Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: g9vJjlm/0IhYp2eFNaUCYWKu8EXTk6PtvoI9cxlNhZY=
Subject key identifier: 5D:BC:C8:19:06:DE:EE:5C:F0:81:0E:4B:3E:C0:3B:B1:1F:E4:FD:8A
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019772646526182C1B2CA839C5F44ADE587F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 07:01:11 +0000
Manifest this update: Sun 15 Jun 2025 07:01:11 +0000
Manifest next update: Mon 16 Jun 2025 07:01:11 +0000
Files and hashes: 1: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (hash: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=)
2: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: KObjBBVfSZpAaMY+zgyd6E2/OuzYfSkk4RcVxzHg9FU=)
3: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (hash: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:65:26:18:2c:1b:2c:a8:39:c5:f4:4a:de:58:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Jun 15 07:01:11 2025 GMT
Not After : Jun 16 07:01:11 2025 GMT
Subject: CN=5dbcc81906deee5cf0810e4b3ec03bb11fe4fd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:7a:98:f7:83:79:87:4a:56:98:e6:18:6c:
e9:50:a7:c2:e5:38:21:dc:52:13:8e:74:9e:2d:3a:
ba:65:54:2c:dc:e6:19:0e:d7:37:53:7b:13:d8:c2:
a1:44:e9:88:d3:37:ce:fd:a9:9a:4a:40:7b:ee:c8:
ed:4a:ac:f7:68:83:a6:2f:e4:10:41:27:d4:75:d0:
ac:d8:9a:a2:e0:d7:1e:2e:6a:23:af:24:81:17:b7:
44:16:7d:1e:ca:53:9b:3a:bc:fe:24:ae:1f:0c:c6:
dd:62:cc:e2:79:10:ca:a5:4d:91:37:88:b2:b7:5a:
9a:5d:2c:22:d8:37:81:38:cc:33:5c:f2:a6:d4:d9:
2e:b0:c9:74:57:14:b8:43:54:7a:d5:db:26:c2:2d:
7f:84:f5:59:3f:e1:24:5e:f9:98:76:8d:8c:76:06:
e6:99:c4:64:a0:fc:97:aa:88:d1:a2:9f:ae:aa:82:
71:90:c8:82:fa:f3:4c:d1:34:84:b8:91:93:47:ea:
7f:44:20:fb:1c:52:8e:39:11:fc:04:ec:ec:be:e7:
99:41:00:87:69:63:2a:ef:ab:34:71:f5:a9:63:69:
a2:90:52:5e:69:50:bc:ee:9b:f3:1f:8f:2c:19:3d:
09:2d:24:5c:28:c2:35:5f:81:c4:a7:6d:07:d4:1d:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:C8:19:06:DE:EE:5C:F0:81:0E:4B:3E:C0:3B:B1:1F:E4:FD:8A
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:20:71:7a:24:85:2e:be:4f:52:4d:0b:92:49:1b:d3:ad:5d:
0a:64:01:b1:47:45:22:81:5d:1d:77:dd:c8:a5:b6:ce:de:71:
8a:08:4a:01:56:65:28:eb:ca:d2:50:df:53:e2:c6:a7:31:05:
d5:a6:92:28:3b:2e:f9:8d:e1:d8:a6:05:5d:e9:d3:96:2b:47:
76:b3:6a:9e:fe:2b:a6:2f:35:6c:00:c2:63:a1:16:92:3f:0e:
c6:26:4a:4f:2a:5e:ec:67:1a:c8:04:3a:74:15:de:43:9f:e7:
a7:45:67:f8:ae:da:c3:e8:c1:f2:85:b7:63:cd:eb:1c:fe:97:
f3:e0:93:aa:91:1e:26:d0:44:4d:a3:3e:8e:c5:fb:7f:f6:d5:
60:8a:85:80:b4:97:e0:f6:6b:c4:b7:76:42:a6:ad:83:89:81:
10:bc:76:2d:ac:c5:07:36:71:86:da:29:de:d9:37:ae:11:2e:
e9:20:c9:6d:c3:90:cf:5f:54:34:53:3a:4b:4d:11:52:1f:84:
12:4c:7f:d3:3a:df:b3:d0:cf:85:7c:cf:54:a9:82:d0:c3:70:
96:4c:32:b8:01:6e:de:e7:a0:ed:dd:4c:17:a6:31:31:0b:96:
6f:5a:45:35:05:9a:4b:f6:ff:7a:22:8e:18:6d:bc:d2:0d:b0:
c5:66:71:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:14 2025 by rpki-client