Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: MHr+EDSXx9EQyjQkrbN2IGHnyZkHdJXE1ypEEc0KVH4=
Subject key identifier: 41:C1:FC:BB:49:D7:7D:34:26:33:7F:E0:DA:16:9E:F4:3B:C9:C4:CF
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 0197B6D7C0EEE6EB5C024A2D7691C4DCF188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: LApZuey7KduNNgMd6VObDRHqMUdzwYDdbtPEyTqM47M=)
2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c0:ee:e6:eb:5c:02:4a:2d:76:91:c4:dc:f1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=41c1fcbb49d77d3426337fe0da169ef43bc9c4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:40:81:ee:a2:f1:f9:a6:82:d6:5d:42:25:
2c:f0:82:14:ec:6e:46:ed:d0:b1:d0:d1:61:df:a8:
80:32:35:41:43:bf:3f:a4:75:48:df:1b:2c:9f:44:
36:67:03:6d:92:43:1a:9a:0b:b0:a4:ba:26:64:14:
09:50:82:26:08:44:74:f0:41:78:91:76:4b:06:48:
fe:99:87:97:a4:5f:75:28:c0:28:3c:29:db:72:1f:
80:77:7d:f9:00:e2:7d:44:1c:60:40:9d:f9:a1:01:
24:f1:7b:c3:c6:69:b5:d3:6e:38:f8:af:c6:f0:d7:
67:6d:df:1e:74:ab:3e:75:80:db:76:23:b6:97:32:
82:e3:08:c8:ae:8b:d3:83:0d:bd:0b:44:4b:87:18:
23:f0:6f:40:00:31:53:83:5a:1a:ae:96:1e:de:82:
b9:b3:0b:f3:ad:a1:4e:31:36:4b:17:14:9c:f6:35:
21:0d:79:63:59:8e:d4:dd:60:d8:17:93:5f:8f:05:
d5:e9:81:82:11:80:79:45:9e:5b:57:30:73:a6:0b:
21:da:ff:d6:7a:1b:c4:f6:f4:37:d3:75:1b:b0:b0:
69:23:38:4e:6d:07:ce:b4:c9:14:f1:8f:7f:d8:35:
d3:51:4e:ec:d7:5b:12:68:1d:73:a4:b8:30:54:bc:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C1:FC:BB:49:D7:7D:34:26:33:7F:E0:DA:16:9E:F4:3B:C9:C4:CF
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:1a:c1:8b:a5:18:e4:ec:49:b8:20:00:ae:88:6d:ad:50:
ab:e9:7d:2d:b1:91:ba:85:36:0a:68:af:1b:c6:09:c9:f3:b9:
d7:d2:90:75:13:5d:65:bb:12:4c:3d:91:8b:cc:78:4c:05:9a:
11:39:16:d6:95:89:5c:fa:10:0d:52:7f:5f:eb:ee:6e:da:26:
a4:bb:01:a0:a4:be:32:b7:c1:27:9a:a7:21:3c:f2:f3:d3:dd:
00:ef:8c:6f:df:01:6b:ac:b3:2d:0a:6a:b7:55:f3:fe:7b:86:
1d:18:c0:42:1c:eb:bf:50:b3:77:64:85:7b:81:f1:ea:16:5b:
0e:ed:c4:d7:56:fb:c6:b5:81:0a:2f:f7:e0:e4:dc:31:f9:24:
e3:98:8f:02:0e:37:f6:2f:3f:d7:74:48:78:f9:79:ed:13:86:
e6:8c:33:2e:f8:7e:d9:ec:31:21:b7:43:11:42:a5:15:59:00:
2d:7f:61:09:8c:8b:7e:b3:cf:d9:4b:53:81:9e:90:ed:e9:a1:
31:95:51:25:17:d7:47:1d:5a:09:31:4d:bb:2f:5f:e2:ca:87:
99:32:5b:66:43:1a:7a:3b:8c:30:e6:78:11:8b:42:ce:93:83:
a0:07:53:f7:95:75:a8:3c:56:e9:7f:e0:1b:4c:76:99:ef:64:
0b:75:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:51 2025 by rpki-client