Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier: fR0kcTxbILfJnDfOpFLxjJ6bGTqtzhmXtwe+dAO3qWc=
Subject key identifier: F3:2C:41:FC:D2:A4:04:BF:EF:BA:1A:F1:74:F4:43:6D:77:05:6B:6B
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial: 019776AEA0B3943AE1F022940ABB9E87D8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number: 02D4
Signing time: Mon 16 Jun 2025 03:00:45 +0000
Manifest this update: Mon 16 Jun 2025 03:00:45 +0000
Manifest next update: Tue 17 Jun 2025 03:00:45 +0000
Files and hashes: 1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: cta9TnMhosu3T0A0xZVv8n/WtNh6oQjZ2atoCY/2f18=)
2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:a0:b3:94:3a:e1:f0:22:94:0a:bb:9e:87:d8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Validity
Not Before: Jun 16 03:00:45 2025 GMT
Not After : Jun 17 03:00:45 2025 GMT
Subject: CN=f32c41fcd2a404bfefba1af174f4436d77056b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:64:48:95:cf:79:f4:3a:d4:63:15:3e:d2:
a0:9f:39:de:01:c4:72:ac:26:75:e1:6c:03:73:d5:
07:2f:ab:10:8f:70:08:04:2e:6a:eb:a7:29:e5:35:
a2:16:e2:16:e6:bc:f5:d2:5c:e6:57:d3:d0:bc:42:
a1:9a:0f:f2:70:7a:37:1c:4f:08:8f:5b:b2:de:e0:
11:ac:8a:64:9e:67:72:25:dc:e8:cc:8d:e5:42:84:
82:c0:14:ad:55:86:9f:d0:79:c2:da:9b:53:8d:a2:
1a:02:8d:b6:f7:ee:9f:5e:35:16:08:ba:41:c6:10:
7d:d3:04:71:95:7d:cb:88:86:61:dc:b4:78:d5:9c:
00:66:ad:76:c4:f3:74:a4:68:c2:a2:06:72:0c:10:
9c:e5:58:30:d8:35:13:65:4b:a0:e9:f4:ed:6c:44:
3b:29:a3:93:5e:d9:d9:6f:8e:af:2a:c9:18:03:2e:
50:75:b5:00:88:e3:3f:9a:6a:1a:70:c3:26:09:b7:
f2:05:82:cb:ee:de:1d:71:80:c7:cc:18:ab:a3:17:
01:2e:3f:26:5f:40:21:63:78:e5:16:c5:79:db:95:
7e:df:42:0f:bc:20:6e:fd:c5:d4:b4:d4:1e:1d:d1:
de:d3:ab:8d:88:59:a4:dd:33:9e:04:1e:1a:99:87:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2C:41:FC:D2:A4:04:BF:EF:BA:1A:F1:74:F4:43:6D:77:05:6B:6B
X509v3 Authority Key Identifier:
keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:37:b0:ac:5a:00:a5:6a:8b:e1:46:d6:bc:76:81:c6:ac:5c:
80:f7:48:06:09:be:6f:25:c3:ef:63:15:a4:71:29:89:89:d5:
f4:1d:c3:9c:4b:e9:df:63:35:11:af:4e:21:bb:12:d2:b9:21:
f8:fb:3d:e8:d9:3a:49:cb:69:8b:8c:e6:60:f5:89:52:54:59:
ed:60:25:b2:12:98:d0:df:d1:3c:04:cb:6d:53:33:ab:89:7f:
67:33:ad:2a:b9:b7:d7:25:be:20:bb:6a:88:70:c2:48:fc:03:
4c:b9:d5:46:0f:4e:0e:53:88:d2:4d:0d:70:0c:f7:dd:2f:29:
c0:b6:46:72:86:5c:e9:0b:ae:60:64:7f:22:c7:c0:83:bd:0e:
8d:44:b4:cd:93:41:27:c7:0f:13:6e:ff:45:b4:bc:71:5b:38:
a0:12:61:83:bd:86:22:c4:7b:f2:97:ac:0d:19:2d:30:2a:64:
14:f4:2f:b0:8a:93:0c:d7:8f:f1:5b:eb:28:f3:d5:a9:d9:77:
db:2c:14:be:31:4e:57:5a:4c:55:b8:e3:c5:1d:bd:73:08:b4:
0c:5a:04:54:66:8c:3f:a3:cc:f3:c3:a3:b0:33:6e:4d:c8:78:
2e:c1:e4:86:72:d9:72:0e:50:f0:62:f8:f4:b3:c8:fc:54:63:
43:f8:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:13:48 2025 by rpki-client