Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: sw6DEMsGhOTymLSHxqeAXzwqDdWVsLrHZ2XmwxkgujE=
Subject key identifier: AD:9F:CA:4F:C2:9F:0D:95:4C:BB:9C:47:4C:9D:58:03:99:01:7F:EA
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 01976DE276AF653B06E819C16575EB5252BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 10:00:47 +0000
Manifest this update: Sat 14 Jun 2025 10:00:47 +0000
Manifest next update: Sun 15 Jun 2025 10:00:47 +0000
Files and hashes: 1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: /vAKi4WhGyy44VuXQXVUEoqYlxobJSNUlTy8WdbSLmY=)
2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:76:af:65:3b:06:e8:19:c1:65:75:eb:52:52:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Jun 14 10:00:47 2025 GMT
Not After : Jun 15 10:00:47 2025 GMT
Subject: CN=ad9fca4fc29f0d954cbb9c474c9d580399017fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:71:56:0e:bb:49:5b:68:0a:f9:76:c4:39:
fa:9b:09:41:5c:ea:fe:2a:3e:0a:91:04:00:13:2d:
d1:0e:07:3b:75:1f:35:b5:43:0a:c5:26:07:1f:f7:
de:8a:c9:67:d8:08:10:3a:7f:7f:00:d9:48:be:88:
4c:c8:ae:f8:74:7f:47:26:3f:80:e0:09:36:c5:e1:
a3:37:d7:5c:80:43:60:ed:70:9b:3e:27:bc:9f:5d:
22:00:4c:00:9a:d3:6d:f1:ea:a2:6d:b2:3f:c7:e1:
67:56:f0:d8:52:34:0b:c0:8e:93:dd:af:8d:55:91:
5f:bd:78:91:66:c2:a9:bf:5f:71:3a:43:3a:7f:8f:
b4:d9:dc:25:c5:db:3e:4a:a3:cb:ab:ce:64:d6:28:
b3:81:d5:3d:c8:d9:21:81:34:6a:46:7a:71:fb:0c:
f0:02:6d:70:d9:57:b6:e8:78:df:b6:27:d6:56:98:
e6:fb:0b:20:7c:6f:d1:ed:08:85:b9:30:ee:d8:fe:
d7:34:b1:2d:cc:ea:a0:3b:f2:47:64:39:04:dd:04:
d3:81:d2:d9:3d:fe:a1:60:80:73:5f:ce:71:0c:6d:
e9:48:16:bb:0f:09:d1:ce:3c:21:4f:8e:2d:b8:6b:
4f:0c:9d:25:28:a1:27:19:85:ae:d6:ee:d1:a3:cf:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:CA:4F:C2:9F:0D:95:4C:BB:9C:47:4C:9D:58:03:99:01:7F:EA
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4b:5e:7f:dd:bf:af:a5:41:79:64:94:2c:d7:4b:04:2d:62:
23:3f:e2:3d:34:be:d5:90:16:20:e4:08:78:8f:c0:de:58:10:
85:66:61:4e:ba:af:93:2a:0e:24:73:d5:d4:e0:7a:5b:ee:26:
cd:df:db:8f:b8:76:b7:dc:d1:be:e3:08:b3:41:40:13:27:e8:
b2:0d:67:e3:ac:f6:de:f0:ef:14:aa:f1:a2:9d:01:ce:91:b3:
1d:60:e6:9d:88:19:52:b4:fa:69:ff:5d:37:5c:de:e5:2a:87:
e9:be:c2:6e:7a:06:d6:75:c8:46:d8:77:ec:71:b4:d8:80:2e:
09:78:d4:24:c4:05:d2:08:ee:01:ae:89:8c:a3:41:86:d1:29:
61:34:c7:c2:59:fc:e4:64:60:6a:ec:32:e9:67:eb:ea:b2:8a:
1f:2c:fa:50:7e:e1:31:f8:21:38:aa:34:3b:f4:9c:7b:a5:a6:
0c:88:fe:69:b4:85:a3:b1:32:10:a2:79:b7:ca:45:6e:1f:e4:
c0:fd:36:4c:cd:4f:13:d3:13:9b:d4:94:2d:d0:5f:f6:1c:1e:
ca:81:80:95:51:85:65:08:77:f7:4e:fc:3f:5f:74:49:81:44:
bf:dd:87:5b:3b:a1:03:18:08:ce:28:8b:32:1c:08:d1:1d:61:
6b:e5:4e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:57 2025 by rpki-client