Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: /JlavdixEojdYYRxe7X43qL4GHt7RRgQzrSOx1+PRxE=
Subject key identifier: 91:B5:71:78:13:0D:68:33:37:A6:9C:02:83:F3:30:51:B6:DC:A3:B4
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 01976D3E32E339CA6B0CFAC38BB8569BDEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 09CE
Signing time: Sat 14 Jun 2025 07:01:22 +0000
Manifest this update: Sat 14 Jun 2025 07:01:22 +0000
Manifest next update: Sun 15 Jun 2025 07:01:22 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: 3YzkByh2vQMpudBf5UxmksGJ3xIrUHAXCP1weTLBNQc=)
2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:32:e3:39:ca:6b:0c:fa:c3:8b:b8:56:9b:de:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Jun 14 07:01:22 2025 GMT
Not After : Jun 15 07:01:22 2025 GMT
Subject: CN=91b57178130d683337a69c0283f33051b6dca3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:05:c8:15:82:27:44:60:e6:b4:cb:77:ab:
cf:77:4f:28:de:9f:2d:ff:34:44:8c:70:74:bb:49:
b5:d8:56:00:63:df:28:2a:10:b4:26:49:36:33:2f:
0d:c8:9d:2f:f0:32:6d:22:1f:fe:4c:bf:c2:ce:02:
6d:97:33:55:0d:aa:d6:8d:fa:90:3b:e8:47:f2:2f:
7e:21:b6:8f:b9:73:5b:10:7e:ab:4e:0a:a3:f4:52:
7f:54:20:40:50:4f:5e:ed:f6:bd:96:a9:c3:d3:f1:
39:b1:62:58:3d:64:de:37:87:8a:1e:5d:a5:bd:c1:
b0:7b:ab:16:a5:da:a1:de:a7:e0:b1:2a:45:2f:35:
13:f7:cc:fa:b2:32:3e:d9:62:c2:ad:13:f5:69:8d:
8c:79:3c:cc:e9:c9:74:20:81:bf:1d:60:d4:bd:2d:
77:fc:4a:73:b8:ea:9d:68:0a:42:25:00:f5:d4:bf:
26:54:d9:de:7f:81:ac:3d:22:a8:83:20:d6:fc:1d:
b7:dc:83:f6:52:d6:e5:60:89:35:1b:7f:97:71:9a:
4e:56:35:36:e1:c7:f2:b3:22:1e:3c:df:15:d9:15:
72:ed:de:1a:52:bf:5e:24:f7:5b:13:6b:a8:60:17:
c4:bf:82:8a:ec:d7:26:53:d8:90:76:85:42:6c:da:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:71:78:13:0D:68:33:37:A6:9C:02:83:F3:30:51:B6:DC:A3:B4
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ab:3a:e5:ae:78:b9:5c:13:bb:64:5e:33:4a:24:4d:ae:90:
f1:03:85:8c:af:22:b4:21:53:4e:c4:17:dd:38:64:32:cd:39:
a6:db:66:1d:d8:7e:c0:e9:ca:1f:f8:f4:3f:d7:f6:23:e2:81:
13:a1:6f:38:b6:b4:47:2f:7f:58:1e:4d:a4:8a:9f:3e:7a:40:
1e:ab:91:62:e1:39:e0:d9:6c:59:4c:e6:b5:f7:bd:b9:27:7c:
0a:86:69:97:a0:71:ed:41:34:ef:b6:a4:f0:47:06:83:9a:3d:
24:bb:c0:87:39:32:16:e6:38:7e:6a:03:b2:28:5d:04:76:a3:
9a:24:f6:1c:cb:12:d9:b8:ed:63:e7:88:ad:52:c1:3e:39:3c:
e8:ec:37:b7:d5:11:c8:d8:71:58:a0:cf:a0:3d:fa:d9:d6:c9:
2b:c0:8c:59:d7:6a:87:b4:ca:a4:5b:bd:8e:21:46:15:79:3e:
f3:15:97:d1:e2:00:eb:36:96:c9:1f:64:48:bf:4f:bc:08:6b:
dc:9b:f1:b4:36:b3:4b:8e:f7:cc:da:a1:01:65:86:65:dd:bd:
45:fd:6e:78:50:c2:82:69:1a:4e:e6:52:d0:9a:aa:1f:04:d4:
7e:1b:f3:d2:5f:22:91:94:1b:ea:c9:82:a1:22:4e:f4:08:a6:
a3:0b:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:03 2025 by rpki-client