0f:dd:3c:26:01:ba:c7:da:e5:79:9f:ce:79:
16:e4:87:0a:51:71:1f:80:3e:e6:aa:88:da:4a:6a:56:ed:a1:
9a:9f:c3:93:ab:0f:01:90:7c:e7:e2:9f:85:b6:dd:cf:aa:d2:
bb:cb:d3:ba:ef:5b:dd:93:d7:19:08:b7:cf:db:8d:24:72:a0:
db:4f:8a:ac:b0:27:d1:c6:27:64:e9:3e:12:6f:92:9c:fc:27:
c2:a9:dd:18:19:3b:cc:ae:a4:5c:54:3b:33:0d:f0:f9:67:69:
58:19:50:96:b9:8d:bd:4e:49:bf:50:d3:8a:53:c0:66:be:3e:
d6:7e:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:29 2025 by rpki-client