Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: WJ4QOqzmWzE6Oa3wT662ZNJ8sMG77L5wcKS3Fc8p6eM=
Subject key identifier: BC:B6:23:25:7C:E6:80:E6:46:62:40:4E:20:B1:E4:80:6D:EB:FB:AC
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 01976BBCEEF94A0510D9CFE242D28C41B67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 11AF
Signing time: Sat 14 Jun 2025 00:00:33 +0000
Manifest this update: Sat 14 Jun 2025 00:00:33 +0000
Manifest next update: Sun 15 Jun 2025 00:00:33 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: Q4qdB1AsFl/fyC/cv1WKmY103DCIHS3wdQ5irjAPXxA=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:ee:f9:4a:05:10:d9:cf:e2:42:d2:8c:41:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Jun 14 00:00:33 2025 GMT
Not After : Jun 15 00:00:33 2025 GMT
Subject: CN=bcb623257ce680e64662404e20b1e4806debfbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:a3:fb:68:a0:7b:05:32:69:fe:8d:39:2b:
52:2e:3e:32:56:ff:9c:62:bf:b3:90:af:56:03:9b:
4d:05:95:3a:07:f5:c5:e7:a3:f4:66:ce:09:05:82:
8e:b8:2e:c7:02:d6:4c:4f:80:bf:a6:ef:a3:ab:3d:
43:37:e7:00:38:57:29:e0:2b:7f:fe:97:85:83:48:
62:3e:f2:0d:67:ca:34:42:b0:cc:3e:0e:db:93:54:
3a:37:8d:17:00:b9:b9:06:40:0d:79:76:19:5e:80:
5f:da:b0:18:5f:7f:ad:3a:65:92:4d:03:55:70:21:
c1:bb:2c:0a:b1:81:f7:ab:a8:fe:f5:88:ef:e7:b9:
25:a4:26:21:9a:6a:53:f2:87:fc:27:53:17:98:a4:
30:51:7a:a8:8e:8d:75:d4:01:5d:48:0e:91:d8:48:
54:2c:fd:ea:eb:38:01:d5:e5:34:b0:76:fa:84:bf:
6f:f8:9b:f3:0d:c7:a4:66:3f:95:77:50:76:c1:35:
07:c3:ab:f6:89:46:d3:84:fa:eb:1d:6c:28:26:b8:
15:d5:83:09:5a:a1:e3:a0:96:2f:e4:0e:58:04:b4:
72:52:18:f5:6c:21:84:13:14:05:ec:c5:d8:21:be:
7a:3c:d6:11:af:5d:ea:5b:f6:1c:60:cb:e2:e5:8e:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:23:25:7C:E6:80:E6:46:62:40:4E:20:B1:E4:80:6D:EB:FB:AC
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d7:2a:3b:4f:6e:0f:7e:35:d1:01:c4:25:b4:37:dd:e9:1b:
6f:9a:4e:e5:5f:25:4e:42:6c:43:6a:26:44:a2:d9:2b:c5:47:
81:1f:00:ae:39:43:85:a8:fe:7b:26:70:98:85:d5:0c:5d:3d:
6f:8d:3f:f7:49:05:21:b6:8a:df:f8:ac:6a:c8:84:0e:a7:10:
59:1c:31:be:68:56:e5:20:dd:88:72:e8:d6:07:c2:4a:08:80:
80:48:be:6b:6a:10:5e:2f:80:9e:43:c4:8c:42:1c:06:82:38:
df:b6:02:13:c3:34:26:51:4c:30:cf:b1:90:e8:a6:8c:60:ed:
38:3a:6c:96:e6:a9:7d:6a:07:0a:72:67:63:0f:35:0d:55:b6:
e8:2b:e2:d5:96:97:f3:4d:63:aa:5a:a6:a2:00:91:2c:9b:64:
e4:6e:ce:b2:0d:5b:f4:95:fd:47:16:08:6e:8e:fe:aa:a3:4d:
55:56:63:05:d2:35:9e:35:88:2b:e4:7b:f6:a3:61:4e:0d:f7:
de:f2:04:2d:ba:31:be:30:02:3a:bf:8e:71:cb:10:63:08:7a:
90:dc:9f:3a:31:6d:f8:40:84:29:11:8f:5c:de:ff:5b:fc:4a:
26:f5:96:58:3d:42:90:24:93:1a:bf:9b:58:f0:64:df:96:cd:
ca:cc:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:44 2025 by rpki-client