Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: SXg/t5TZdcqcQrHSBT0pWRVhUJ8dTV3piX/2SwdDT5s=
Subject key identifier: A0:A5:78:46:84:4B:30:0C:63:26:F3:24:53:39:9B:03:15:62:DE:4E
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0197C049F0676E2DAB5982010A1F308D2666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 163E
Signing time: Mon 30 Jun 2025 10:02:40 +0000
Manifest this update: Mon 30 Jun 2025 10:02:40 +0000
Manifest next update: Tue 01 Jul 2025 10:02:40 +0000
Files and hashes: 1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: nXor+wQVakPR+tDcGpWTIF7WnaKcuRn5EXOGN+ashb0=)
3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:f0:67:6e:2d:ab:59:82:01:0a:1f:30:8d:26:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 30 10:02:40 2025 GMT
Not After : Jul 1 10:02:40 2025 GMT
Subject: CN=a0a57846844b300c6326f32453399b031562de4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:7a:52:d2:c9:eb:59:83:d1:aa:66:b4:5b:
78:a6:99:20:a2:59:4a:aa:57:bf:4b:27:0d:52:f0:
52:c5:3a:99:41:99:55:37:85:2f:fc:f0:47:e9:63:
e6:da:98:b3:39:c5:d1:8c:1c:77:2e:18:b6:ff:14:
2c:bf:19:f7:a2:97:23:f1:9b:ca:8e:e9:6b:65:21:
2b:d3:92:79:42:ee:84:1b:d2:0d:16:12:06:3a:0a:
40:c6:e1:d5:d8:47:06:da:86:a3:87:a5:12:1f:67:
b9:be:36:ed:39:fd:b5:b4:bc:0c:dc:6a:53:b9:41:
fd:d5:39:f8:f0:fb:6f:8c:82:a8:01:9e:2f:b0:7c:
34:0b:ba:da:4d:e8:66:4b:9b:10:ef:c7:fc:3e:99:
df:37:e2:22:bf:69:f4:a7:2a:9e:86:bc:49:07:1a:
cf:60:ae:25:e5:ad:e3:d0:3c:83:8f:a3:6e:26:97:
3b:aa:e4:7b:79:77:90:97:f0:92:75:9b:28:a4:b5:
39:cb:cf:e6:b6:94:89:1a:96:b4:7b:14:e1:09:4e:
2b:3f:cd:d3:be:19:ca:b0:56:8f:a1:ba:12:bb:ca:
67:41:35:76:5b:33:bf:74:57:19:14:1a:6f:f8:20:
61:7a:9b:16:fd:78:0d:d0:c0:95:dd:8a:94:5a:4e:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A5:78:46:84:4B:30:0C:63:26:F3:24:53:39:9B:03:15:62:DE:4E
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:01:78:bd:12:68:a1:1d:5c:b1:21:a4:a4:27:7c:85:74:b8:
82:15:6d:81:1c:d2:22:9c:42:55:8d:b0:cc:6e:ab:52:ac:96:
4d:a5:3b:65:eb:fa:24:2c:0b:9c:46:89:9e:73:dc:d1:dd:45:
07:a3:dd:2f:42:a2:f4:1a:11:da:68:1e:f1:c3:27:49:72:a4:
4e:9c:7a:21:50:dc:34:47:c1:b4:3d:23:12:82:64:4b:01:65:
13:0d:90:c5:a8:b7:db:c2:91:7a:61:7d:df:c5:36:7f:2d:c4:
f0:d3:ef:6b:38:f5:21:2b:53:86:bb:a8:ec:23:f9:a7:90:ce:
3c:64:60:ad:7d:85:7a:71:b7:88:0e:e1:30:9b:21:28:0f:78:
42:01:12:33:49:eb:46:ec:e9:d5:46:a4:72:52:c9:45:8e:2b:
e7:8f:af:54:59:a5:26:50:00:b6:a7:8c:67:26:63:dc:75:48:
b0:91:1b:58:63:1c:fa:7c:61:33:12:9a:4e:e9:c5:b5:c5:9d:
57:7e:5a:bf:01:a2:22:03:cf:b2:a2:94:92:e6:f6:95:67:74:
d3:be:32:f0:1b:7e:a1:26:5a:d2:91:9b:77:56:40:ab:fa:42:
d9:5c:02:e9:6a:32:2e:ca:e5:e5:9f:1c:4e:40:53:76:94:90:
6e:4e:74:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:34:42 2025 by rpki-client