Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: HlKlHJxIpCG2jlySmB5tcOnTtx/ZmZxL1cI6WB3ZdbY=
Subject key identifier: 71:83:F3:0B:1E:F6:9B:74:E7:BA:23:59:2A:CE:09:ED:D7:E1:A5:76
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 0197C1C8ED60EACBE77CCBB7B3B3F884D978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 1035
Signing time: Mon 30 Jun 2025 17:00:59 +0000
Manifest this update: Mon 30 Jun 2025 17:00:59 +0000
Manifest next update: Tue 01 Jul 2025 17:00:59 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: IN6umrdLtxcvEsC3IPGyvKVXUxft2sDg/8mCKEdPMR8=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:ed:60:ea:cb:e7:7c:cb:b7:b3:b3:f8:84:d9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Jun 30 17:00:59 2025 GMT
Not After : Jul 1 17:00:59 2025 GMT
Subject: CN=7183f30b1ef69b74e7ba23592ace09edd7e1a576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:45:d1:9a:32:43:eb:ea:63:a6:32:f1:70:
08:03:5d:23:62:18:66:45:51:50:6f:8b:ae:a1:67:
79:3e:c3:8d:7e:da:5c:1a:08:5f:41:c2:d8:5c:7e:
19:2c:5f:f9:60:0d:70:28:c4:4b:97:e7:46:94:22:
4e:93:42:ad:8b:05:cf:ef:4b:67:71:83:d6:65:90:
9d:f1:31:9e:18:2d:77:f9:ae:11:79:e9:fe:bb:2e:
ec:96:ae:5f:35:92:84:c5:35:a7:24:29:19:ac:e1:
82:a9:b3:5b:71:03:f7:72:93:f5:e2:76:ba:7b:64:
d0:a0:26:08:4f:5f:87:dd:51:26:42:23:87:5b:4b:
e7:d2:08:08:2e:b9:f6:32:e7:a7:bc:00:71:61:95:
16:75:71:85:ab:19:c1:85:00:29:d5:4c:ff:e5:54:
c0:c8:18:10:4c:c2:11:d0:28:07:fa:3b:a8:cf:90:
b1:9f:1f:d2:30:07:73:1b:62:52:54:fa:3e:7f:ff:
89:e3:1a:00:52:8c:13:85:b9:07:11:d7:e1:73:fc:
90:7e:79:15:35:25:0a:28:00:c7:f4:ee:1b:dc:05:
e2:92:51:68:38:47:03:fc:d9:4e:2c:0d:93:3e:44:
e3:07:f0:36:5e:ae:e5:12:ce:a2:4c:10:9b:b6:5f:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:F3:0B:1E:F6:9B:74:E7:BA:23:59:2A:CE:09:ED:D7:E1:A5:76
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d2:2c:b9:4e:cd:c4:0d:bd:6c:ea:21:60:c6:23:04:fc:3a:
8e:5a:b7:0b:8e:8f:7b:89:e7:fd:fa:ce:0e:6a:8d:e6:6d:4d:
a3:bc:a5:7a:a9:ec:8b:1e:cb:98:95:dd:4a:ca:6a:4c:ee:61:
3f:51:70:21:05:9b:ab:98:af:9c:3a:1f:03:74:b2:00:48:9c:
df:af:17:0b:eb:45:07:5c:be:08:cf:92:1e:b3:b4:26:39:66:
48:da:98:5f:fe:57:02:e7:d3:49:79:a2:b9:59:91:8d:34:ff:
e0:a3:bd:cd:82:26:6e:d8:67:6e:17:16:6d:a9:5c:9a:3b:83:
09:6c:12:df:bf:e7:eb:f8:8b:f0:a9:11:44:ab:d1:82:0e:7a:
00:0d:97:9b:3b:e1:be:f5:ab:2a:99:c7:7c:1b:27:b2:bc:3a:
42:87:2b:b0:45:36:6b:05:db:a2:c6:3a:2e:e6:48:48:d3:34:
f0:60:9d:b9:ac:15:d2:50:f5:1a:ff:83:96:e4:9a:13:0d:d0:
ca:d7:24:d2:c5:5b:3d:f7:5e:45:d1:67:35:2c:26:16:df:2a:
c4:49:67:17:ab:ad:dc:62:9f:ff:c0:a1:91:42:0d:e0:f9:c7:
f9:95:2a:93:4f:ce:2a:23:ea:47:00:c6:0b:d6:77:09:65:8e:
b4:df:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:15:55 2025 by rpki-client