Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: KApUNqrWLTUd8Ev+0iCy2p7hFoQ0Zo6yxy09Zza4ab4=
Subject key identifier: F4:1C:7D:62:28:9D:AB:34:D1:5D:AB:4D:AE:51:71:2E:DD:11:0A:E0
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 0197786620C69538111F32089D06146AF4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 0D
Signing time: Mon 16 Jun 2025 11:00:48 +0000
Manifest this update: Mon 16 Jun 2025 11:00:48 +0000
Manifest next update: Tue 17 Jun 2025 11:00:48 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: iOchDK5U1vH4bHCkt+RkPqoIlEFRT2Kd2ENxv+hqfIU=)
2: paTtElWGmU9hAIEDu_IgYgPtAVs.roa (hash: gF5VuGVggwKtY1Dsuv7xJ4ySU2bi6uUiiENjoaY2rmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:20:c6:95:38:11:1f:32:08:9d:06:14:6a:f4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Jun 16 11:00:48 2025 GMT
Not After : Jun 17 11:00:48 2025 GMT
Subject: CN=f41c7d62289dab34d15dab4dae51712edd110ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:9a:6e:c7:5f:15:3c:9b:b8:98:69:c4:af:
f6:b2:44:d4:14:3a:88:98:4a:83:0b:34:e0:34:23:
c7:05:50:b6:7a:e1:a0:0d:61:19:65:0e:3d:97:66:
59:fb:d6:ad:37:8b:4e:0b:de:7e:c4:85:7a:c3:bd:
52:cf:e0:a8:9a:ca:cf:54:fb:71:20:12:68:b0:c2:
87:7c:54:ba:b6:63:e3:81:35:23:fd:02:e2:ab:fc:
aa:ce:3a:7c:40:d1:cf:cd:8d:7a:33:28:37:b6:03:
87:22:f6:50:38:70:8f:3b:4c:cc:bb:11:ba:ce:76:
17:6e:2e:9f:21:a7:c2:12:4b:29:1d:ef:65:e1:cf:
50:b2:bc:c6:e3:d4:ae:45:64:cc:f6:5d:30:0d:61:
5b:18:2d:f2:01:6a:ce:bc:50:3b:2b:57:45:bf:7a:
97:09:64:08:05:61:ae:7c:4e:9f:b8:9f:92:8d:c3:
82:44:a8:e6:e2:ea:1d:fc:64:43:06:4a:ed:bb:70:
81:7b:79:de:f0:60:b7:91:44:b3:ed:ea:8b:09:f2:
f0:7a:56:f7:80:45:a2:da:a9:e1:d4:d8:e1:84:e7:
e2:81:6c:e5:5c:77:dd:4e:c7:d4:a1:0d:18:7e:7d:
0b:6a:f3:ab:a1:bb:86:42:06:df:e5:6f:da:45:85:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1C:7D:62:28:9D:AB:34:D1:5D:AB:4D:AE:51:71:2E:DD:11:0A:E0
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:ec:5a:1d:f0:6e:93:1e:9e:e7:82:a7:bd:5c:46:63:ea:
53:a1:1e:ec:f8:a1:b4:1c:b9:85:aa:af:f1:4f:ef:69:14:aa:
6e:08:99:09:08:b9:f6:87:86:0f:24:44:70:ab:38:49:e4:79:
ac:53:06:80:cd:7f:61:80:b2:56:c9:78:65:b9:05:cd:87:e1:
56:4e:57:5a:6d:28:ee:c0:4f:b7:a4:73:13:57:cd:3b:ad:56:
c6:03:51:80:a2:1d:c2:f0:22:bf:b5:cf:b2:6f:dc:5a:4a:c8:
66:83:c3:0a:2f:4c:32:a0:6a:8b:26:85:f1:58:8a:9a:c2:0b:
0e:56:06:54:88:03:d3:20:76:75:d9:d9:b7:06:0a:16:8a:d0:
cb:62:d5:4d:6a:42:12:a5:5a:56:42:c9:dc:ef:ba:48:db:7e:
7c:33:8c:04:50:d7:33:9d:58:29:a8:18:c8:ac:b7:85:4d:54:
fe:ec:5a:b1:1d:53:29:e8:4a:1c:f1:25:8f:83:d2:14:d7:89:
69:4e:43:b7:6d:3a:c9:5b:12:3a:b0:10:db:1b:66:5c:81:76:
36:9b:c0:3f:4f:db:99:e9:42:29:4b:85:f4:ea:ab:43:00:9c:
20:25:17:3b:eb:16:24:6f:22:a3:65:91:5d:c4:ae:75:47:8b:
35:b3:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:50:13 2025 by rpki-client