Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: OqdUB5SxUbczCpay12DvpgVc62ptPQMBAZo2Jfhmzd0=
Subject key identifier: EB:9E:5E:00:6F:42:8A:4F:C7:A2:27:54:A9:16:55:76:0D:14:6C:BF
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 0198D7E14F49CD72741B6475FA3E84578525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 17:02:03 +0000
Manifest this update: Sat 23 Aug 2025 17:02:03 +0000
Manifest next update: Sun 24 Aug 2025 17:02:03 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: QFsJd4fjCZQ4y7mWFof5iDxYtSgYFOmAqHRriBJEdYA=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:4f:49:cd:72:74:1b:64:75:fa:3e:84:57:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Aug 23 17:02:03 2025 GMT
Not After : Aug 24 17:02:03 2025 GMT
Subject: CN=eb9e5e006f428a4fc7a22754a91655760d146cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:05:f5:87:e2:7b:4d:4e:1d:cf:2b:06:c6:
c0:aa:06:57:7b:26:21:bf:20:4e:bc:72:31:61:59:
e7:6d:b0:b7:8f:37:4d:a4:1b:83:c6:cd:1d:28:ca:
60:e3:8e:6b:ea:17:2f:7f:26:89:84:71:3b:77:37:
dc:1b:ec:25:b0:fc:fd:29:38:88:6b:bf:ff:9e:00:
b5:33:4e:04:b2:7d:fd:bd:81:dc:13:24:16:1f:bb:
39:0c:12:eb:80:fe:f2:37:4b:d3:9a:0d:fb:09:e3:
ca:73:91:38:8b:6d:c5:61:a4:8d:fd:91:2f:1a:2a:
e5:b6:05:2b:2b:a0:c4:28:29:f5:de:46:30:07:4b:
31:0f:fe:d6:fe:cd:94:bc:0f:1e:7c:a2:43:14:9f:
98:dd:61:8f:b0:9a:24:47:3c:77:5e:83:56:af:eb:
4e:a6:8d:87:61:30:7f:f3:3b:e8:a0:c0:ec:ed:50:
2e:7b:22:0d:29:e3:7d:4f:5f:5f:69:0b:91:49:55:
85:80:36:31:27:53:93:02:8e:34:87:26:ec:7c:4c:
d9:9f:b0:35:d4:b6:f1:02:1b:45:44:59:3c:d5:e7:
a4:2a:e8:36:2c:70:81:d2:7e:c3:25:ed:f2:6f:e1:
3c:b5:26:da:0c:16:aa:99:c6:85:00:c9:6c:05:53:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:5E:00:6F:42:8A:4F:C7:A2:27:54:A9:16:55:76:0D:14:6C:BF
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:53:c5:e2:a3:4b:9c:35:d3:9d:6d:5b:3e:2e:6e:64:07:44:
55:aa:f6:28:7c:0d:71:98:67:83:9f:2c:5b:38:b3:ca:8b:95:
2d:73:51:b0:0a:68:29:07:35:cc:00:a5:b2:c0:77:f8:71:d1:
96:80:db:1c:2b:4b:58:ea:fb:26:04:cb:da:67:18:7c:f4:d7:
14:61:b1:52:4c:93:e3:69:d1:61:5b:e7:a4:47:07:59:23:68:
f6:ef:19:ab:b7:21:10:a1:0d:72:aa:10:d3:7a:e3:36:33:c5:
fc:d6:af:df:ec:ef:8f:84:70:6b:7d:e6:4f:b7:c0:c2:6c:32:
c0:50:3c:a7:a2:38:7b:82:c3:58:e3:7c:f7:53:40:7a:42:e8:
92:d1:18:97:4a:d6:8d:7c:13:dd:42:b2:b7:ea:84:ce:d5:d0:
0e:07:cc:8b:f4:69:f0:c7:1f:01:82:9d:37:14:8a:43:a8:6a:
63:b0:41:e1:f5:9a:36:51:6d:6a:a2:f3:75:1b:6d:56:1a:d6:
67:43:92:57:dd:d3:69:fc:8c:74:0c:84:e1:4a:b0:01:f2:3a:
e0:37:f3:21:7d:a0:d3:ed:71:1c:81:3d:8f:94:49:3f:aa:a7:
8d:7b:7c:03:86:c6:8c:e5:ab:e1:54:51:29:2c:f9:9d:0b:fc:
9a:25:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:36 2025 by rpki-client