Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: bjLFiB+dJwhQHdXkzVayXi/XGOt5kIAsddM5IigntZ0=
Subject key identifier: 11:D1:53:9B:AF:E2:6B:40:07:2A:77:AE:70:84:02:1F:5D:3B:D0:B7
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019770AC5942BDD1C25B9D1458C93D7109EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 0F7C
Signing time: Sat 14 Jun 2025 23:00:32 +0000
Manifest this update: Sat 14 Jun 2025 23:00:32 +0000
Manifest next update: Sun 15 Jun 2025 23:00:32 +0000
Files and hashes: 1: BlZTyn453CV0yZnKwe_T35RBLj8.roa (hash: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=)
2: UDoseI4zszDcDoPnMdfmZguRd1g.roa (hash: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: 9rhbh1hE3hwHoMDArOCVXHibTUp1y8O27s1XTt172ZM=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
9: saRTVdpqQA0OCzsMYir3B6BlFes.roa (hash: nWaisSWXPPt/Ku1COahUOFAKdzpunAhgMbmaca4maXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:59:42:bd:d1:c2:5b:9d:14:58:c9:3d:71:09:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 14 23:00:32 2025 GMT
Not After : Jun 15 23:00:32 2025 GMT
Subject: CN=11d1539bafe26b40072a77ae7084021f5d3bd0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:c2:8b:88:f9:54:2c:fb:5c:98:09:9f:8c:
5b:2e:20:ec:0a:17:bf:f9:99:e1:61:7a:a5:8c:1b:
2e:de:76:0b:20:31:4f:0c:f6:74:3c:28:cc:39:ad:
8e:ce:9d:ca:8a:66:7c:30:46:99:ba:d3:0f:0c:1e:
1d:26:88:68:71:4c:a5:03:8f:e7:1b:34:84:5e:a4:
7e:64:fb:87:50:19:ad:98:09:57:42:58:0d:34:d5:
89:b4:9c:6e:cd:dd:7f:e4:53:77:ca:e8:81:6b:b1:
3f:92:3c:21:76:1c:cb:b9:84:23:ba:3f:37:55:6b:
92:92:75:d9:fb:f7:56:d3:2b:b0:44:d2:c3:59:a8:
06:90:66:72:15:2e:df:0d:a5:cb:f1:70:da:3c:c3:
f4:7d:be:dd:c7:a0:0a:95:bd:03:3a:d9:ca:dc:da:
5d:fb:48:1e:13:10:ee:8a:20:41:6e:45:8d:99:21:
ad:78:45:99:3c:44:a9:77:ec:26:0f:3a:0e:90:e3:
84:81:97:81:0e:6a:f2:71:2a:2c:f6:ec:dc:57:54:
8d:fc:a0:12:00:59:92:c3:60:89:66:05:29:8f:cf:
df:02:46:12:c4:81:7c:18:f5:bd:de:26:b4:d3:40:
fa:1c:93:50:0b:bc:57:2a:ba:a8:38:43:5a:72:75:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:53:9B:AF:E2:6B:40:07:2A:77:AE:70:84:02:1F:5D:3B:D0:B7
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ce:d1:80:c9:2a:33:57:35:46:2d:82:af:bb:6f:09:f7:e6:
4a:c4:3a:f5:91:11:b0:4c:bd:53:de:d7:d9:3a:11:9a:27:30:
02:2e:c8:f2:16:a0:c8:2e:2f:23:81:3a:d9:40:98:86:2f:ca:
46:7d:4f:8c:25:8f:9f:9b:0a:f3:80:2c:00:65:01:e8:d1:e6:
7e:6e:cf:21:45:ee:b9:3d:d2:c5:8a:14:e6:ec:5a:9a:01:bd:
d3:ea:36:00:4a:ca:05:9f:24:69:cc:06:61:db:35:97:7a:c0:
85:5b:24:7c:c8:7e:0e:83:09:29:ee:7d:04:67:c2:21:b3:ed:
f6:f1:ae:63:d7:45:aa:54:0a:54:1d:c3:a8:7a:26:7f:4a:63:
a9:b4:b0:45:80:a3:ae:3a:30:5b:12:6c:65:94:3f:fa:3f:21:
47:f5:65:f7:2e:10:95:d6:06:82:58:80:41:d4:e3:6a:00:31:
72:86:5c:e6:c7:62:10:2e:5c:9f:8d:ec:9e:37:23:2b:51:4a:
1e:67:16:bc:0b:f0:36:86:61:fb:cf:60:5e:4b:88:7e:59:98:
6a:02:08:e1:fa:6e:c3:2d:d9:ef:c2:d8:e0:e2:6f:b1:22:89:
82:ae:c9:ec:f3:f7:26:75:30:4e:2b:94:d7:ce:bd:c3:fe:e5:
f3:e1:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:49 2025 by rpki-client