Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: AQLT0foJtodx/8NeRBxBZOeiALq3GXgXBBJFlDJ98No=
Subject key identifier: 10:7F:0F:C7:45:B7:23:CC:EF:3C:F9:2A:57:10:A3:3B:07:AE:CE:33
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 01976E8787FE51F3F1C00057347AF7724C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 13:01:05 +0000
Manifest this update: Sat 14 Jun 2025 13:01:05 +0000
Manifest next update: Sun 15 Jun 2025 13:01:05 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: C0hW5JZCUVvJAbhpAqhWGL0i6CWhQMbrGtk1Ccr+Wzk=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:87:fe:51:f3:f1:c0:00:57:34:7a:f7:72:4c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Jun 14 13:01:05 2025 GMT
Not After : Jun 15 13:01:05 2025 GMT
Subject: CN=107f0fc745b723ccef3cf92a5710a33b07aece33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:88:8a:46:03:9d:72:02:d6:48:cd:c8:44:
f4:94:08:c9:26:52:ca:fd:d1:a3:9d:21:e3:2b:50:
40:8f:f4:50:1d:26:fe:40:38:d7:d5:bd:17:61:c6:
5a:1d:6e:3f:64:d3:a1:05:69:e8:be:67:3c:7c:cb:
7e:de:0d:8a:9f:d0:ec:f7:04:f9:43:ef:14:27:59:
7b:57:df:5c:15:1c:c6:0e:b8:f8:4d:82:38:61:e1:
c9:9b:31:1b:d7:42:e5:1d:be:27:fd:da:fb:f3:8a:
bd:ca:b7:bf:83:e7:d8:23:54:2b:26:10:ae:a8:9a:
37:cf:ee:7c:3c:cc:3a:85:58:b4:72:9b:2b:00:6e:
32:d4:bc:4c:bc:6a:0d:0e:6d:db:62:c7:5f:0f:36:
92:e6:7d:c6:fb:cc:c5:bd:41:10:86:f6:8e:85:73:
a9:b9:1c:ea:2b:0a:f9:f2:8e:54:fd:75:2d:4f:da:
23:35:0f:2b:21:38:d8:37:39:f0:53:14:ed:3d:44:
75:ea:23:8c:33:7c:57:fc:aa:bc:d7:5a:23:5b:75:
bc:47:bb:5d:c9:24:e0:0b:78:9d:1a:be:f6:34:6a:
23:9b:c9:89:37:d5:0c:10:84:1b:e5:22:d1:f0:73:
f8:e8:a3:da:90:d7:88:b7:8e:f0:f8:34:37:bf:4d:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7F:0F:C7:45:B7:23:CC:EF:3C:F9:2A:57:10:A3:3B:07:AE:CE:33
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:63:c9:f0:7b:27:6d:58:bc:4e:7b:88:63:be:62:81:92:bd:
ea:b5:d5:16:a1:48:0d:b0:3c:ef:bf:b8:6d:cb:a4:5b:a3:4d:
ac:70:4e:a3:fe:53:1a:8e:a3:19:34:26:bb:c7:92:5a:eb:05:
24:4c:00:53:ff:7c:cd:fa:c1:00:d9:46:26:a1:90:e3:a5:05:
9a:ef:fb:a3:8b:01:85:51:9e:01:64:8d:97:f9:0c:28:ed:0e:
e0:92:ef:3a:82:d4:1c:64:44:f6:4d:91:92:a4:51:24:0a:00:
c5:7d:55:de:f2:f6:70:3f:44:28:c8:c0:4f:dc:94:36:37:ed:
0a:a2:d6:6e:ab:31:c8:b9:5a:b7:bc:9e:d7:1a:31:2b:44:2d:
6d:58:70:3b:d4:5a:ab:55:24:2e:00:b3:a8:33:cb:4b:ec:15:
78:92:08:a1:d1:da:41:cf:73:42:31:0e:1c:ca:b4:d1:34:65:
02:89:a7:e7:ac:9e:02:37:d0:f7:1b:1a:49:7a:d6:82:a7:30:
ac:18:bf:4e:ba:64:4a:5f:62:ae:c5:81:34:0a:3e:d1:81:60:
61:21:8b:78:4c:9f:93:05:8b:8d:e0:54:76:9d:e9:72:13:ce:
b7:fd:7e:cd:73:1c:5a:a3:e8:07:00:3e:04:42:93:23:04:2c:
0e:a8:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:18 2025 by rpki-client