Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: GmhVh4sjwnoG8+Hl/XbjHvsWn52OujCWutQUm3MuPnI=
Subject key identifier: 43:AB:53:1D:8E:FE:67:84:3E:65:EF:C2:8F:D0:C7:C5:A0:D6:46:18
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 01976A06211DC3D63D6FEE0E8595C17DFC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 16:01:15 +0000
Manifest this update: Fri 13 Jun 2025 16:01:15 +0000
Manifest next update: Sat 14 Jun 2025 16:01:15 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: aLOqyi+5UMryzOLMLf+8t37gpmhZ46K90fdk/y3Hxuc=)
2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:21:1d:c3:d6:3d:6f:ee:0e:85:95:c1:7d:fc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Jun 13 16:01:15 2025 GMT
Not After : Jun 14 16:01:15 2025 GMT
Subject: CN=43ab531d8efe67843e65efc28fd0c7c5a0d64618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:21:63:e0:f0:29:81:b9:f9:9f:32:55:3f:48:
ac:5b:ee:0c:4d:48:e0:4c:b4:8b:eb:21:9b:c4:51:
a1:3c:4a:40:48:a5:ca:63:7a:61:49:c4:b9:8f:ff:
ff:ad:5e:80:70:8e:09:fc:cb:29:29:9f:23:80:cc:
e0:c6:47:d3:25:5f:68:b9:ef:b4:dc:1a:9f:be:f2:
1f:f2:f2:32:47:f8:13:12:78:c0:a0:57:de:32:b4:
63:46:3a:13:7e:7d:bd:8d:15:f3:2a:02:c5:b9:1c:
4a:36:61:18:4d:7d:21:cf:3d:9c:db:ca:93:75:c7:
5d:73:6a:03:84:5f:f4:13:1c:9c:e5:13:f0:85:e5:
18:44:ec:32:12:60:5e:89:02:b3:a1:c9:8e:3b:a3:
02:6a:d9:ad:95:9c:74:e5:3c:aa:28:f0:e6:06:f2:
7d:17:d1:eb:e5:19:ca:83:24:3e:00:8c:64:e4:49:
93:1c:be:f2:b6:37:81:ba:53:5b:e6:40:55:78:fa:
bb:30:74:14:d4:a2:7b:ea:48:36:a2:6e:03:f8:e5:
92:71:05:d7:ef:f6:41:b1:a5:36:a6:2f:f2:eb:75:
51:00:ea:b3:e5:d8:f2:c3:51:68:be:74:c1:bc:92:
68:f2:cc:27:f3:91:dc:03:aa:75:13:5e:6f:9c:43:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:53:1D:8E:FE:67:84:3E:65:EF:C2:8F:D0:C7:C5:A0:D6:46:18
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b7:16:2d:dd:b8:ae:d5:e1:6f:92:f5:92:5c:3b:c0:97:ee:
65:d0:ad:5f:90:f7:04:d3:db:7d:c5:09:6c:88:cf:05:b8:8c:
87:51:9e:16:60:97:84:90:1c:d1:34:42:7b:d5:0f:dc:b8:85:
60:63:e5:8e:c6:5d:3c:a0:82:91:9a:5a:ee:5f:43:6a:40:e2:
eb:a6:e2:39:88:7c:3f:ca:b7:3b:92:50:31:f2:ed:22:54:ec:
b1:7f:c7:5c:8e:58:0e:3d:19:dd:c5:f0:3c:f0:da:f8:56:c3:
5f:a8:7e:ed:b2:fd:40:88:b9:9b:7e:5f:69:8b:60:ab:de:a4:
fb:b9:9c:ed:f1:9f:16:4d:c4:86:99:54:76:09:ea:7c:6f:16:
24:57:2a:52:e9:8e:37:37:7d:9f:5a:28:f9:38:7f:6f:4b:90:
fa:59:c2:f7:04:fc:79:8e:41:54:75:be:93:90:48:c2:88:31:
8e:61:97:42:89:52:b7:4c:04:60:c1:dd:d8:85:06:a0:94:26:
a7:f6:15:37:42:de:b7:6c:b6:48:cc:cb:89:f4:3f:b9:1b:66:
c8:91:77:74:1b:c1:fa:3d:10:59:21:ea:98:5e:53:0c:5a:4c:
84:ec:02:c9:6a:6c:32:d7:88:34:78:45:c1:7c:7c:83:8c:69:
02:a6:f9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:24 2025 by rpki-client