Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File: dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier: JCSMT15HSpqO09z8WzoWyWJjWePNlCpy3uLSKWh6sVo=
Subject key identifier: 25:53:1B:33:18:9F:81:13:63:23:69:8B:9D:04:9B:FA:85:62:FC:D8
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer: /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial: 0197752DB528BBD203B1DBD411E9BC1139BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 20:00:19 +0000
Manifest this update: Sun 15 Jun 2025 20:00:19 +0000
Manifest next update: Mon 16 Jun 2025 20:00:19 +0000
Files and hashes: 1: Rw3BYoyXYSEo6V5vN0qo3508qkM.roa (hash: sKlzeUwowKBMHyUl3VaDBvqX0srdSepcxCjN2qsXkZI=)
2: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: inkRawbJTiRTTkMjP67esraJ1CRXu/50jxM61JHnFao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2d:b5:28:bb:d2:03:b1:db:d4:11:e9:bc:11:39:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
Validity
Not Before: Jun 15 20:00:19 2025 GMT
Not After : Jun 16 20:00:19 2025 GMT
Subject: CN=25531b33189f81136323698b9d049bfa8562fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:f2:11:0b:7c:3e:3c:a6:a7:2c:ab:74:b6:
8f:39:66:8f:32:a9:be:4f:ca:17:da:09:f2:1e:13:
c6:cc:6d:3b:7b:09:94:76:1b:4c:fc:35:36:45:54:
e8:d8:2f:42:86:1d:2b:48:24:bd:cc:cc:3e:fb:b0:
d3:c3:f7:93:f9:ab:22:4d:f9:3e:83:6f:dd:ec:f2:
f6:ba:c6:e7:dd:f4:63:e9:43:39:fe:aa:92:8e:e5:
d2:a8:c6:f1:78:94:5e:50:e1:ba:2e:2d:35:66:66:
15:c3:04:87:c3:76:b6:79:28:32:4a:6d:10:aa:61:
a5:5c:ae:31:d2:d3:f6:d8:a7:50:83:a9:14:ba:b3:
52:e1:2b:5a:d3:30:af:7c:cb:cd:93:fe:35:75:c7:
c3:54:5e:58:f0:40:9c:05:1c:5a:c6:71:5b:45:1a:
8b:4c:38:bc:c0:39:97:fd:60:8e:ae:fd:c0:94:d9:
90:39:bd:94:bc:4c:13:f9:50:8f:f4:f9:fb:52:52:
72:cb:fc:5f:53:e3:ae:34:5f:1f:43:3d:7f:90:7f:
d7:a4:99:21:84:64:08:6b:f5:5d:cb:94:1d:07:17:
f0:37:e3:ac:53:35:a4:52:b6:7f:5f:55:c3:c8:e7:
69:65:04:e6:24:fb:4e:b4:c6:6b:7a:8c:1a:c4:91:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:1B:33:18:9F:81:13:63:23:69:8B:9D:04:9B:FA:85:62:FC:D8
X509v3 Authority Key Identifier:
keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:45:23:ab:b9:30:62:0b:6d:e9:b0:0d:12:c4:70:a4:a4:20:
cf:fb:07:66:c8:d5:4c:aa:c7:a2:d6:33:ce:ea:43:a9:63:15:
2a:ef:46:91:36:98:7c:c9:d9:c1:e1:ed:f1:c5:ce:a8:37:a5:
68:7c:96:95:bb:05:b6:2b:cb:3d:5b:ff:b0:ed:79:18:30:3d:
23:af:bf:05:23:4e:de:a6:d6:51:89:a3:37:1b:5f:23:52:d2:
5b:fd:2a:db:9d:dc:2c:b8:ea:5f:ec:f7:37:e9:c6:e2:83:55:
ca:cd:2f:81:d9:50:ff:ca:e3:65:2b:6c:0f:5f:06:56:27:57:
0f:1d:5c:e9:94:32:89:e4:20:f6:58:6f:72:cd:0b:10:e5:70:
e6:6d:e5:58:b9:b8:fc:71:1e:cc:30:ba:bf:a1:4a:2a:d8:17:
6f:23:c9:a8:0b:39:11:cf:77:a1:a2:0f:6f:33:f9:8c:fe:4e:
f1:ac:f9:0f:34:ce:29:1b:0c:48:79:7a:e0:d0:05:bb:8d:bb:
2f:c8:c3:f4:de:3f:73:af:b4:cc:6e:2a:59:2d:ea:ac:00:bb:
86:1c:68:e1:79:93:79:b6:2a:51:c4:d5:b7:32:d5:88:d1:e0:
26:21:28:fc:c0:62:e5:c7:46:1f:e7:84:1f:b8:f8:f6:98:3b:
a1:3a:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:53 2025 by rpki-client