Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: FIb6IrgMpJPGKzAmBa5q8UarggAHl2D2GJCT0nZVPH8=
Subject key identifier: 73:87:99:DF:1A:29:63:CD:6C:E9:04:DB:85:C2:62:84:B1:87:FA:71
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 0197B5FC6333F4A5335653076CF064754F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 10:01:45 +0000
Manifest this update: Sat 28 Jun 2025 10:01:45 +0000
Manifest next update: Sun 29 Jun 2025 10:01:45 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: R+YuB5rZRcrwi/5Vw7SYnu0VGjzMmQVKeH22v5cLk74=)
2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:63:33:f4:a5:33:56:53:07:6c:f0:64:75:4f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Jun 28 10:01:45 2025 GMT
Not After : Jun 29 10:01:45 2025 GMT
Subject: CN=738799df1a2963cd6ce904db85c26284b187fa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:52:23:32:5b:eb:ac:d5:c3:cc:e9:4b:db:
51:16:7e:74:38:33:57:23:fc:57:ba:9b:a4:a0:fb:
74:0f:a4:3a:d9:03:2b:98:de:1c:43:16:95:6d:4d:
54:70:3f:ca:3b:ea:14:51:78:8e:e0:1e:7a:81:6c:
4a:84:24:10:15:25:c4:f0:7e:1c:10:92:0f:d0:52:
d3:12:67:56:c5:29:0f:95:8d:2f:93:eb:90:69:d0:
ef:60:b8:ff:0b:87:58:03:9a:44:d6:39:f0:43:37:
63:fd:90:6a:24:58:8a:f7:6a:ea:25:3b:58:67:8e:
c5:80:fd:dc:6b:d4:4b:c1:f6:ec:d4:bb:33:f1:ca:
aa:db:c1:44:28:77:f5:ef:c1:da:4b:15:d3:30:8d:
4d:88:4a:9c:b9:e7:99:a3:66:9c:1e:f1:23:06:85:
46:7e:fc:f9:35:16:7b:65:8f:b6:8b:25:4f:92:38:
1e:2b:06:07:60:75:f5:da:55:79:74:23:f8:8e:56:
d2:79:05:98:a3:9c:d1:5a:47:07:3c:16:10:66:49:
63:c4:2e:94:ef:6a:b6:70:15:71:f3:9b:cf:86:58:
65:3c:f2:71:fa:a8:69:5b:33:7e:86:c8:0e:6d:30:
62:d5:b8:2b:80:15:06:fd:49:dd:d9:a3:eb:90:36:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:99:DF:1A:29:63:CD:6C:E9:04:DB:85:C2:62:84:B1:87:FA:71
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:65:7b:ae:a2:70:d7:01:20:09:49:5d:d6:c0:ae:80:73:49:
44:55:c4:b5:85:fa:57:46:0f:9d:bf:bd:7f:33:08:34:0b:2e:
03:b9:ad:ad:42:73:3b:b5:c6:6e:06:8b:57:57:32:45:31:b3:
b1:06:67:3c:f5:8f:07:7d:cb:01:10:78:91:32:c5:a5:ea:70:
b7:60:3d:d3:df:79:99:a1:01:1f:a5:d6:64:db:3d:b1:6b:06:
da:a6:5a:73:88:ce:c2:11:72:63:a6:c3:b3:58:b0:23:77:b7:
84:6a:52:52:ba:f4:30:80:b4:f3:40:08:33:75:ea:5b:ee:c7:
01:6c:86:4c:ce:de:1e:10:4d:70:ae:05:1e:08:57:1c:72:0d:
3f:b3:27:e6:32:2c:4b:bd:4c:5a:e7:79:20:46:52:03:fb:71:
e4:ce:89:3a:cb:ad:b5:d9:8b:36:50:28:fb:3f:83:0e:35:7e:
26:29:d1:be:36:d1:70:83:a2:67:b2:4e:19:bf:fb:fa:2f:ac:
08:d6:7d:c4:7e:60:8d:24:65:b6:b9:2f:ad:d6:a4:cb:a7:b3:
30:4f:09:42:44:ff:bb:6b:60:2c:11:92:2c:28:8e:93:ea:b9:
d5:19:08:60:0b:75:65:87:bd:64:19:08:9d:d8:10:5e:69:8c:
91:22:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:37 2025 by rpki-client