Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: ESZYeLDEOqzc7C9UwM1pM1saW/PyoGAJC/5NtP+cOAY=
Subject key identifier: FE:C2:4E:82:90:7F:C0:44:FF:89:72:DB:E9:3B:90:0D:77:F6:A0:75
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 0197B7EAB9472A0B1CAEB298D1C1338C95F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:42 +0000
Manifest this update: Sat 28 Jun 2025 19:01:42 +0000
Manifest next update: Sun 29 Jun 2025 19:01:42 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: z2QVxofoJchSO7G/HuJlAoD07uowCkafLZeigzlCzyI=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b9:47:2a:0b:1c:ae:b2:98:d1:c1:33:8c:95:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jun 28 19:01:42 2025 GMT
Not After : Jun 29 19:01:42 2025 GMT
Subject: CN=fec24e82907fc044ff8972dbe93b900d77f6a075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:a3:c3:62:49:ae:e2:07:7f:b8:ff:f9:f7:
4f:2a:d7:7b:36:19:f3:49:23:8e:98:69:af:02:77:
2e:21:62:9a:dc:a6:6b:a8:2c:59:40:80:d3:76:9e:
18:82:44:d7:a1:06:bc:d9:88:00:0f:94:91:8e:1e:
33:d5:67:c6:cc:2b:4d:26:a9:e3:6c:87:d3:6f:17:
e3:f3:a2:d9:13:18:39:31:0b:42:0f:c8:f7:23:0b:
d5:e9:52:41:1e:87:d5:f8:38:fe:e8:5d:22:4c:dd:
61:63:d4:05:b1:2c:47:65:3e:74:6b:c9:e6:74:f4:
41:47:43:3a:9c:1e:3f:e9:e3:29:08:e2:c4:5a:5a:
87:68:b5:65:13:ac:63:ca:17:05:d5:55:03:97:bb:
d3:0b:4a:71:00:23:57:33:8c:28:de:a0:06:66:57:
3b:88:0d:45:29:43:13:62:17:95:d4:1b:77:cf:7b:
28:50:7a:8d:7d:67:cf:33:9e:a9:a1:19:61:e2:46:
aa:fb:d0:6a:fe:65:a9:ba:44:c0:03:ce:ef:55:c2:
ea:dc:79:90:df:9d:84:9e:0f:2a:80:03:31:4a:d9:
b7:13:11:27:19:1e:03:37:04:e8:cd:f4:7c:3e:28:
de:d7:d3:39:51:4f:c0:4a:00:d1:c4:ee:21:71:2f:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:4E:82:90:7F:C0:44:FF:89:72:DB:E9:3B:90:0D:77:F6:A0:75
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:43:92:2b:8e:7f:6b:3f:57:06:2a:9a:11:8c:c7:52:c5:2b:
66:ab:ee:0e:32:c3:70:66:ff:32:a1:f3:35:71:69:53:8c:9b:
f0:65:2f:a2:06:63:8e:90:35:ee:39:72:c1:69:bf:b0:60:4d:
94:26:32:c4:13:2b:70:f6:02:12:6f:fb:71:fe:f7:dc:7e:6f:
5e:3e:27:71:7d:3a:33:41:b2:bc:92:f5:37:07:b6:e0:02:fd:
4f:27:ee:3f:c8:88:e8:f2:6b:87:34:63:e3:a1:0f:d7:d1:4b:
2b:63:a4:20:4b:d5:b6:a5:da:98:b3:f6:61:3d:a7:43:41:a4:
8d:48:c7:ef:b5:5d:79:d1:4f:87:04:f7:71:44:f8:63:34:cb:
37:ad:2c:02:22:5d:d2:9a:7b:a5:52:c4:3f:04:ac:1d:be:40:
c5:69:c1:63:31:97:b2:65:e1:60:dd:4a:ec:91:f3:94:af:d2:
cc:4a:41:9d:68:7c:33:f0:0f:32:d1:97:78:32:2a:6a:c0:9b:
e3:ec:f3:76:7c:7b:7f:9a:48:f9:c8:e6:5b:14:38:7e:38:24:
94:e9:af:92:c5:dc:26:64:20:8a:69:8d:8a:13:05:2f:99:f1:
99:1d:cc:25:2a:14:53:da:ab:06:04:8e:48:f9:d6:5d:94:42:
7d:d0:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:52 2025 by rpki-client