Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: drbkUL5ARwsxhRrht+k7lUmBGjo67pPVKZC+5iQ+kXY=
Subject key identifier: 67:35:E8:FD:29:B2:30:D2:9F:B2:2A:0F:01:FA:04:B2:B9:D7:AA:AB
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 01977263EA48C0C550189261E03681E31D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 07:00:40 +0000
Manifest this update: Sun 15 Jun 2025 07:00:40 +0000
Manifest next update: Mon 16 Jun 2025 07:00:40 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: H3cMEsaOfPGZlnUnCMgo3J4GjopY+lbszzXl+kf9ufk=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:63:ea:48:c0:c5:50:18:92:61:e0:36:81:e3:1d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jun 15 07:00:40 2025 GMT
Not After : Jun 16 07:00:40 2025 GMT
Subject: CN=6735e8fd29b230d29fb22a0f01fa04b2b9d7aaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:55:f2:4b:d5:3d:d0:f0:cd:6a:40:69:a3:
c9:fb:55:67:5b:49:d1:4d:c5:c4:2a:3f:ac:a5:f6:
61:31:b4:dc:df:61:22:a7:df:12:ba:54:46:81:4a:
ea:0a:b5:f5:ed:9f:2c:db:bc:b3:ee:ee:f4:0b:f7:
86:8c:b7:ce:2a:f2:34:9f:23:69:f3:8f:e3:39:27:
64:80:fa:13:19:9a:66:08:8e:e9:c8:0f:50:bf:af:
13:a2:94:ab:4c:f5:5f:ef:ff:db:3c:d6:e1:44:82:
40:71:be:8d:18:40:20:60:fa:85:ab:3c:fa:c5:8d:
1a:26:c0:af:3e:1e:bc:ab:d3:03:82:34:cb:33:78:
64:d0:50:1e:63:72:dc:3b:fa:78:81:50:e8:21:d0:
a3:b4:de:61:91:cb:ff:29:9d:ea:72:1d:01:ec:53:
de:54:e5:01:ad:1a:6c:14:68:5f:97:0d:fc:07:43:
87:c6:f7:70:e5:49:58:b8:d6:e3:35:ce:ce:17:b0:
a5:b6:8b:91:51:74:c0:db:eb:67:8f:bd:48:a6:0d:
95:45:42:23:6e:bc:ea:35:37:c7:2d:7e:52:26:bf:
9f:2b:ac:8f:6b:ce:dd:1d:a3:a9:6e:b7:3b:38:83:
38:81:48:b1:38:4f:0c:2f:95:21:39:dd:20:bc:47:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:E8:FD:29:B2:30:D2:9F:B2:2A:0F:01:FA:04:B2:B9:D7:AA:AB
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5c:0d:3b:85:20:de:8e:2d:2f:c2:67:38:04:d2:8c:c3:90:
80:7d:6c:1a:88:67:81:53:96:73:6b:05:74:7e:cd:72:f1:c2:
03:75:2c:b9:4b:bf:95:6d:61:28:25:a0:97:a7:40:a3:e2:8b:
74:0a:be:fc:1e:05:0e:b7:85:27:6a:e3:f0:db:1f:1a:be:ac:
b5:a0:79:5e:cf:4f:7d:a8:c5:f0:6a:41:64:2a:c1:85:33:51:
7a:90:81:de:c4:09:f2:41:35:34:99:0e:15:40:ae:a8:3c:2a:
98:44:8b:8d:0c:2e:39:e7:ce:33:fb:4e:1a:db:1e:0c:d0:35:
0e:13:e6:7e:48:a2:cf:37:30:23:c1:e4:d7:77:24:59:5d:0c:
7d:5e:43:e8:c4:7f:83:45:8c:0b:b7:58:45:d3:0b:42:3f:8d:
93:db:f2:70:68:b8:c4:72:07:e1:1c:2b:04:4c:f8:4b:64:42:
23:22:c8:17:1d:92:6c:b7:4b:ed:5e:97:de:1d:3d:8f:c5:d2:
1a:e4:5b:da:89:4c:2c:94:bf:0f:57:2a:20:f1:cd:34:75:c7:
02:32:d3:c9:1d:b0:94:ce:e3:c1:00:fb:8a:80:39:e4:51:1f:
df:71:16:52:5a:0f:f0:1c:0f:e5:62:0a:a1:c2:a0:89:b3:43:
b7:ca:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:14 2025 by rpki-client