Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: 25XPKlAygG9YlZbK7YcCQSmwc+GxZoubTqNGHUYPmAs=
Subject key identifier: BD:7B:EA:BD:BC:B9:DF:D8:9F:76:45:C9:9D:45:C1:84:85:11:5F:38
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 01976F62AD1BFC47B38FA5008FCCF0E65441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 17:00:27 +0000
Manifest this update: Sat 14 Jun 2025 17:00:27 +0000
Manifest next update: Sun 15 Jun 2025 17:00:27 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: tcJt6d3xJcfP1zWNBB8iIIMjXNdcR0/Ngl2h0zu+0BI=)
2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ad:1b:fc:47:b3:8f:a5:00:8f:cc:f0:e6:54:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jun 14 17:00:27 2025 GMT
Not After : Jun 15 17:00:27 2025 GMT
Subject: CN=bd7beabdbcb9dfd89f7645c99d45c18485115f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:ac:9e:64:4d:07:c8:be:44:84:04:df:a0:
e6:9f:f0:8a:59:48:17:e4:05:b2:05:0d:29:63:30:
e6:c2:26:c3:88:41:bd:6a:79:8b:e5:9a:04:ba:5c:
9a:41:d9:73:18:b9:84:cb:06:33:b6:a7:52:ce:39:
a9:a0:66:c7:7f:01:74:92:0f:21:14:ae:75:3e:f0:
e7:4a:09:49:9d:68:c3:12:58:bb:66:b6:a1:44:8b:
81:d3:37:f7:1a:1a:72:10:ff:db:4b:8a:f5:82:98:
b2:ef:21:05:ee:3b:41:3c:42:37:5b:2e:82:3a:15:
d4:a9:b1:ec:08:f0:02:5a:1d:4a:40:df:50:07:00:
c8:ae:54:e3:bd:46:0b:bc:9b:c1:69:f5:b0:fa:f0:
1e:b2:61:05:fb:75:e6:20:41:b3:f5:ce:df:76:20:
85:74:ea:a6:ec:ad:94:1b:04:b5:af:02:10:8e:53:
83:9e:99:37:86:2b:d5:d7:3f:9b:b3:58:d8:f3:df:
cc:74:74:78:b7:1b:46:ba:d8:4d:f3:8f:62:23:59:
5e:bf:92:66:4d:8c:69:1f:7e:24:be:fc:e8:f8:e4:
7a:44:87:42:a0:87:5c:70:e9:4f:a2:30:a5:59:07:
6f:c6:9a:76:9c:0d:47:91:31:ab:c2:ab:d2:52:b5:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:EA:BD:BC:B9:DF:D8:9F:76:45:C9:9D:45:C1:84:85:11:5F:38
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f8:21:d0:48:91:1d:ce:51:db:a0:e4:71:0e:75:0e:2e:d4:
98:fb:a6:22:a0:72:e9:cd:e7:00:81:ab:af:7a:e5:79:61:1d:
50:ae:06:a9:ec:c6:58:a1:ea:2f:58:bc:8f:2f:7e:22:a7:c1:
98:b6:25:ad:c3:b1:a6:dc:f3:b8:78:d0:52:91:f7:9f:2f:1a:
89:db:48:dc:6c:ee:95:a8:54:d9:8c:8d:d2:58:a6:d3:59:b0:
44:ac:75:09:ff:8f:71:9b:e7:8b:a8:e0:7a:f3:08:dc:6b:38:
56:78:74:a7:58:0a:5e:b4:60:dd:6e:34:7d:2a:b3:14:2e:98:
0a:0f:65:a1:ac:27:48:0f:0a:17:f5:90:12:af:bc:c5:c8:57:
c7:03:b3:df:e6:4f:a5:fc:4e:94:13:84:65:94:e4:a4:c6:b2:
6c:93:28:ec:ea:f7:58:d2:71:7e:b6:69:fa:a7:f9:59:e7:3f:
82:5f:e4:07:82:5d:aa:59:f4:02:44:d5:f0:5c:cb:1b:54:5f:
ec:11:11:5a:2b:b8:54:25:52:41:bc:74:a1:17:12:e9:ab:1b:
98:c0:fb:ff:bd:15:94:db:7c:2c:bd:0d:db:69:bb:55:85:5c:
1c:9d:3b:11:ca:7f:da:f8:88:16:0e:05:7c:21:db:ae:18:2f:
a4:9a:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:49 2025 by rpki-client