Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: cj6xImmrYgwTzqp/gW9Z3S/njtJkXHzNrDuTIlN37bA=
Subject key identifier: 1B:79:8E:55:81:F4:E3:C7:FC:8E:E1:10:5F:F1:77:1A:D1:F4:E2:A8
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 01976C2AFD573D7191D3EE6BAB9562D62B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 106E
Signing time: Sat 14 Jun 2025 02:00:45 +0000
Manifest this update: Sat 14 Jun 2025 02:00:45 +0000
Manifest next update: Sun 15 Jun 2025 02:00:45 +0000
Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: UPHveATYdmoBVXuEAUeoQzfLu+GUkwVPOWz2XpmuCOM=)
2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:fd:57:3d:71:91:d3:ee:6b:ab:95:62:d6:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Jun 14 02:00:45 2025 GMT
Not After : Jun 15 02:00:45 2025 GMT
Subject: CN=1b798e5581f4e3c7fc8ee1105ff1771ad1f4e2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:81:1e:3f:42:4e:5d:02:8e:01:bd:13:2d:c6:
6f:da:b0:b7:24:72:97:8f:9c:e5:fd:bc:ee:eb:6a:
da:89:22:3a:a6:7c:64:00:5c:c2:dc:d4:b4:df:5b:
58:ac:e3:25:df:e2:57:7b:69:84:0c:cf:4a:d0:2b:
96:ce:3b:21:ac:6e:2f:a2:df:58:19:48:ef:75:81:
df:c8:d1:9e:65:60:6c:bf:19:43:f5:95:db:ba:7e:
df:31:02:66:d0:1a:61:ee:98:c7:6d:c3:b9:52:81:
5d:fd:3c:d5:90:5a:f5:b4:ef:c7:ec:de:d1:3e:04:
5c:ab:d7:2c:12:f2:b1:09:70:58:b9:4d:5a:f4:81:
5f:67:30:d4:70:d1:c3:09:c3:3a:9b:29:1e:e6:fd:
dd:71:39:00:bc:d1:1f:cb:b7:a5:14:06:85:02:24:
14:84:35:72:cb:2f:49:a3:f0:1a:5e:f2:03:da:48:
95:01:ab:6c:e4:1d:18:08:ec:6c:69:a5:ac:02:d4:
ea:19:e2:6e:88:a7:28:6d:4a:26:ea:cf:37:5c:90:
d9:7a:84:3b:a5:37:79:50:bf:37:c4:75:54:38:9f:
c4:1c:90:94:29:af:8f:81:d4:dd:f2:5a:31:2b:54:
22:f3:e4:08:e2:1d:27:c1:85:30:eb:0d:45:47:9e:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:8E:55:81:F4:E3:C7:FC:8E:E1:10:5F:F1:77:1A:D1:F4:E2:A8
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c0:e3:d2:25:d4:05:0b:04:c4:54:db:75:f8:be:fe:53:3d:
9d:3e:1d:d2:e1:16:1e:0c:64:24:19:a0:23:96:88:ef:26:be:
9c:22:7a:4a:7e:80:47:9a:52:68:88:79:8b:ff:83:92:03:69:
1f:0f:aa:29:c2:e0:5c:d3:8c:4f:10:e3:e0:29:fc:59:0b:28:
01:80:29:f9:78:df:14:1e:d7:8d:6e:18:f4:23:1a:a3:04:bf:
5a:60:d4:0b:d4:8b:68:fe:74:60:0f:86:78:30:7c:35:09:73:
17:b3:5b:45:ab:1c:4d:6a:82:d1:3b:be:2b:d9:99:f1:c9:8f:
a5:1f:c3:98:5d:29:02:a4:5a:d0:2b:33:bc:25:44:43:6c:17:
d2:0c:0b:6f:fe:f7:03:c2:ef:75:26:71:cb:39:40:87:ac:ba:
a9:c1:6b:cb:38:6e:ec:5d:d4:70:58:3b:48:d4:8c:38:c4:06:
0d:e7:0e:35:a7:73:f5:15:b5:82:64:66:ae:c8:c4:96:b3:bc:
88:b5:bb:21:62:af:ba:61:e0:4a:20:a0:8b:1e:5f:a0:49:55:
10:48:6a:1a:47:7c:11:a1:78:29:65:78:b8:cc:56:32:fb:14:
75:24:ce:df:11:ac:eb:48:82:cb:aa:b0:5f:d3:ed:b6:11:86:
3f:28:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:25:01 2025 by rpki-client