Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: oW7RE8RwHd/wQW1coCqqhNSb6wITMUM8bicNNDGqq1c=
Subject key identifier: 2C:F1:3A:39:10:E7:47:5B:EA:2D:4B:1B:17:69:86:FD:C0:D7:00:ED
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019785EA91418A4CA2390CBD855CA49A0735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 02:00:31 +0000
Manifest this update: Thu 19 Jun 2025 02:00:31 +0000
Manifest next update: Fri 20 Jun 2025 02:00:31 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: KQ4bVCoJ1Zjz5WyZjuegcIsFbR9n++pMrf0VknrudUU=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:ea:91:41:8a:4c:a2:39:0c:bd:85:5c:a4:9a:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Jun 19 02:00:31 2025 GMT
Not After : Jun 20 02:00:31 2025 GMT
Subject: CN=2cf13a3910e7475bea2d4b1b176986fdc0d700ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:f2:9f:fb:60:ef:06:4f:1b:e6:8a:05:3f:
7a:6a:da:1a:bb:2b:ea:76:fb:45:e7:c2:0a:25:f2:
ce:ec:54:b6:2a:e4:bd:82:55:cf:c5:79:36:59:9c:
92:87:b0:39:65:05:c5:e1:10:77:5f:62:8a:cf:db:
55:bc:23:50:05:a9:42:45:9f:66:34:4a:d2:94:e8:
f9:da:af:4d:68:d5:28:85:71:15:44:8b:f0:d7:e4:
9b:cf:6f:4b:94:e1:d8:a1:9e:c7:74:6f:58:9c:92:
dc:dd:94:c9:ab:5f:56:e8:40:5c:b1:1f:6f:f7:31:
b3:0b:b9:38:65:72:00:45:af:5f:8d:dd:05:3b:dd:
24:35:2f:3a:28:38:d6:9f:ec:9a:c9:bc:ca:0e:11:
48:0d:24:e1:8b:38:90:20:a1:f9:b6:be:7b:af:67:
04:5c:d4:cf:cd:a5:78:ed:36:29:28:9a:3d:e8:f2:
51:3e:30:01:57:57:4d:ac:9b:d3:a9:9b:88:8f:60:
86:5f:d1:4d:fd:75:42:95:da:8b:9d:d7:a6:11:36:
79:ff:f6:c1:41:fb:ea:b1:5f:a5:ca:32:b5:6b:d2:
9d:32:8b:03:4f:b1:42:7b:4f:5a:d1:fb:03:cf:d4:
0e:54:d6:3e:ac:f4:af:4c:df:5a:54:82:49:ee:cb:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:3A:39:10:E7:47:5B:EA:2D:4B:1B:17:69:86:FD:C0:D7:00:ED
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:2a:36:89:9f:b5:a0:ff:74:26:66:bc:e4:9c:56:4c:4e:
69:15:b4:fe:2c:46:4e:5f:46:29:8c:44:45:4e:81:dd:cc:ca:
53:09:73:62:62:21:d4:b9:37:52:1a:e6:7b:31:ab:85:73:66:
ac:2b:52:62:c1:5e:ff:49:47:16:38:92:6b:01:01:eb:af:3e:
a5:19:45:76:4f:60:13:fe:a6:e9:95:85:ee:05:84:3c:14:4e:
57:5b:4d:2c:59:71:8f:29:7e:2f:65:ff:71:be:fb:d1:f0:96:
d5:7b:39:97:c1:ff:fe:af:06:83:da:d2:fc:cb:4b:b3:39:c5:
c5:12:6e:4a:00:22:98:bb:42:3a:da:04:89:d9:a5:e0:c0:04:
1d:71:12:4e:88:94:14:19:df:f1:ca:7a:b8:49:6f:48:75:56:
21:6e:4e:ab:13:06:d7:d7:94:11:ff:a7:01:3d:bf:63:68:4d:
e2:da:ed:1e:0a:d2:8c:bd:a8:49:46:ab:da:87:3f:db:e5:e1:
2a:76:c8:93:9b:d1:e1:a6:49:4b:f0:5c:b0:06:4f:bb:72:a7:
5a:05:ad:82:3b:c0:b9:31:ce:c6:f1:36:cb:f3:f3:cf:19:30:
7c:47:54:76:ab:7e:89:94:42:28:eb:03:3a:d8:4a:4a:5e:4f:
80:6e:f8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:21:47 2025 by rpki-client