Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: ewvSSLf0h72hnu8ZtHKIYFtkC8z88EcxAx/lvoXF+J0=
Subject key identifier: 9C:62:0F:6F:4C:B8:55:10:A9:D6:04:00:CE:64:44:7E:04:30:7F:B5
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 01977CE7D87E24FC3D5821D6B85907B6243F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 02B0
Signing time: Tue 17 Jun 2025 08:00:58 +0000
Manifest this update: Tue 17 Jun 2025 08:00:58 +0000
Manifest next update: Wed 18 Jun 2025 08:00:58 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: RdYHgeT4qp5eLjpXuBW1y2nqAYL+83r8oexH6vfj+Cw=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:d8:7e:24:fc:3d:58:21:d6:b8:59:07:b6:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Jun 17 08:00:58 2025 GMT
Not After : Jun 18 08:00:58 2025 GMT
Subject: CN=9c620f6f4cb85510a9d60400ce64447e04307fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:44:2b:f5:1e:7f:22:05:cd:9b:5b:e2:e7:
38:00:cb:8e:02:5b:53:30:aa:a3:42:30:f8:89:8b:
a8:d7:71:3c:8d:71:d1:39:46:7b:09:06:80:ff:d7:
31:ad:b7:51:2d:c8:cc:c1:f4:b3:4e:37:da:da:ee:
57:d0:af:6d:72:ef:82:f9:c9:e9:d3:1d:c4:df:bf:
e5:2c:61:0c:47:59:d6:f6:21:6c:e1:81:ca:e2:8b:
75:42:f6:0c:30:94:81:03:47:d4:4d:40:93:17:28:
90:53:12:d8:b8:d5:c4:ba:0d:08:7b:9b:59:e7:44:
7a:b7:c4:c2:0b:64:51:5a:17:e7:0c:2c:25:f3:23:
3e:e3:a9:26:4c:18:e1:43:41:9a:2e:6a:e9:b8:14:
fd:d1:f7:b3:be:7e:1c:e2:4d:07:a2:15:8c:8a:20:
dc:7c:78:cc:00:39:9f:56:4a:a7:b7:ec:1b:72:00:
05:f4:1d:27:54:a6:17:95:e3:5e:b7:9c:36:4d:6f:
af:71:c4:6a:05:a2:a0:77:e7:8f:76:6d:38:13:73:
33:0c:07:67:91:db:ef:d6:20:31:d5:bb:36:92:57:
d2:9a:31:03:b7:d2:a9:42:b5:fa:cf:f6:47:36:e8:
8b:32:37:9a:ed:d3:6f:41:91:91:09:a7:42:39:6b:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:62:0F:6F:4C:B8:55:10:A9:D6:04:00:CE:64:44:7E:04:30:7F:B5
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f9:4c:07:72:be:fa:86:bd:9e:01:39:f4:48:ab:5f:d7:37:
0e:64:6c:ce:3f:f1:5f:c3:c6:6b:66:6d:75:6e:de:e9:a3:c2:
de:cf:f6:bb:e2:bd:c2:93:90:69:0d:23:83:a8:51:2d:35:d0:
a4:cc:fe:ae:64:c4:45:79:2d:3f:06:b3:56:5c:5b:45:a3:18:
54:f7:95:8d:32:90:ff:11:4d:d2:1a:16:a1:ae:4e:ec:85:a1:
15:c3:a6:47:a0:22:a8:a6:ce:48:27:a9:77:83:05:f1:6f:63:
12:07:1b:4c:92:00:7a:85:b8:57:2d:4b:24:80:62:36:2a:fc:
2e:12:e5:49:b8:78:d3:62:ba:d2:67:c6:1d:3e:15:93:ea:25:
a6:0a:b8:1c:3a:1f:d8:f9:11:62:56:17:1b:d7:b2:46:1b:82:
17:3f:f8:7d:05:83:93:06:0f:c5:35:3d:5f:78:9a:93:c4:14:
77:3b:65:c2:63:20:5b:0f:89:4b:7d:39:9e:a3:6f:31:98:75:
fa:5d:7a:15:1b:f8:a4:33:3b:ff:e8:81:1a:99:0a:78:09:6d:
86:ba:e0:c5:54:2a:7a:b7:4a:bf:02:66:85:d3:e4:7d:e2:4d:
5b:45:f7:1f:e1:d1:ff:bd:a6:db:23:a1:cd:85:f8:42:4b:d4:
d8:81:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:07:00 2025 by rpki-client