Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
File: DUHQpubfLhjCVnMjaNbnaCiTExA.mft (raw, json)
Hash identifier: z/3+ss6L8hTjw1bf6hgBYE2WjLEoZsk4maavWset6/4=
Subject key identifier: D1:02:2A:3E:A3:22:94:65:FB:2C:ED:67:A7:F1:3C:43:38:F1:7A:50
Authority key identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
Certificate issuer: /CN=0d41d0a6e6df2e18c256732368d6e76828931310
Certificate serial: 01976D3E5ECFC5D5D9ACB04FAE9B11EE5E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
Manifest number: 0ED6
Signing time: Sat 14 Jun 2025 07:01:33 +0000
Manifest this update: Sat 14 Jun 2025 07:01:33 +0000
Manifest next update: Sun 15 Jun 2025 07:01:33 +0000
Files and hashes: 1: 5yn4zHauZM75VAijpeMoQrgxCO4.roa (hash: XNQWDr0wgLOmyX40wHgFFl4XUTUYTIzKWa/lVOSFR8o=)
2: DUHQpubfLhjCVnMjaNbnaCiTExA.crl (hash: jittBKTqX+IsYSbWCrNfQEeQzhT4KeR89ghAxO5zlg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:5e:cf:c5:d5:d9:ac:b0:4f:ae:9b:11:ee:5e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d41d0a6e6df2e18c256732368d6e76828931310
Validity
Not Before: Jun 14 07:01:33 2025 GMT
Not After : Jun 15 07:01:33 2025 GMT
Subject: CN=d1022a3ea3229465fb2ced67a7f13c4338f17a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:d0:28:63:bc:d3:81:31:f8:3d:7e:b4:bb:
e7:b7:3c:0e:28:04:66:52:5c:ab:4a:8b:27:c4:dd:
3d:c0:09:69:79:90:52:51:2d:73:45:54:82:67:b8:
8c:52:d5:a7:0e:aa:bf:42:0d:b7:d1:14:89:0e:2e:
22:a5:37:6f:41:ae:9b:26:0b:8b:49:7a:13:63:ad:
c3:ba:10:d1:7d:99:6c:c4:fb:03:5f:2a:89:17:30:
d8:55:e5:2c:d2:eb:bc:a8:91:56:57:1c:1b:80:e7:
4e:67:af:a1:8d:30:98:7f:7b:5f:41:06:84:6c:6a:
a7:98:d5:a8:72:80:88:9f:43:d4:4b:e7:32:6f:31:
57:a0:72:ac:74:39:5a:b6:d9:72:e6:51:bc:d8:56:
41:64:22:fc:70:3e:4b:c9:3d:19:f6:09:b3:25:2a:
5a:86:43:71:16:fa:41:4f:1a:54:05:3f:b0:cb:0d:
c4:46:49:31:5c:c4:f1:b7:f3:8f:c2:f2:12:ac:8e:
e8:76:36:78:3f:1f:97:e9:63:70:59:37:c5:b2:1d:
bf:5f:63:00:e2:e1:c1:bb:fb:ae:25:b8:d1:59:f4:
7f:93:97:81:29:99:a4:7e:18:29:b2:3d:87:7c:66:
fe:c3:4f:b7:16:70:69:51:b4:8c:bf:8b:35:39:1a:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:2A:3E:A3:22:94:65:FB:2C:ED:67:A7:F1:3C:43:38:F1:7A:50
X509v3 Authority Key Identifier:
keyid:0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3d:53:69:a4:50:06:a5:18:25:f6:f7:7f:c7:9f:b2:61:b6:
02:05:20:28:88:66:03:ba:e5:26:6d:7d:19:4d:ac:45:d5:a1:
0d:b9:07:72:b1:27:3e:90:48:ce:91:20:6e:0a:18:3e:24:2e:
d3:fe:44:ca:32:8e:1f:5e:ed:93:92:c9:cc:d5:64:15:7a:02:
9e:4e:7f:b3:cf:c3:5a:fa:99:d7:82:ec:e5:11:cf:7d:64:60:
14:9e:f9:f5:e9:73:ef:e9:c0:5e:a3:72:c0:05:b1:a2:1f:bc:
a8:cb:af:b1:8b:ed:2a:00:05:ab:24:1d:cb:41:27:f6:21:bd:
04:73:01:5e:6b:88:55:07:63:df:f9:8b:23:df:56:74:28:b1:
1e:0d:92:99:02:53:00:71:f8:4e:d0:31:7a:e7:ba:34:7c:66:
53:2f:d3:70:8b:6d:9d:4c:c4:92:b7:59:ac:02:43:28:42:a7:
21:f0:0a:63:19:fc:54:23:0a:0e:8e:bc:a7:24:05:a6:10:99:
74:70:ad:3d:63:1c:60:2c:da:34:ad:47:d6:a2:65:15:44:a2:
a8:b2:3e:ab:df:31:27:ef:5f:0b:ca:15:66:51:2d:28:70:83:
e9:4e:a8:ee:ab:66:ac:ac:ce:08:34:a5:0b:f0:75:76:77:9a:
e5:4b:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:10:27 2025 by rpki-client