Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
File: Dri8RONvrhbTcQL9DVGfKE1mPZA.mft (raw, json)
Hash identifier: 8mzn+pkknWAznRzoHIsumL+6VNPxBpAzp7HWEjTfaQk=
Subject key identifier: 63:60:0D:06:C1:E3:BD:28:4B:F3:A5:3E:E7:F9:A5:27:AA:31:5A:93
Authority key identifier: 0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
Certificate issuer: /CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Certificate serial: 0197684E1CD2DD4FB2843FE1D388D7B2AA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
Manifest number: 14D7
Signing time: Fri 13 Jun 2025 08:00:39 +0000
Manifest this update: Fri 13 Jun 2025 08:00:39 +0000
Manifest next update: Sat 14 Jun 2025 08:00:39 +0000
Files and hashes: 1: Dri8RONvrhbTcQL9DVGfKE1mPZA.crl (hash: uIY28rngck1V1cVGzo00jhpib/Dc6ybmaaaHZkIlrxQ=)
2: EnQM4_whnPJeaxWRQxPEz7dH7rY.roa (hash: anAGsxZMEMPM7WeK+BVeddK3oakg7+TLd3wIh7D05ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:1c:d2:dd:4f:b2:84:3f:e1:d3:88:d7:b2:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Validity
Not Before: Jun 13 08:00:39 2025 GMT
Not After : Jun 14 08:00:39 2025 GMT
Subject: CN=63600d06c1e3bd284bf3a53ee7f9a527aa315a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:e0:1d:45:5a:bc:a8:b3:a8:1c:4c:00:8a:
5e:25:75:6c:ab:01:97:e8:1a:ca:e7:e6:70:67:69:
93:5e:ab:4c:54:f3:4a:c0:8a:5e:78:f6:78:4b:81:
59:b2:b9:b2:5e:e1:2e:a2:77:17:4e:16:a7:53:2a:
a9:71:1f:70:b2:84:2b:79:88:bb:69:1a:8d:40:92:
82:73:29:14:b2:57:8c:b8:e7:61:55:ad:19:cd:21:
40:58:9e:c5:d1:34:27:f9:ed:6f:1a:36:42:c6:a4:
4c:4b:47:f5:fa:ba:63:ab:75:c5:29:59:f6:69:07:
4c:1b:a7:e8:48:cb:f7:17:59:1b:17:df:c6:8b:b0:
5d:4a:82:aa:95:f1:55:a4:aa:3d:76:a2:1b:6e:0d:
4b:a2:ba:d2:cd:37:5c:a4:20:10:95:da:b9:ba:f3:
c7:54:a1:59:a1:03:c6:fb:d0:8e:b7:06:fc:96:a9:
65:66:b9:a2:c5:b4:10:92:d7:1d:ae:be:76:0a:ba:
f0:ee:f9:45:ff:7d:16:dc:02:b2:c0:a4:d9:85:cc:
70:b2:d5:51:41:45:14:8e:43:9c:24:5c:5c:83:02:
0a:0e:b1:ff:2e:87:59:44:d3:e8:06:01:62:82:34:
af:8a:b2:2c:58:96:9c:c2:34:d2:05:1e:1c:1f:3b:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:0D:06:C1:E3:BD:28:4B:F3:A5:3E:E7:F9:A5:27:AA:31:5A:93
X509v3 Authority Key Identifier:
keyid:0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:41:4d:12:ba:ad:34:0c:8c:2b:6d:4b:53:e7:e9:de:03:ad:
6b:2a:21:e4:33:77:0e:e0:58:cc:47:17:24:44:3b:ca:a7:e3:
66:89:39:44:13:dd:9f:88:f4:26:04:18:6a:c0:25:9c:7c:71:
0c:78:25:02:70:3e:38:a1:d7:0e:58:22:43:d7:53:b3:18:bc:
35:08:11:66:ee:ff:1c:85:88:32:dd:d5:87:e1:76:90:68:88:
5d:9e:e3:53:8c:b7:d2:a4:3a:16:34:7b:12:72:89:0b:e2:2d:
51:44:ed:62:31:83:fb:ec:a0:ea:b9:d2:be:18:84:6e:b8:e9:
70:c7:d5:8b:8a:de:be:30:f1:5e:65:7c:91:57:0d:c3:f9:81:
a7:13:8e:42:f0:50:34:32:c9:72:85:86:9e:bd:f7:53:5e:2e:
89:7a:52:71:02:58:f7:b8:a6:bf:95:f1:cb:83:0b:98:2e:6d:
7d:28:77:72:21:b5:76:0c:8a:03:5e:57:3c:97:ae:b8:01:69:
d1:f7:5c:0c:fb:a2:60:4a:82:04:9e:4a:c3:ba:42:48:39:b1:
8e:70:2c:79:02:89:18:05:76:65:9c:c8:3d:6f:19:fb:00:4f:
6c:1c:7f:21:18:8d:bb:7e:a0:ea:d8:a8:3c:7e:f0:cf:d0:15:
42:3e:20:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:07 2025 by rpki-client