Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: ECMdTaNmGkVR1agkkGs0nEjajB1uqQkO+wUDwJz92Jw=
Subject key identifier: 0E:F7:34:4E:D0:43:2A:80:94:67:14:46:19:34:23:AC:57:4A:37:C0
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 0197B7B387AF4C1559C231CADCB1A9EE6E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 03C4
Signing time: Sat 28 Jun 2025 18:01:25 +0000
Manifest this update: Sat 28 Jun 2025 18:01:25 +0000
Manifest next update: Sun 29 Jun 2025 18:01:25 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: bt45AoliUpuvQx67YhdiRS5qJGkLpuXLyyAQZkyGtqE=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:87:af:4c:15:59:c2:31:ca:dc:b1:a9:ee:6e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Jun 28 18:01:25 2025 GMT
Not After : Jun 29 18:01:25 2025 GMT
Subject: CN=0ef7344ed0432a8094671446193423ac574a37c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:66:61:e1:77:f7:1c:97:3c:ce:96:02:3d:
5f:78:12:a0:a3:55:58:2f:a4:8d:f3:31:5c:57:d1:
2c:b5:47:85:ca:58:2a:b1:03:ed:91:d5:c5:38:70:
79:2c:d9:20:9d:51:9a:5d:94:23:bb:97:7a:d8:9a:
1f:ab:f3:58:f1:96:1a:1c:68:8f:20:e1:ba:09:81:
a2:59:38:38:8a:b3:ae:6a:f7:0b:b0:87:75:99:4f:
4a:43:e0:69:f8:6a:f9:58:09:b3:c5:e8:29:26:b7:
67:27:13:3b:a1:ae:ad:57:5f:0e:eb:c9:e2:39:d2:
90:15:89:43:7b:b1:f4:81:e2:16:2d:17:d2:1f:34:
ea:55:5e:50:85:60:86:22:00:88:d6:25:4d:f7:b5:
26:c2:7c:c2:f4:50:7f:94:61:76:8e:6c:4d:f8:b5:
1f:72:eb:d1:c1:8b:e9:46:f8:25:54:42:8c:c9:e4:
bd:79:90:20:30:47:70:97:21:06:67:6e:a9:61:fe:
68:ab:91:40:b5:f0:07:2b:0e:c7:59:19:9c:29:4f:
fc:5e:e0:3a:d1:4a:11:b5:76:d8:3e:43:d0:19:a5:
38:03:bd:e0:4a:43:07:92:e7:4f:2e:37:fa:5c:86:
11:0b:34:de:f8:37:41:2b:31:d4:6a:7f:48:71:b8:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F7:34:4E:D0:43:2A:80:94:67:14:46:19:34:23:AC:57:4A:37:C0
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6a:df:49:c5:a2:c9:60:8d:96:fb:10:04:ef:c4:ac:45:cd:
5b:d7:c6:e6:6a:79:a6:95:93:c1:d9:f0:a7:cb:9e:30:9f:c4:
3b:e3:8b:4c:05:70:57:90:92:09:82:fc:da:3c:0f:da:fc:17:
73:c4:80:e4:35:1d:b7:0d:94:59:61:b0:d6:b4:b3:19:54:74:
48:16:9c:d0:10:f2:49:66:a6:15:02:aa:da:d1:bf:07:16:9e:
db:df:5b:29:1f:a0:eb:b4:5c:c7:93:d2:6c:c8:58:93:d9:42:
0a:fa:dd:c0:07:b2:24:95:8c:ab:2e:9a:e2:43:05:bf:1c:b4:
d1:a2:3b:bd:12:b8:81:40:48:39:25:2d:0d:db:d0:3a:b7:3b:
0c:a3:f7:a0:7b:60:ce:69:5e:52:ab:41:a7:c9:d9:ee:d7:88:
5a:1e:0f:eb:6b:68:42:f5:0c:ac:bd:ac:56:d7:a4:50:40:77:
46:3f:68:33:48:93:1d:29:dc:85:4f:96:21:0b:07:31:d8:20:
26:64:53:03:11:d0:60:2f:05:d0:e6:9d:f0:7c:1f:78:13:eb:
2c:e4:ce:a2:59:9d:9c:48:d8:65:bb:f5:d1:36:66:57:8d:60:
2b:33:dd:18:08:59:2a:4e:8e:f2:7e:64:7e:b1:3b:b1:85:c1:
f1:ea:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:12 2025 by rpki-client