Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier: 4Olz9yc4U7x8hoO1/LPn4H7CLStRJhimA/7raEvlt58=
Subject key identifier: 93:67:F7:37:6F:E3:EC:64:5D:39:AC:E7:2B:23:60:87:34:17:F0:5A
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 01977E31684A23BF0A6FD8877CC2DE0BDAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number: 112D
Signing time: Tue 17 Jun 2025 14:00:56 +0000
Manifest this update: Tue 17 Jun 2025 14:00:56 +0000
Manifest next update: Wed 18 Jun 2025 14:00:56 +0000
Files and hashes: 1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=)
2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: 7rqaYB56+nvq/pyz/v6Xk/MpUA9G4u6wHRd7MmZ4A7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:68:4a:23:bf:0a:6f:d8:87:7c:c2:de:0b:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Jun 17 14:00:56 2025 GMT
Not After : Jun 18 14:00:56 2025 GMT
Subject: CN=9367f7376fe3ec645d39ace72b2360873417f05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:f0:48:ce:d9:92:0a:6d:09:ef:d0:05:7e:
02:ee:93:eb:c5:78:dc:06:53:d2:67:b1:e0:73:86:
e4:98:f8:ba:05:89:f3:a8:f7:70:72:23:2e:01:d8:
3c:a0:9e:2e:13:d5:df:64:86:1d:2f:f8:d8:a8:70:
15:80:c9:c9:63:f3:95:e4:6d:79:68:8e:a6:cd:dd:
f1:8b:ef:0a:da:89:87:51:c2:22:7c:cb:fc:b0:65:
a9:76:8f:6a:18:3c:a7:0d:11:01:b6:e1:3a:72:f9:
db:46:1f:ca:78:2e:3c:20:b8:5c:ca:01:ac:4f:0b:
34:6a:91:b5:5d:f8:10:4b:53:8a:72:68:38:30:57:
df:57:f2:40:a8:9f:d2:e9:5a:88:27:a5:fb:7c:16:
f1:05:1e:77:43:ef:79:5c:33:98:57:7f:ab:4d:f4:
f4:1a:34:ae:c7:c1:4f:e0:5a:35:cd:3c:3f:64:f1:
5f:84:6b:25:ed:b6:e6:26:ea:6c:d5:b5:0e:ac:bb:
5f:9f:87:67:72:c8:01:36:31:f6:30:c1:71:b0:f4:
ab:6d:de:f4:92:36:9a:c8:e1:ba:7f:c9:c2:36:39:
0d:a6:92:b2:28:7d:d0:9b:fc:5b:1c:95:e2:44:f5:
d9:a8:36:6c:73:02:b8:3d:9b:74:62:d0:2a:32:25:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:67:F7:37:6F:E3:EC:64:5D:39:AC:E7:2B:23:60:87:34:17:F0:5A
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6e:c4:05:89:32:ac:61:f7:1e:b8:98:b9:2f:b1:a3:9f:67:
57:fd:2d:43:87:84:a0:6f:8a:dd:42:8b:49:30:9f:77:fd:21:
a8:62:d5:29:cc:62:e3:b7:c7:4f:9d:12:65:77:bb:fd:12:28:
38:33:87:db:fe:bb:5f:15:12:3e:68:4d:a3:e8:71:3a:11:3f:
95:7d:fd:97:d7:37:3b:c9:8c:52:27:c8:15:57:67:7f:27:62:
5a:3d:5a:66:81:03:72:e7:46:6d:dc:9b:55:a3:b6:b8:48:77:
07:b5:65:0d:11:1c:71:45:31:26:ad:12:cb:b7:fb:dc:c1:2e:
81:d9:8f:8f:d6:e8:1b:b9:1b:7b:76:2d:20:41:17:05:b7:3f:
60:cc:da:af:55:f2:4f:3f:1f:a1:ae:3e:78:51:3d:ac:dd:62:
76:0d:ac:eb:ed:2f:ce:0f:8d:e8:0c:84:50:c4:a0:5f:80:f0:
c1:9f:81:35:19:38:4c:0b:43:3e:38:83:ba:09:e7:98:f7:15:
55:de:98:a5:6e:59:96:05:d5:02:11:aa:ee:0e:7c:a5:f4:de:
da:9a:5a:87:82:06:74:d2:41:18:18:ed:88:74:1f:7f:ad:dc:
25:f5:aa:8c:96:55:4a:76:82:e0:62:81:cb:68:47:9e:4a:7e:
00:92:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:08:10 2025 by rpki-client