Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: SiaHt9IQC1ATAitamrhd4QiwAbweASGyeIM3J5xt6qw=
Subject key identifier: F3:98:5D:20:46:B4:BE:82:EF:02:62:53:B8:C8:0F:6A:69:BC:A1:1E
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 01976F2C6DC570B7C8228A5F8A989E12D6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:01:12 +0000
Manifest this update: Sat 14 Jun 2025 16:01:12 +0000
Manifest next update: Sun 15 Jun 2025 16:01:12 +0000
Files and hashes: 1: 5zY8cTJ9_ultsIEeFLr1owXqfpo.roa (hash: uKuIcfTOzja04k3xKWkz2SqmI76812eF5kHKV8ubvHA=)
2: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: Rg3Uekg2W/JHNXBiMb95DPb5BX5B0ktJWNYrEAjInEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:6d:c5:70:b7:c8:22:8a:5f:8a:98:9e:12:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Jun 14 16:01:12 2025 GMT
Not After : Jun 15 16:01:12 2025 GMT
Subject: CN=f3985d2046b4be82ef026253b8c80f6a69bca11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:58:82:00:19:21:6d:24:fc:1d:c7:b5:dd:
04:2f:9a:46:43:4e:ec:71:aa:30:83:11:b1:d1:79:
ab:a9:09:11:ba:7d:06:b0:05:59:1b:1c:13:40:7f:
9a:56:bf:7d:a9:c6:fb:ed:b3:bf:cb:fa:d5:d9:a7:
db:e1:89:08:59:d0:7a:ce:96:21:59:13:4a:38:ae:
db:bb:c9:f5:ca:21:b4:00:23:a2:da:40:ca:70:af:
e9:87:d9:93:1c:f3:05:ff:b3:8d:05:d1:4d:40:d7:
e4:5d:dd:0d:1f:26:1c:20:69:98:b5:b7:3b:0c:86:
10:8d:30:4c:9b:91:69:0e:77:1f:85:15:93:b7:e5:
fe:07:3f:b9:0f:2e:1b:1d:8e:db:82:6a:b3:68:d3:
85:b4:20:18:f4:72:87:d0:49:98:dd:47:08:89:b1:
42:71:6f:61:e3:d9:c2:44:ea:e8:2f:9e:1c:f7:5a:
d8:0b:66:90:2f:72:f7:83:47:4d:d6:dc:39:43:43:
37:3b:73:03:3f:31:51:1c:f8:cf:8b:c0:ef:cb:a6:
81:a5:dc:90:08:e7:48:fa:e5:be:4e:c7:fc:b2:ab:
55:d5:25:f6:21:4b:45:84:a6:5c:42:91:e5:be:75:
5b:9b:e5:b5:eb:b1:7d:f6:0e:ec:6e:24:33:8b:b0:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:98:5D:20:46:B4:BE:82:EF:02:62:53:B8:C8:0F:6A:69:BC:A1:1E
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d6:c9:21:93:e6:53:82:ae:04:94:62:45:6c:dc:3e:26:ec:
11:65:1d:32:9a:3e:38:71:92:90:4d:88:6b:21:e4:95:b3:d2:
1c:57:d9:c4:a9:1c:57:ab:59:a7:55:71:1c:de:05:97:65:43:
37:64:75:b4:01:e2:8e:8e:9b:db:87:44:d3:4f:67:7b:a0:6b:
04:7b:57:13:9c:49:ee:36:b4:b1:d9:87:db:6a:be:ed:e5:85:
50:c8:a0:18:b0:4d:43:f5:7e:fd:e6:ca:39:8b:1a:88:c9:6c:
c4:db:9e:44:43:08:a1:50:ed:99:80:47:f5:b9:e0:60:26:b5:
17:ea:56:8f:05:3e:66:d1:d4:74:e2:67:ce:a4:0e:d3:55:0e:
be:d5:76:11:d7:a1:5e:e8:bb:92:8c:8a:a6:64:92:68:58:28:
e3:0d:d4:7c:7a:b6:57:12:75:8b:8a:74:25:c0:ed:30:ea:e5:
14:1e:15:62:05:47:6b:78:a5:3a:a7:e3:8c:ca:70:33:fb:d4:
94:1b:a8:31:ef:d1:3f:bf:7d:e0:c2:5d:b5:d9:25:db:34:0c:
91:90:e4:ec:fe:a1:91:ca:58:3e:20:92:6a:00:75:0e:e5:5a:
ae:a4:f8:58:b0:b0:bd:ad:f6:a6:60:58:5c:08:49:8f:88:00:
ee:da:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:05:57 2025 by rpki-client