Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: 9NzHFuR39vaBRqARl2H9FIgqDAoAi1Uk2deS7JNt8Qc=
Subject key identifier: 62:D3:06:57:E5:D6:5E:5E:D2:07:7E:96:C4:0B:89:37:63:3D:C2:A9
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 0197B8215E1B7D0DC52D8B00335E52C2334C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 013F
Signing time: Sat 28 Jun 2025 20:01:23 +0000
Manifest this update: Sat 28 Jun 2025 20:01:23 +0000
Manifest next update: Sun 29 Jun 2025 20:01:23 +0000
Files and hashes: 1: USYf1bw7MHizcISPSt3QDNx57-c.roa (hash: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: CfWYQqlewaBqUOIP0bJOlbQKUAZrF8gNOYvr/8sLsFE=)
3: mPel-Ky4KTw-yipTpTX6XFn1X6g.roa (hash: N5pE0c5lXs23W7feBcxuowFluJhlp7T2zf0Dpvw7muA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:5e:1b:7d:0d:c5:2d:8b:00:33:5e:52:c2:33:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Jun 28 20:01:23 2025 GMT
Not After : Jun 29 20:01:23 2025 GMT
Subject: CN=62d30657e5d65e5ed2077e96c40b8937633dc2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:64:d7:55:c4:d0:46:c4:20:6a:37:0d:4d:
42:a1:aa:52:b5:48:f9:74:15:5e:f5:3a:38:42:ca:
65:9e:d7:44:4a:0b:b6:76:79:b7:50:bf:79:17:39:
4d:da:46:f2:12:f8:f8:bb:12:7a:cf:06:c5:74:59:
cb:24:ab:e7:b6:95:ab:d4:f8:6b:d9:6d:d4:18:c8:
6b:24:43:9c:53:7a:e5:14:6a:1b:52:45:3d:e9:26:
0c:a3:f6:c4:41:34:0f:5f:37:e1:18:9f:6f:6b:5f:
15:74:e8:48:ac:03:3d:b6:94:33:4d:4d:d1:51:f2:
e1:a0:41:e9:16:05:e7:e8:6e:26:3c:80:15:84:df:
bd:25:49:0b:70:4e:c0:d1:26:46:7b:55:ee:1e:ad:
d1:fd:77:db:52:60:d7:cb:46:39:dc:18:42:6a:2f:
ff:7e:87:fa:47:ea:e3:e4:4c:fb:01:a6:7a:da:47:
7d:3c:f9:e5:f4:c0:01:d4:da:e5:75:eb:67:47:89:
e4:a9:62:2a:13:da:1a:9b:09:af:33:8c:4c:ec:a9:
39:d0:a7:87:2f:2b:c0:b0:f9:46:95:da:3f:10:22:
c4:a5:77:3e:65:b2:8c:be:8c:e1:49:5b:95:dc:eb:
16:e8:1d:19:91:bb:b7:a7:b1:7a:9e:d0:6d:9f:99:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D3:06:57:E5:D6:5E:5E:D2:07:7E:96:C4:0B:89:37:63:3D:C2:A9
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ac:cc:61:b4:72:db:5d:ee:bc:9a:a7:0d:35:b7:68:a8:64:
01:3a:e1:78:5e:2d:eb:36:70:d6:5c:e0:0e:71:85:58:8e:32:
a0:91:1d:4b:53:85:c1:92:15:e5:f6:16:8c:2b:b2:0e:ec:92:
a8:7e:64:d3:66:a0:02:a9:7e:f5:26:94:3e:26:e4:8a:87:51:
da:b1:e4:91:67:57:0f:af:e9:30:97:5e:02:06:79:07:e4:04:
bb:03:e4:a8:ef:b2:0e:b2:22:0c:34:49:b7:40:e7:00:ed:63:
72:59:8c:59:03:89:1d:cb:25:3a:a6:2c:d2:79:75:f5:c7:8d:
37:a0:a2:37:85:c7:36:21:0d:48:0f:27:28:ce:43:56:8b:34:
a0:5c:b2:91:c7:9f:66:6a:f7:7c:65:fa:7d:31:df:60:5d:f5:
0e:c7:cb:a2:41:cf:b8:4c:70:69:7a:2b:1a:c6:a0:20:49:5c:
f6:af:19:b9:df:45:aa:90:da:e1:0f:91:92:56:44:1b:28:e3:
8b:14:70:72:ba:f3:c8:f1:da:db:0c:b3:cd:4e:73:4b:06:59:
ae:01:42:c3:30:29:62:30:0a:57:ea:95:90:2a:71:8d:93:8e:
b0:1b:84:b1:84:37:04:7a:62:c1:ed:08:ea:a3:84:88:9a:ec:
7a:42:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:37 2025 by rpki-client