Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: lWhIsl7CdMnPa721GnTk3pkyVw1beWaadnfOO5Wcdys=
Subject key identifier: EA:44:7E:27:FE:A5:48:95:2E:BF:E3:20:7D:1D:6B:35:2A:DB:AC:8C
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 01976A05E5A7D8AC906E21C2883B4776F7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 05CA
Signing time: Fri 13 Jun 2025 16:01:00 +0000
Manifest this update: Fri 13 Jun 2025 16:01:00 +0000
Manifest next update: Sat 14 Jun 2025 16:01:00 +0000
Files and hashes: 1: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: me77dgnxNEtlpVp4cKzIpOceT68iWskxS6zzXRAGnyg=)
2: EEHOXZie7GfjFP8O_aL3DaZW-cs.roa (hash: X68IlMoKqFdfJQq29aFoZvl4dyUrIU6qUuNNpdY5QY0=)
3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
4: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (hash: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=)
5: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
6: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:e5:a7:d8:ac:90:6e:21:c2:88:3b:47:76:f7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jun 13 16:01:00 2025 GMT
Not After : Jun 14 16:01:00 2025 GMT
Subject: CN=ea447e27fea548952ebfe3207d1d6b352adbac8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:48:fc:6b:c2:c4:04:9a:f4:70:b5:03:af:
ae:2e:63:d8:2d:fb:e1:7c:74:85:ff:61:56:ef:0e:
69:ad:d7:ec:a5:b7:46:bf:9f:9b:c9:0e:d3:81:ed:
95:d7:b7:2a:76:bd:d0:73:97:c3:fa:00:d4:39:86:
b9:14:d1:5a:42:3a:49:b9:bd:d0:7c:a6:eb:18:75:
00:0c:00:65:4a:3f:4d:53:09:6e:76:a0:49:57:58:
bc:55:46:04:c9:45:d1:b5:33:ee:0a:13:35:f3:9a:
ac:80:55:d2:1f:ff:80:16:b5:d9:b0:22:29:c9:60:
4f:08:cc:16:19:1d:b7:33:2f:02:17:7f:d0:ec:a5:
b5:61:49:df:ef:92:29:04:ab:b5:b4:32:0c:f7:27:
b2:09:92:ca:57:72:3f:a8:0e:51:08:02:22:02:e0:
74:cc:9a:8d:2d:16:ce:74:3e:c4:e6:af:88:97:ff:
9f:43:7d:e9:9c:2b:a5:b8:2e:a3:11:9d:2c:6e:f8:
ab:c4:48:59:33:34:04:f8:16:1a:01:53:d0:a4:07:
8b:49:6f:7b:a8:f6:63:d2:40:e6:a3:7e:7e:46:01:
8a:d9:dc:66:fa:43:4c:bb:47:3e:77:00:1d:87:8b:
c3:d2:75:9d:6d:a5:4d:fb:7c:81:81:21:12:6e:80:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:44:7E:27:FE:A5:48:95:2E:BF:E3:20:7D:1D:6B:35:2A:DB:AC:8C
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:07:7a:1c:aa:a8:13:7d:58:50:c4:1c:85:52:9e:65:49:9c:
e3:f3:bc:30:e3:a1:29:9c:67:35:12:99:09:1a:19:2b:87:47:
dd:79:2c:cd:b8:d2:07:da:df:98:0a:c2:77:d6:4e:b8:d9:dc:
ef:a6:e0:55:c1:e7:56:96:1b:89:39:5d:6b:3e:ab:46:13:01:
c4:34:f2:20:22:3b:c6:c4:8c:da:3f:cf:92:3a:69:84:dd:19:
93:24:be:6d:b4:3b:16:a8:68:f3:3f:80:24:30:ba:cd:f5:ec:
d5:4d:89:08:57:c6:d1:bb:d6:93:7e:82:ae:c8:ed:e3:00:79:
b4:bf:68:de:d5:93:52:16:68:f0:06:45:ac:d8:08:c4:8a:06:
9c:32:0d:8d:1f:55:b3:13:94:c8:09:cc:92:06:09:86:04:dd:
37:13:db:ed:70:51:ff:5a:c7:a3:06:cd:76:da:95:81:6b:17:
5a:15:76:a5:a1:7d:7f:03:1f:17:d1:79:59:53:d4:2d:38:a1:
59:70:24:17:79:21:4d:e1:b9:03:50:1a:cd:fc:76:6a:5b:93:
b3:cf:aa:25:f0:4c:be:cc:ee:c8:eb:9e:7c:98:be:44:7e:e3:
72:7a:77:00:f9:3a:4d:4e:40:95:47:31:b4:80:46:d0:0c:56:
73:66:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:01 2025 by rpki-client