Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: jTX5T6dYm9rwTC6Zl/YG2gE0RRHXkQi/UEQ+woPHl4Q=
Subject key identifier: E3:8A:DF:01:26:BE:AA:40:06:07:5E:B9:CE:FA:F1:53:52:7F:04:C2
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 019779AFD8AEAA92511E334C603E708DDC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 03B0
Signing time: Mon 16 Jun 2025 17:00:56 +0000
Manifest this update: Mon 16 Jun 2025 17:00:56 +0000
Manifest next update: Tue 17 Jun 2025 17:00:56 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: 3S5XW09qQJSaSqqVbciTAJd16aJO4xh0mpQ2K3ugzKk=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:d8:ae:aa:92:51:1e:33:4c:60:3e:70:8d:dc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Jun 16 17:00:56 2025 GMT
Not After : Jun 17 17:00:56 2025 GMT
Subject: CN=e38adf0126beaa4006075eb9cefaf153527f04c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:52:d7:74:e1:aa:4c:13:b5:9f:8b:ad:24:
59:77:c9:42:fd:2a:60:63:2d:fa:72:07:c3:34:5d:
5c:ab:b8:1a:ec:ab:8e:9f:89:04:52:29:70:f9:08:
0e:ac:dc:5e:ac:73:ce:4a:82:18:07:ff:32:c6:73:
3a:f0:6f:7a:bb:39:a4:73:1b:a6:5e:c5:b2:22:da:
d4:0c:7e:f6:54:46:d5:62:d8:5e:ff:dd:e9:dd:ab:
49:db:d1:c2:aa:21:3a:35:ae:f1:70:1a:d1:a9:40:
b6:80:fc:01:d6:7b:5d:73:bd:8c:64:bc:aa:bb:0c:
71:d5:bd:19:8c:fa:e8:eb:64:e6:41:30:69:75:97:
96:ce:70:42:34:e4:51:9d:15:c8:5b:f8:03:76:c3:
25:68:fe:3a:56:fc:af:1a:00:4c:fc:1a:d1:d5:f5:
a6:d5:0d:3e:05:94:3d:74:f7:50:46:c4:37:9d:03:
d5:85:40:0f:6c:0e:91:92:04:51:4f:7c:da:81:f6:
75:28:d7:15:a7:12:26:bd:f0:24:f2:95:f7:1a:1f:
91:b2:7a:f3:73:e1:c8:3e:7e:6f:56:a4:d0:96:aa:
66:b9:77:66:1e:74:54:29:3d:75:b0:f4:3e:db:7e:
9a:83:f6:df:40:e2:66:cd:b3:e0:93:ca:a2:80:b0:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:DF:01:26:BE:AA:40:06:07:5E:B9:CE:FA:F1:53:52:7F:04:C2
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:b1:73:96:0e:5b:4e:dc:5a:1a:e1:3a:22:e3:73:65:4f:
8c:97:4f:d9:03:f5:d1:3b:a2:74:b0:4f:74:e7:42:5d:be:a9:
de:5e:14:7c:10:00:d8:76:8c:df:5f:55:c1:07:d3:6f:b8:be:
63:13:49:6b:c4:6e:ee:c7:6a:de:0d:2d:b4:7b:0b:3d:cd:52:
29:ae:f4:64:b9:15:41:65:b2:fe:69:7b:cd:9f:69:61:6b:a1:
ed:d7:38:c3:29:68:ab:52:c3:d1:b9:7b:12:e5:fc:a3:16:7f:
12:6a:ea:17:e8:97:99:41:71:4a:70:de:e2:1a:1e:5f:ef:3d:
fd:8f:03:8e:97:8c:c0:12:b9:bb:e0:a4:97:4e:03:fc:9e:e1:
05:2a:34:10:89:b7:6c:21:35:b8:47:dd:ac:06:de:cb:e3:d8:
f7:87:9f:f5:7d:cf:45:31:3e:3f:b9:49:df:d8:ca:80:fa:da:
2e:85:70:c2:e4:64:f7:ae:81:ab:58:00:23:27:ea:36:d9:1d:
1c:e4:cf:b1:e6:ca:1e:5e:2b:8e:5e:25:d1:6a:e2:91:4d:a0:
14:12:d2:19:cb:5f:dd:ec:a6:b5:07:ff:cc:4a:1c:e4:d0:d3:
5f:99:90:8a:1a:4c:b2:63:5e:64:51:d8:92:82:5c:95:35:ab:
29:c2:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:06:24 2025 by rpki-client