Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: AT0RqYT6A2kswy3XoAbPwQozdos8dmhcy9q6ycQF1Vo=
Subject key identifier: ED:64:A2:FC:78:7D:E4:B4:4D:45:E6:B7:4F:BD:19:18:A1:C6:57:65
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019768F30F314DB88D474A1B75F52D9F5005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 11:00:48 +0000
Manifest this update: Fri 13 Jun 2025 11:00:48 +0000
Manifest next update: Sat 14 Jun 2025 11:00:48 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: Ljjn7n65U2eXvQBwZGpIoywJClKtrQj+0L+9v8HbSjQ=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:0f:31:4d:b8:8d:47:4a:1b:75:f5:2d:9f:50:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Jun 13 11:00:48 2025 GMT
Not After : Jun 14 11:00:48 2025 GMT
Subject: CN=ed64a2fc787de4b44d45e6b74fbd1918a1c65765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:b5:80:03:db:5e:de:94:ce:0a:96:00:89:
fe:41:cf:e6:6a:3a:9a:39:f3:24:9b:af:ae:ad:a3:
10:79:e8:4b:9d:b5:9a:1b:a8:9f:a9:dd:62:81:cd:
0c:74:b0:bc:98:11:81:d6:e2:a4:da:79:55:3d:58:
03:c5:22:03:ed:ed:e9:81:ab:55:e9:72:32:41:20:
8f:08:58:d2:7b:e2:27:00:f3:75:e9:3e:d2:0f:50:
c0:86:90:ac:f6:a0:74:20:df:f1:55:9d:2f:00:a5:
fc:05:fe:86:51:a1:75:79:d8:da:26:4e:84:aa:84:
8f:e5:1c:0e:c1:5b:30:b3:04:a9:79:49:86:13:3a:
6d:72:aa:11:47:8a:a3:4f:16:22:42:1a:53:a5:19:
7c:63:0a:96:08:7b:e6:15:f7:2f:f3:98:55:7c:04:
aa:47:ac:92:62:a1:f4:24:3a:f1:95:ba:47:eb:fb:
61:3e:94:1b:83:de:ae:b7:dc:1b:d3:bc:c2:45:5c:
7c:61:63:41:7e:62:17:b0:b1:05:7b:1c:33:39:77:
ed:fc:a7:9a:09:2e:34:a6:8f:9d:c0:c2:de:e3:44:
7a:a1:8c:99:9f:45:c2:2f:61:3e:87:63:a4:38:e7:
c3:e2:9a:f5:19:a5:9f:1a:7c:b8:ff:a7:5e:02:64:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:A2:FC:78:7D:E4:B4:4D:45:E6:B7:4F:BD:19:18:A1:C6:57:65
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0d:18:d1:18:90:df:48:f1:57:b0:89:7a:56:d6:d7:a0:d4:
fd:5f:67:9d:3a:eb:e6:bd:2e:5f:59:19:51:73:ff:1e:7f:17:
5c:5e:01:74:48:55:be:69:f9:7f:6b:b0:1f:fe:a5:ab:d6:f7:
69:8a:10:33:b8:3a:0a:86:f5:d5:7b:17:3f:49:34:8a:5a:5f:
91:de:b1:e7:30:a1:ef:b2:51:86:82:3e:9e:ca:a6:bc:30:2e:
6f:66:69:a7:dc:9a:93:da:65:cd:40:b9:f1:fc:98:39:c9:c7:
34:bf:d8:f6:db:a1:2d:19:7a:ca:24:21:9e:e6:d5:6b:80:80:
a5:a3:d6:ee:26:2f:03:02:fe:2b:9a:15:44:84:33:26:9c:28:
98:e7:25:71:8a:28:4f:19:30:70:66:6c:a4:f2:01:46:3a:75:
bf:c2:07:98:36:db:54:82:9d:3b:71:2a:b8:aa:e2:33:98:25:
75:db:6d:a8:89:29:42:e4:53:bc:46:e1:51:8b:c0:e6:91:6c:
30:1b:ea:c7:61:89:ca:ca:7a:81:b9:03:c9:81:f9:4f:b1:47:
62:4d:01:d0:28:08:2a:7c:26:0a:23:f7:a6:b6:c6:d2:75:51:
05:21:32:6b:f1:d9:fd:f3:2a:71:10:b9:26:bd:ac:a2:6c:33:
c4:bb:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:23 2025 by rpki-client