Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: 2YnpEEHFF2qdVeb7i3oxf0/wpaNhmq1bSZ9rRScxJNg=
Subject key identifier: D6:E7:58:DD:F7:8F:44:2E:5A:38:F1:99:6A:7D:63:E3:A4:02:78:DF
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019787D90AB64B4BE77E56A958B73D20E4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 149C
Signing time: Thu 19 Jun 2025 11:00:37 +0000
Manifest this update: Thu 19 Jun 2025 11:00:37 +0000
Manifest next update: Fri 20 Jun 2025 11:00:37 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: DD6l2UlHAfLi5urcWmstPDj6jsC+0c+Ki99ApD/Qzek=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:d9:0a:b6:4b:4b:e7:7e:56:a9:58:b7:3d:20:e4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Jun 19 11:00:37 2025 GMT
Not After : Jun 20 11:00:37 2025 GMT
Subject: CN=d6e758ddf78f442e5a38f1996a7d63e3a40278df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:a6:2d:d1:a2:ac:45:34:6b:0d:45:84:ae:
d3:e2:8b:53:a4:ee:97:34:da:24:5f:12:37:85:7c:
28:5f:5f:3d:6f:53:fa:0c:dd:f3:76:46:68:d0:90:
8b:3e:2b:bd:5f:04:94:f8:fa:a8:28:66:78:04:e1:
8c:79:1d:b2:30:1a:22:44:c4:09:5c:9c:51:fd:65:
89:59:83:f2:17:50:00:6e:17:b5:09:b0:6e:40:86:
25:4a:a9:a8:06:17:27:ab:61:2f:06:c6:84:49:8a:
77:94:c1:15:20:d1:f6:f9:a1:a0:6c:4e:ef:f2:96:
8e:da:95:a1:ed:85:c6:32:99:53:bd:fa:74:ad:cc:
92:92:4f:21:4c:e3:b5:a5:e9:ee:bd:f7:ef:59:62:
a1:4a:92:2a:29:e6:d6:9d:d4:48:86:38:bc:c1:d7:
65:8a:8e:57:7f:d8:bc:04:ba:38:38:c9:90:61:55:
a1:f3:89:fb:d9:e3:19:62:7c:7a:78:d3:d2:58:a1:
df:fa:03:a0:e8:47:e3:0c:d3:a9:6a:a5:0d:09:ad:
85:2c:ef:81:fd:07:cb:fa:16:bb:5e:f0:98:e2:4e:
e6:83:b0:5b:e8:af:f2:e5:c0:ac:0e:b3:c9:73:25:
62:f5:f5:f0:88:94:ed:a1:2d:a5:b6:24:e7:44:3d:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:58:DD:F7:8F:44:2E:5A:38:F1:99:6A:7D:63:E3:A4:02:78:DF
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ff:8f:45:83:c0:49:1e:93:72:0f:c1:92:f1:29:dd:ef:f6:
e6:cb:2c:6f:4a:cf:b6:d2:e3:18:48:8b:2e:2f:25:a5:79:d0:
a8:c3:02:aa:fb:9a:6a:aa:ef:cd:a5:60:4f:39:bf:e2:ab:ec:
99:58:26:2c:eb:3e:e4:11:f6:4b:dd:32:a9:fc:01:10:41:18:
01:c1:45:f6:91:66:9a:19:83:54:fa:4e:54:20:5a:77:42:f1:
e2:92:5e:d0:f2:61:c1:07:68:7f:53:b6:a1:6f:e0:27:2e:75:
e1:49:10:6d:5a:b1:01:f5:d5:02:08:46:6b:0a:3a:ff:2d:a2:
ec:fd:7e:5a:2a:69:af:8d:9b:06:01:55:e6:f2:06:6d:dd:e6:
c7:e1:c2:00:3a:76:c1:26:b5:bf:13:8b:23:58:80:a5:17:a0:
41:41:9f:68:25:2b:21:c5:b2:b9:e8:ec:16:9c:7c:d6:a3:04:
b9:bb:bc:bf:84:d6:07:8c:23:9c:a3:76:73:e3:7b:ff:9f:db:
b7:09:c8:6b:f8:e7:b0:42:31:f3:e5:bf:d6:4f:30:3b:f7:9b:
3f:83:ac:4d:89:53:e9:5c:90:20:64:66:fc:c1:08:32:46:e1:
0f:7b:c5:29:fb:bd:19:26:19:46:9d:51:ea:9e:39:39:2e:c7:
bb:af:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:24:09 2025 by rpki-client