Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: DBEQJZi8qOgygyOUorbotPpt2QtHXvLciLey6Sr/Ugg=
Subject key identifier: C0:D5:97:7A:B3:AA:70:62:BF:23:F5:BD:04:83:ED:4D:9C:31:0C:78
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 01977007E2F4888B5A16DC3F68A9E4FF0872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 0DF8
Signing time: Sat 14 Jun 2025 20:00:54 +0000
Manifest this update: Sat 14 Jun 2025 20:00:54 +0000
Manifest next update: Sun 15 Jun 2025 20:00:54 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: aWEATczs6wohEe/O8pI1b/xaiYDJi3EWN1icwu9I2ac=)
2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:e2:f4:88:8b:5a:16:dc:3f:68:a9:e4:ff:08:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Jun 14 20:00:54 2025 GMT
Not After : Jun 15 20:00:54 2025 GMT
Subject: CN=c0d5977ab3aa7062bf23f5bd0483ed4d9c310c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:7c:42:e1:9e:1e:7f:b4:ba:af:3a:88:3d:
0b:c0:26:cb:b2:bb:97:1e:72:3b:87:50:d5:3b:41:
9e:8e:36:d0:37:68:8d:c0:ca:b6:f5:3c:0d:bf:57:
4d:4c:09:2d:51:d0:fe:e5:b1:59:96:21:4a:e5:db:
6a:43:c8:6c:ba:35:b4:5e:6c:b4:79:6e:fc:ed:ac:
0d:c1:26:35:2e:3e:06:87:6a:fc:2d:ba:9c:dd:eb:
41:d3:2c:8d:42:60:90:96:70:cb:5f:f9:23:0b:29:
ee:d7:94:75:d0:bb:b7:44:56:f4:e7:2b:e1:e1:72:
3a:05:da:c0:1e:75:55:57:28:0c:77:c9:88:a9:95:
b9:92:47:5b:25:a7:49:83:3e:0a:4a:5d:1e:dc:a7:
da:2a:da:2e:45:61:21:ea:18:f6:6d:aa:93:3c:34:
8b:85:fb:4b:ca:b6:b0:72:35:f0:1f:84:94:d6:da:
f5:97:e0:3a:f7:e0:28:36:2c:0d:b8:15:03:12:7d:
92:90:ec:05:2a:1a:ad:b3:28:db:98:97:0f:2d:e8:
4b:f0:0c:43:ab:a9:dd:d3:e9:c8:fd:8f:cc:ec:28:
b4:b6:ff:44:aa:c6:cb:fc:d4:0f:c5:23:33:3d:ba:
80:89:c4:8e:cc:12:3d:ad:2f:d1:29:10:db:3c:f0:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D5:97:7A:B3:AA:70:62:BF:23:F5:BD:04:83:ED:4D:9C:31:0C:78
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:03:b4:fb:f3:16:ab:b3:eb:10:4e:7a:22:18:c2:7e:63:59:
1a:13:04:52:c9:d3:8b:bf:48:45:1b:84:53:fa:30:87:38:af:
92:a5:69:9b:e4:dc:c3:d4:b1:ce:a6:c5:d2:28:5c:4b:b7:73:
0a:02:4e:87:7e:34:de:8d:27:a1:57:77:42:42:e6:e5:b8:0a:
d6:3c:e7:1f:d3:e6:50:be:5c:87:6d:0d:41:83:0c:ce:18:c4:
41:8c:d0:80:ec:f6:ab:41:4a:cd:75:70:f1:3d:4b:67:39:f5:
fb:44:7b:36:89:50:3c:7c:09:8d:59:dd:33:0e:7b:1f:e7:5a:
b1:bc:3b:7c:07:cb:2b:47:45:3b:90:7c:dd:13:37:f6:d3:9d:
3a:5f:3f:90:60:7c:8c:b8:34:35:a7:9b:fc:d8:6e:43:61:f6:
9c:44:d8:da:b2:c7:92:e6:7b:92:c8:f2:4b:d6:01:69:64:84:
d9:a9:f1:71:6a:22:de:34:0d:7b:a6:07:19:55:17:88:91:63:
56:04:1b:93:65:d8:26:ba:e1:30:88:eb:ad:8f:3d:50:02:1e:
1a:f2:f8:db:3d:d6:ab:d5:7c:9a:ab:95:fc:1e:33:92:56:8c:
02:9d:b6:44:88:d5:f5:bb:91:e2:5b:97:2d:44:42:79:88:13:
19:31:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:30:47 2025 by rpki-client