Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: Xve80zAJvtlX7vME8gq3amezrwqNl3X8+wtuIuVUp3w=
Subject key identifier: BB:8D:FF:06:B6:65:6B:92:53:84:AA:16:98:5F:A0:BC:69:3E:4D:1B
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 01977C798C4C3D9FA298797C3D3ECCFA82ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 0622
Signing time: Tue 17 Jun 2025 06:00:29 +0000
Manifest this update: Tue 17 Jun 2025 06:00:29 +0000
Manifest next update: Wed 18 Jun 2025 06:00:29 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: GKY4TywmBxg61IJr1Cvaa2P3gyi8V+0Vp/LApfwZzLw=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:8c:4c:3d:9f:a2:98:79:7c:3d:3e:cc:fa:82:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Jun 17 06:00:29 2025 GMT
Not After : Jun 18 06:00:29 2025 GMT
Subject: CN=bb8dff06b6656b925384aa16985fa0bc693e4d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:1d:84:ec:b5:75:50:95:d6:eb:1c:3c:4c:
00:3c:20:01:69:9a:5d:fc:48:8d:ae:f2:0a:3d:a9:
95:23:3c:51:08:08:17:32:ea:35:21:8e:1a:f3:a6:
d8:33:4c:ea:75:1a:c4:9f:db:34:75:c9:aa:db:79:
93:a0:6b:b4:2c:8a:d8:bd:30:cb:ae:77:e3:73:91:
f1:f9:f6:b2:82:d5:d3:fd:88:c1:86:44:cb:ec:84:
4b:c6:9e:a9:2a:ac:fc:8a:3c:4e:ed:70:15:b1:9f:
7f:e2:1d:58:bd:62:d9:60:81:cf:59:45:a2:b5:35:
ea:bf:fb:dd:86:f6:5d:06:05:4c:58:3b:be:5f:2d:
e0:11:70:48:55:34:e9:df:1f:b7:98:26:cb:c5:44:
3d:07:63:4f:62:3c:07:1f:e4:20:31:17:bb:b9:42:
69:af:ca:93:50:15:50:a1:e4:06:ca:ec:07:fc:b3:
b8:03:04:da:43:37:fb:17:1f:d6:2f:38:94:b7:76:
e6:2d:32:76:6e:2e:22:09:61:79:83:cc:af:10:d1:
ce:da:5c:f0:c8:7d:3b:b2:c2:66:0e:31:da:7d:d9:
26:e0:25:b5:32:f4:77:af:5b:6f:78:75:3f:a8:cc:
19:96:d7:c2:30:bb:14:26:f5:13:64:e3:db:24:49:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8D:FF:06:B6:65:6B:92:53:84:AA:16:98:5F:A0:BC:69:3E:4D:1B
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e7:d1:90:56:d2:e3:b8:d8:0f:fd:10:0e:34:3a:a4:5c:15:
c9:d2:2c:29:51:74:ba:fa:33:2a:72:08:8a:55:00:08:98:f2:
9a:ff:2f:34:58:e7:7c:09:d5:08:2c:7c:43:25:63:e3:84:be:
fe:8d:7d:5d:8d:f9:cc:25:53:cb:ef:93:16:fc:fb:bf:cc:2e:
8e:41:e2:fe:e1:73:82:1c:ea:d7:53:0b:56:b2:4f:09:3d:1b:
5a:db:3a:45:27:68:b5:db:d5:c8:22:43:e7:89:4a:20:d9:4b:
a3:7a:0c:19:a0:bc:c7:d8:f4:7e:d8:85:08:45:ae:0e:75:9a:
5b:6d:d6:de:d8:7b:0b:9d:97:f5:a3:16:f8:db:4c:31:3d:3b:
92:a1:64:81:75:ef:34:c0:3e:98:e8:22:3c:8c:57:b0:7f:31:
32:6c:26:9e:b2:02:e2:c6:af:05:89:89:9a:e2:92:5a:d4:50:
33:a6:86:85:5e:66:48:05:06:f3:9a:10:bd:51:bc:07:08:9c:
16:c9:a4:33:c6:bf:5c:1e:60:17:5e:9e:a4:14:8a:a7:1b:34:
4b:2d:27:ac:00:49:be:c1:2c:fb:16:9d:74:be:32:de:a5:ce:
c2:af:7a:7d:0e:54:ed:c5:6a:b0:17:c0:36:27:8b:dd:6c:77:
c0:80:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:04:42 2025 by rpki-client