Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: 7g18wkP49J1dz6u9+DV5JLx+9SjZAaHVziSiwVy6598=
Subject key identifier: E9:38:04:DB:99:BC:A9:9F:67:55:01:65:E0:05:F4:77:D4:4E:DA:FB
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 0197B70EC632901887CE8EE2A1346A635684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: w+j6r0Yz6E7Ok5w6SaxDiYJGZEAtxx+1uXNkoph4bVI=)
2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c6:32:90:18:87:ce:8e:e2:a1:34:6a:63:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=e93804db99bca99f67550165e005f477d44edafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:11:26:e7:3e:bd:c2:91:51:ab:67:0b:85:
c7:49:ed:6a:f1:df:8e:38:81:22:6d:b1:b4:79:e3:
75:28:1b:65:e4:a9:29:69:2a:27:57:7a:76:0e:d4:
48:e8:77:9b:6b:7c:73:e7:0f:4e:1b:e4:2a:1e:91:
e4:01:9a:c3:0d:3d:9e:66:e1:89:19:db:03:4a:05:
2c:c6:07:7c:64:8d:f4:de:22:02:3c:08:af:10:1c:
eb:6e:f5:4b:8c:16:61:c6:d6:71:c0:f4:4f:ad:80:
4f:0d:e6:a5:9f:e2:17:7d:7f:42:e3:a3:7e:2a:ac:
b2:b9:5f:14:ee:3f:db:4d:c4:73:4f:82:b5:cd:18:
58:d8:18:d0:a0:cb:af:c2:96:40:4a:b9:70:c5:fb:
3f:ac:f5:8b:9f:2e:94:74:0f:73:52:ac:8c:d6:30:
08:e0:db:53:54:6e:67:8d:bb:7d:c5:8c:7a:01:be:
fa:3b:0b:bb:1b:12:75:01:5e:55:14:c6:9e:65:92:
bd:bf:23:05:16:0c:65:55:e4:7f:14:75:d1:53:6c:
0c:24:1c:eb:a4:ef:17:28:17:54:b7:ef:a2:86:9c:
a9:8f:a0:b5:d1:c7:60:47:9c:c3:1b:12:f0:87:eb:
e6:67:c7:ac:eb:97:85:f1:92:4d:88:25:c1:11:99:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:04:DB:99:BC:A9:9F:67:55:01:65:E0:05:F4:77:D4:4E:DA:FB
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c4:bc:f4:ba:10:64:e2:14:1e:6a:3a:9b:d1:b2:e1:9b:aa:
ca:80:37:69:4d:23:2c:ba:c1:9f:0f:d5:2c:6e:e8:2c:00:c5:
86:ee:92:39:df:0d:d9:24:90:09:23:4a:6c:20:7f:e7:5e:18:
f4:47:bb:2f:f0:fc:83:54:fe:de:7d:d2:93:59:99:fc:d1:a4:
08:a6:14:6f:f4:0d:94:e2:01:df:60:91:de:d5:d3:85:e7:37:
53:f9:44:88:92:10:3f:55:ac:4b:7d:6a:0e:67:ed:07:6f:7d:
75:ce:62:f3:05:fc:d8:00:ce:07:8d:b7:e0:71:79:67:c3:c8:
20:c5:14:ec:45:8b:d8:30:7b:df:c5:4d:9a:f7:3a:5d:15:b2:
4e:a0:51:1b:1b:c3:92:cb:91:35:27:65:ed:a2:16:0a:30:f7:
6b:a8:2e:12:98:e8:f2:38:c9:a0:1a:ba:d2:73:b1:26:52:d8:
18:b3:53:e9:fb:d6:e9:ea:92:c6:5f:c1:da:8f:3d:a6:5f:2f:
61:fa:1d:2c:31:58:cc:aa:09:ab:75:cb:12:17:b6:c6:2d:6c:
5c:63:a4:a1:52:10:68:cb:eb:b0:cc:98:2e:aa:43:0a:4b:ea:
9a:2e:1a:38:61:29:9c:79:86:30:ac:b8:a1:56:4c:4c:1f:62:
d8:d2:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:55 2025 by rpki-client