Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: f5SHS3/YoT/K+/JjbRA/Bzjl+RmqmOiiwP8AquBTWoA=
Subject key identifier: D6:8D:6D:3D:FC:7B:7E:0F:55:0D:80:E3:00:AF:25:9A:11:78:F6:00
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 0197B7EA1F65C3C0F2426B78A51949B2742E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 0803
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: /SXCKChg8XCqq2ENx6lEFlA1xvMKtvDknY/hS5LLkWs=)
2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1f:65:c3:c0:f2:42:6b:78:a5:19:49:b2:74:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=d68d6d3dfc7b7e0f550d80e300af259a1178f600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:76:46:83:61:c4:0b:7d:a0:4e:49:5b:4a:
f6:8e:09:89:a7:8c:d1:51:62:03:64:6a:cb:1f:ee:
c1:b4:fe:04:79:9c:5f:bb:d3:d8:e4:0b:29:28:bf:
0e:07:02:c6:72:89:57:b6:50:79:a6:57:ef:cf:a7:
b4:bf:9c:38:df:97:9a:2d:ec:7c:af:8c:21:08:74:
96:0c:04:27:d3:72:d7:0d:d1:12:45:96:74:2e:16:
94:ee:08:70:ba:00:94:07:50:6c:cc:58:f2:2e:26:
bd:2e:f6:5d:00:95:f2:dd:5a:27:86:6a:26:ce:4f:
2d:ff:31:5d:cb:f8:2a:90:25:6b:39:1f:dd:56:d5:
ad:64:b2:5e:61:4d:bd:8a:e2:10:72:b2:4e:14:c8:
31:b9:84:57:30:06:2e:e8:a4:d5:f6:93:4e:8a:49:
cf:c1:a5:0f:e2:a8:0b:06:1c:37:c8:d4:2b:2a:51:
d9:6a:12:fd:60:eb:5b:30:28:0d:60:4e:65:e0:25:
22:26:30:49:fc:51:e1:08:23:0b:e9:3f:f6:ed:83:
54:d0:19:1c:82:d1:e8:d2:1b:27:94:ee:84:6c:37:
a0:02:63:84:5c:e6:44:34:c4:bc:0f:74:a4:31:83:
46:7c:90:a3:d3:6d:95:a1:94:3f:3a:b3:03:77:e1:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:6D:3D:FC:7B:7E:0F:55:0D:80:E3:00:AF:25:9A:11:78:F6:00
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8e:34:ea:dd:81:af:a6:e1:98:e2:e2:5b:17:80:8f:56:4e:
b8:bd:3b:38:d2:77:6c:74:11:17:d6:a9:33:52:bf:53:06:34:
dd:38:c9:ad:5d:50:85:d6:a1:b9:90:69:f4:88:16:cd:2d:ce:
61:03:dc:24:17:68:f1:ba:c4:aa:76:d6:bd:04:4f:10:e5:c0:
69:e8:84:bc:2e:89:4a:85:27:ab:b6:fc:d3:0f:d0:aa:23:87:
a5:b9:4e:2a:e9:2e:49:d0:3d:e3:c5:a0:2c:fc:b3:78:ce:a2:
fc:69:b7:60:c8:f7:4c:12:d5:4f:6e:99:aa:aa:13:72:7b:6d:
f8:4b:1e:4e:c5:2e:11:46:e0:f7:af:47:b5:71:c3:ae:7d:4b:
89:c8:ea:74:e1:0d:d2:dd:24:a2:cf:ef:e6:d7:bc:16:f7:a6:
12:1b:28:74:d9:d2:7e:28:7f:43:da:be:2a:56:30:52:ef:90:
2a:ee:30:83:72:c9:3a:1d:5c:dd:cc:49:bc:a1:cb:5d:90:7d:
2b:c1:aa:29:a7:15:4d:38:f0:a5:22:91:7a:94:71:04:e1:37:
f2:f1:4e:80:6a:b8:79:8c:53:37:57:5a:f3:e6:35:aa:a4:e3:
ba:0d:e1:69:61:8f:2c:c3:15:91:89:42:ac:1e:7f:0c:bb:f9:
5b:64:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:41 2025 by rpki-client