Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: gb+jqlV2iIzK+5KdjOiuOMTCbzjoRR63yD6OJEE9jys=
Subject key identifier: 46:2A:66:F2:7E:88:CC:5E:B0:22:C9:32:42:63:16:3F:FB:C0:D8:8D
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 01976F2CE16A20BE706DAF08F362080D3A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 09CF
Signing time: Sat 14 Jun 2025 16:01:41 +0000
Manifest this update: Sat 14 Jun 2025 16:01:41 +0000
Manifest next update: Sun 15 Jun 2025 16:01:41 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: Yb0SDm0c+vJWfG5k7nGN/D1c2ltwEKkqly/mdcGWOME=)
2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:e1:6a:20:be:70:6d:af:08:f3:62:08:0d:3a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Jun 14 16:01:41 2025 GMT
Not After : Jun 15 16:01:41 2025 GMT
Subject: CN=462a66f27e88cc5eb022c9324263163ffbc0d88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:69:1e:d1:58:b3:1d:4b:c9:55:da:de:2b:
9d:a8:73:cb:ec:c2:11:d9:b4:ac:eb:47:30:b4:e5:
ef:35:f9:79:44:3a:63:b8:9b:25:89:ab:08:b7:96:
80:76:0e:6a:17:94:9a:f9:9f:1a:67:65:e1:0a:3b:
61:16:68:08:44:35:42:90:53:1b:fb:c0:a4:08:b3:
0b:6b:ab:43:a4:36:61:7d:ff:74:a6:47:fb:e6:92:
b9:2b:d3:87:f2:55:49:c6:78:8e:50:82:c3:7e:30:
ae:26:a4:f2:9f:d8:d9:bf:92:43:89:72:e7:33:c7:
50:d8:0b:0f:80:2b:22:7a:33:f0:ac:f3:00:98:bb:
c8:27:0e:b0:d6:24:cb:39:41:f6:af:fb:b7:86:ac:
c0:c2:f2:e5:0b:97:c0:c3:61:d7:7a:09:e7:e5:64:
c6:1b:58:b8:8b:e1:67:ca:73:2d:15:c8:27:10:5b:
c4:43:f8:96:54:0a:b6:51:9a:41:23:35:4d:75:27:
aa:36:5f:9b:96:98:08:b9:a0:ba:73:99:19:6d:6d:
d0:7b:86:ef:db:21:f7:05:ce:39:8e:60:0b:b9:99:
49:b1:04:32:cb:20:73:fa:b8:a8:24:8d:2e:b2:f6:
ff:c6:3a:35:44:24:64:2f:28:ae:13:dd:69:91:3f:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2A:66:F2:7E:88:CC:5E:B0:22:C9:32:42:63:16:3F:FB:C0:D8:8D
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:01:3c:25:7a:5b:7f:1b:7a:47:e2:c2:31:0c:af:cf:32:56:
38:08:59:4f:a1:27:12:2e:6f:7a:2d:33:e9:99:68:2b:98:a1:
2d:c6:3b:15:4c:4b:83:96:38:6d:07:e6:3d:b1:00:77:75:11:
2f:68:ab:60:27:39:a5:6d:66:db:34:98:57:3e:d1:6f:33:2b:
69:6b:cb:f8:6b:db:f9:73:42:8b:b5:7f:b1:95:c6:83:0d:aa:
3c:db:6b:cf:c4:f9:b8:57:5a:57:b8:d1:89:29:4d:81:ff:56:
7f:38:84:10:97:e6:a4:2c:e7:75:2e:39:b5:f4:1b:05:af:c8:
e0:1a:db:13:3b:87:79:f9:d8:ed:29:13:e6:b1:3f:ce:f0:e9:
73:6d:47:3a:3d:25:29:61:7d:30:60:4d:88:38:13:5f:ac:59:
38:59:8e:13:b7:98:8a:1e:19:fc:a2:79:1f:ae:b3:4b:ee:24:
5b:f2:31:1c:e1:3a:b8:de:25:18:98:77:e8:44:62:bb:6c:8e:
f7:93:b1:60:0b:60:42:d6:f3:62:80:50:1f:05:72:a8:e1:54:
fb:c8:25:24:84:29:ca:65:b6:3f:ed:c7:4e:de:4e:67:b5:61:
fd:6c:24:89:08:ee:83:78:1a:6a:72:0d:d7:3b:97:18:02:fb:
c2:aa:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:54 2025 by rpki-client