Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: Cbsh5DeMBSw7zAOgNcyLFOY6iFgFkVeaPHtAG8d9zSE=
Subject key identifier: 7A:61:17:72:CA:90:53:56:4A:8D:F8:86:A3:F8:50:08:8F:13:B6:2E
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 0197B88F68D29D4B7D3EDE3C03D111AA393C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 0FB1
Signing time: Sat 28 Jun 2025 22:01:35 +0000
Manifest this update: Sat 28 Jun 2025 22:01:35 +0000
Manifest next update: Sun 29 Jun 2025 22:01:35 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: QBITJ8obsyvCph/DKXfwN50GLA2VJR1yP/dFDgtwaFg=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:68:d2:9d:4b:7d:3e:de:3c:03:d1:11:aa:39:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Jun 28 22:01:35 2025 GMT
Not After : Jun 29 22:01:35 2025 GMT
Subject: CN=7a611772ca9053564a8df886a3f850088f13b62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:8b:20:ae:b4:1c:e8:a5:5e:df:23:1c:02:
0c:a1:00:f8:b5:6f:cb:38:9f:dc:26:d4:14:ef:d7:
be:48:4d:92:79:72:e1:ae:d2:3b:30:58:43:99:06:
54:5f:a7:da:25:24:10:b0:74:1a:88:7c:d2:4b:4e:
95:a9:cb:10:50:14:7b:36:e9:03:84:86:a1:51:c6:
d4:df:b7:e4:1a:ff:e1:9a:c3:72:3d:72:39:f5:91:
39:ea:cb:63:fb:59:e0:86:fe:71:b2:0e:2a:93:f8:
f6:0f:68:f9:a0:f1:16:4a:a1:da:07:d1:db:98:2a:
b5:15:a5:dd:03:62:aa:a7:fd:43:a7:2f:71:d1:0b:
81:2b:c7:7a:39:f0:c8:c9:2b:57:47:e6:57:fc:ab:
a6:9d:7a:2c:64:d2:5c:65:c8:d3:4e:ba:ce:8a:4c:
a6:e4:17:60:2f:d4:a7:7c:20:4f:50:2a:02:fa:c5:
2a:7c:31:31:87:b3:4d:2c:8a:e4:5c:df:c6:5c:5d:
3a:f0:4f:31:17:23:23:bb:f6:6f:50:10:8c:d0:d7:
17:20:9f:91:f2:40:e8:c6:80:00:a9:4a:d5:f3:06:
0e:23:66:53:20:98:08:46:1c:2b:c8:24:f1:b9:e5:
45:de:1a:b7:a7:7f:be:9a:8e:69:c9:3d:16:c9:fd:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:61:17:72:CA:90:53:56:4A:8D:F8:86:A3:F8:50:08:8F:13:B6:2E
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2d:d0:69:31:97:1c:90:0f:dc:1b:c2:63:b9:9d:19:83:e6:
e5:0a:5a:95:8a:13:e5:3e:69:11:65:13:96:91:b8:92:ca:3a:
a0:07:a5:f5:e7:6d:32:69:48:81:1b:e8:9a:8d:42:75:74:eb:
94:97:ed:6e:af:77:8b:46:6a:76:d4:cd:b5:40:85:1f:f9:94:
1d:14:58:e2:aa:2a:9d:e3:05:61:9f:72:f6:09:fb:97:a9:21:
0c:2f:65:ca:be:36:70:87:55:43:7c:1d:f6:91:14:5f:f3:9d:
77:9a:1c:23:a4:40:41:6d:56:4a:8d:d8:3d:f6:79:85:c0:8a:
9e:11:17:2e:6f:c0:4e:d0:aa:51:55:19:87:fb:1a:15:62:90:
ad:fb:2e:71:9f:38:52:55:0a:6e:62:89:da:5f:ec:65:50:78:
4c:89:b4:33:0b:02:cf:49:74:d3:84:7e:5c:7a:a5:b3:be:25:
69:57:0e:88:40:6b:ce:44:f7:d9:12:3a:9d:76:ed:ff:cf:67:
81:fa:7e:94:66:59:02:63:2b:e9:c6:f0:d8:36:16:53:d7:83:
ea:b9:21:0a:eb:04:be:21:9e:b0:b1:61:7b:22:70:29:93:e4:
41:9c:09:8e:71:ca:a7:2f:fe:47:7a:c9:c2:49:9f:3a:b2:69:
83:30:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:39 2025 by rpki-client