Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
File: dLOekBkiWjsP_gWoNW6-8zwnvpc.mft (raw, json)
Hash identifier: eEOXS3CW3vQqgkI5VnqRQgrHMxBGpH8jq4CmBrQIpKs=
Subject key identifier: 4D:FB:14:9F:3B:36:AC:F5:4B:34:E8:04:E8:63:3D:4B:7F:86:9F:EB
Authority key identifier: 74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
Certificate issuer: /CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Certificate serial: 019778D4CB1D5698E005ED41D45497CBD432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
Manifest number: 0588
Signing time: Mon 16 Jun 2025 13:01:40 +0000
Manifest this update: Mon 16 Jun 2025 13:01:40 +0000
Manifest next update: Tue 17 Jun 2025 13:01:40 +0000
Files and hashes: 1: ZRVv1QEy1kLLZIQQzKY3v_cBQvM.roa (hash: dP4rVEZl+sj+rbeXk/M+iHEaNgIv2c4UoqRTeljUbU8=)
2: dLOekBkiWjsP_gWoNW6-8zwnvpc.crl (hash: WDdcD7UXLX9cPosnxIyy3/3aVrGnvuPcIW7BG70Niwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:cb:1d:56:98:e0:05:ed:41:d4:54:97:cb:d4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Validity
Not Before: Jun 16 13:01:40 2025 GMT
Not After : Jun 17 13:01:40 2025 GMT
Subject: CN=4dfb149f3b36acf54b34e804e8633d4b7f869feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:96:b4:bd:18:0f:79:e3:ee:aa:d0:67:81:
4b:80:fc:32:64:9d:33:06:a8:bf:3c:6f:bf:92:4a:
38:a6:54:01:26:b6:88:ef:88:47:ff:7d:e1:b7:dd:
18:99:fe:fc:69:e5:1b:8c:9a:90:9a:b6:bc:fe:1b:
48:19:5b:53:10:5d:78:f4:ea:fc:10:2e:2c:fc:d8:
2f:db:fb:74:4b:d8:4a:9d:90:11:57:5a:d4:67:1b:
0d:65:da:91:4e:91:69:af:ac:b5:0e:12:58:fa:d5:
99:82:d5:f8:8c:b5:d1:b2:6f:c7:61:a9:43:7c:f9:
1f:eb:b4:97:46:ef:c6:a4:d0:9c:0e:69:3f:0a:5c:
c3:7d:53:e8:22:85:a2:f5:36:d0:07:55:a6:0a:a6:
3f:c6:c7:75:d1:38:2a:03:f0:45:1a:b1:92:3a:ab:
e8:bf:59:81:97:ac:2c:1e:b7:e4:2c:87:87:76:25:
b5:03:0e:3b:05:96:c9:5a:b0:e7:54:a7:3c:3f:d2:
92:ff:93:ab:7f:00:55:c6:90:8f:0f:e0:3d:35:ad:
54:b4:3b:53:c4:a1:4b:38:e8:ca:53:06:61:7a:4c:
80:c7:cf:c2:e9:a8:02:60:5c:d0:e7:d1:7c:c1:ee:
41:be:02:04:fe:c0:79:6d:74:d4:24:8a:02:f4:cd:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:14:9F:3B:36:AC:F5:4B:34:E8:04:E8:63:3D:4B:7F:86:9F:EB
X509v3 Authority Key Identifier:
keyid:74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:18:85:83:74:ea:6e:02:80:0c:7e:97:60:ea:f8:90:d6:85:
26:21:b7:2b:e2:95:8c:23:7f:eb:07:3d:a6:ef:61:6c:2c:c9:
84:88:b2:5c:81:33:de:78:d6:0d:c6:55:88:78:11:9e:b8:f1:
29:09:fa:14:8e:37:3e:b3:07:8d:83:bc:25:1f:90:b2:9a:4a:
ae:67:b4:f7:39:78:25:2f:a0:70:24:3f:51:9e:cf:34:7a:fc:
40:5f:98:ae:9a:e2:5c:1c:14:1f:dc:08:94:62:8e:00:49:40:
3c:ec:82:68:4e:85:ed:cd:0e:df:0a:05:13:4d:8e:71:5c:8a:
6c:71:e8:f4:7b:17:c9:95:dd:49:1a:89:64:cf:ae:04:d3:a6:
a6:60:66:a5:18:00:7b:f7:1f:4c:5b:84:2b:53:45:38:eb:46:
59:92:00:62:c3:3e:0f:82:61:71:8a:54:81:80:61:81:a5:02:
93:e1:bb:62:9d:36:fc:7a:90:3a:d4:49:78:33:a6:1f:17:78:
49:2d:4a:eb:f3:7c:62:f8:43:21:67:d8:44:2a:a1:56:da:93:
92:2d:82:03:71:0c:f4:e1:0d:31:81:29:21:f3:15:09:00:f0:
69:f3:5a:18:f6:66:1c:2f:87:98:6b:cf:1f:9d:a1:12:ea:eb:
89:e3:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:41:33 2025 by rpki-client