Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: iiL6UvN02mWHTKFZpLuTSvnqkOh3luHTHFiTncqrvvI=
Subject key identifier: AB:18:1C:07:85:01:A3:E4:5F:25:81:86:DF:CD:5B:9D:49:D8:5D:1E
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 0197B6A1D595F6A41FFDC96478805740DF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 0E75
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: 8uCvUdEo/v1sBmxED6IkJLtmRp8bHn6qHp84SAuwpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d5:95:f6:a4:1f:fd:c9:64:78:80:57:40:df:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=ab181c078501a3e45f258186dfcd5b9d49d85d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:e2:bc:12:63:b2:73:88:49:2a:e6:e8:8e:
68:24:ab:18:bf:a8:1a:c3:13:bc:c0:b2:49:52:3a:
9a:82:40:17:66:61:cf:e8:19:86:7a:9b:e9:27:e0:
15:44:e2:be:1b:c1:55:67:89:7d:d2:e3:e5:d6:83:
14:7d:69:83:e5:31:e1:85:e3:f7:16:ca:83:e9:f7:
f2:cd:e7:cb:c7:79:c7:03:f3:a0:88:37:54:e5:a7:
42:84:77:ae:b6:11:bd:68:48:0a:69:11:90:f0:4f:
34:8c:4a:23:97:07:f9:a5:be:73:19:e9:d9:a2:1d:
3a:2a:59:29:f5:3a:8c:0a:ee:43:96:55:ad:8a:50:
1d:5d:d9:87:c6:34:68:62:0f:f8:f3:c6:e0:8b:63:
9c:26:91:f2:72:68:16:18:a8:c7:6b:9a:96:e6:18:
02:54:36:a4:72:90:ee:49:da:98:7e:65:8a:ad:2a:
07:f2:45:6d:e9:4b:66:5e:5c:84:bb:62:1a:45:c5:
35:5f:7d:cd:bf:15:24:d9:41:b5:a8:4f:c6:a4:ea:
c5:9c:a7:46:d9:4b:c3:ff:35:34:0e:f7:da:29:1f:
95:9d:44:c7:97:78:45:c7:81:be:63:18:29:67:70:
f0:f3:02:ef:9d:c1:82:45:54:b9:64:dd:a6:ef:ef:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:18:1C:07:85:01:A3:E4:5F:25:81:86:DF:CD:5B:9D:49:D8:5D:1E
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:26:da:db:c5:d1:5c:66:e7:af:f9:ff:82:a1:4e:97:aa:f8:
b1:76:89:21:53:3e:ef:56:b7:4a:db:58:87:84:ad:73:87:40:
74:2e:71:24:c7:a8:be:b6:aa:c4:d1:a8:89:3d:a6:7e:57:53:
7c:dd:ba:5c:58:e7:23:0c:02:0a:c9:bb:28:ac:f1:f9:39:c4:
75:5a:2d:65:d4:55:34:48:35:3b:4e:5d:64:6a:c8:5b:53:7a:
83:79:06:82:34:51:13:51:48:b4:e2:62:be:66:70:25:f9:11:
11:e7:9d:fa:d5:91:b0:08:07:a0:7b:27:ba:fb:c8:97:1d:f1:
b3:47:a2:af:6c:39:63:cb:44:35:fe:0f:89:a9:04:75:d0:bf:
2b:69:74:56:51:1a:0f:08:86:d8:6b:64:92:4f:b3:1c:01:ea:
74:91:7c:fc:2e:4e:e3:5b:2b:ae:6b:63:89:84:82:bb:5b:93:
49:91:a2:91:86:5e:52:ea:e6:f0:70:88:aa:c0:03:a8:4e:05:
c7:e4:d3:0f:7b:eb:2e:a9:6e:c8:a6:13:65:f1:ab:2a:c6:87:
f2:9b:ac:db:53:56:3a:c1:66:a8:7d:3b:5d:71:d1:3e:87:24:
7e:08:10:95:5c:10:ac:c8:34:e3:f2:24:ec:f2:48:1f:64:ed:
69:e7:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:37 2025 by rpki-client