Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: XenbyuIlMCK4j+yxAElXjRS3/ziI61QjCxJfGJ9ibAU=
Subject key identifier: CC:77:75:BC:C3:A0:7C:A2:50:71:91:E1:F7:44:DC:6E:63:6E:1F:DE
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 0197C4CA278F5DA6B9808EDE6299036D80CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 15C1
Signing time: Tue 01 Jul 2025 07:01:12 +0000
Manifest this update: Tue 01 Jul 2025 07:01:12 +0000
Manifest next update: Wed 02 Jul 2025 07:01:12 +0000
Files and hashes: 1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: P2Ixu5nm99/saxXCZXylxRnPOBK8ilV9HjcA+RkUdUk=)
2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:27:8f:5d:a6:b9:80:8e:de:62:99:03:6d:80:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Jul 1 07:01:12 2025 GMT
Not After : Jul 2 07:01:12 2025 GMT
Subject: CN=cc7775bcc3a07ca2507191e1f744dc6e636e1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:fa:c6:c0:71:d8:b5:df:09:12:d9:4e:a7:
86:56:9c:a1:84:5b:8b:03:ff:28:67:5b:9d:af:88:
4b:3c:b4:0b:7c:09:91:a2:11:5e:eb:2a:f9:3f:28:
67:6c:88:bb:88:c8:cb:ba:18:34:97:06:f8:27:f6:
6c:98:e2:87:7d:f5:bd:f5:a5:74:db:70:53:00:0d:
86:a6:28:44:ff:29:f5:fe:ef:5a:19:29:c3:7a:00:
1d:cb:08:33:4b:0f:c7:12:4d:d6:53:36:01:74:30:
a2:f6:c7:28:aa:d8:f6:3c:df:1e:b2:17:b3:fb:e6:
6c:ab:f8:44:e1:75:1a:cb:01:81:9b:e1:fe:ab:cb:
da:d5:df:3c:4d:83:ba:7d:92:f5:cf:7e:35:2d:50:
3d:3c:5c:8d:8a:a2:dc:f4:ff:79:09:97:ad:25:c5:
5b:76:c8:c0:d6:26:5a:29:f3:12:cd:bf:a4:97:4d:
7d:e7:ff:c1:47:17:41:d3:f0:62:67:d3:ff:ce:e9:
42:eb:4e:12:2a:07:d9:54:f3:aa:53:33:97:84:de:
52:f8:75:2b:4a:58:82:6c:09:16:d5:26:c1:50:34:
99:10:1f:75:9e:fd:a5:5b:bd:35:e1:37:ed:eb:17:
b1:39:2f:78:4a:16:2c:0b:b4:f0:92:27:ba:b3:0c:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:77:75:BC:C3:A0:7C:A2:50:71:91:E1:F7:44:DC:6E:63:6E:1F:DE
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:af:f6:73:e7:81:ef:08:3f:bd:9a:5c:76:4f:ca:94:69:71:
93:ba:a3:32:c8:f2:f4:95:14:35:4e:38:af:4d:47:af:4b:77:
e5:1d:1f:f0:a5:09:2c:4c:da:5c:bb:c9:b6:c9:c0:2d:a7:d8:
c0:af:c6:b9:fd:df:90:77:63:62:ed:ad:73:1e:c1:c2:e1:e2:
0b:c8:2f:0e:0d:c9:0a:79:3e:5f:eb:fa:8c:2c:62:e9:e3:1e:
37:42:a2:2c:18:72:32:b4:0f:4a:f4:74:43:ea:6d:fa:cc:ba:
88:ac:27:3f:5f:4e:ad:77:ac:99:6a:79:26:f2:f4:2c:58:c1:
19:b8:38:c2:e1:ce:23:bc:74:32:b4:52:32:45:a9:5d:c1:af:
dc:f0:fc:6a:8e:17:1e:f9:07:85:32:f9:83:49:5e:0d:82:78:
6b:a3:31:f6:49:dc:5a:91:1b:ad:1e:b0:df:44:71:d7:c8:c4:
b3:36:87:eb:70:4e:13:36:28:17:2d:f5:d0:cf:b6:a9:7c:a2:
9d:33:bc:dc:1c:8c:29:7a:45:15:84:f0:ed:6f:f5:63:46:e7:
01:e1:31:9c:31:9c:00:bf:76:7d:d5:bc:d0:38:3f:19:00:91:
18:ae:af:6f:8b:0c:c5:44:f8:d2:3c:e2:17:6c:c5:e1:70:ab:
77:b3:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:24:55 2025 by rpki-client