Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: /NCWLeL0WmbVhRTFwK3cBJHYSbfl+Ncv6lwQcFevYDM=
Subject key identifier: 46:AF:0E:B6:DB:91:7A:E9:C8:A5:EE:91:1F:2F:5B:A4:23:23:FB:32
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 019826A259404A7A2B61EB5460C073883191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 07B3
Signing time: Sun 20 Jul 2025 07:00:30 +0000
Manifest this update: Sun 20 Jul 2025 07:00:30 +0000
Manifest next update: Mon 21 Jul 2025 07:00:30 +0000
Files and hashes: 1: Abi5pH7cUtL8rs9zrgavPjQRxnI.roa (hash: 7ApJuHPbwwQ8ZW2QLt3m10DbTaxlvMl9pvX3Esbaw0s=)
2: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: BBGulIczdr8blRg0gpqm+5moGJtNKnm08WoZi2ik/Bc=)
3: rub7QgF_m8ViZ2zh8TifmWsv33k.roa (hash: D3MkLEEj8OyFp5olxebWk6+e8+j7slJr87cSCNkpbeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a2:59:40:4a:7a:2b:61:eb:54:60:c0:73:88:31:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Jul 20 07:00:30 2025 GMT
Not After : Jul 21 07:00:30 2025 GMT
Subject: CN=46af0eb6db917ae9c8a5ee911f2f5ba42323fb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:c3:d3:65:b7:f1:fc:03:26:22:6b:f0:23:
29:a1:c6:42:67:0a:28:17:c6:dc:09:a9:e1:74:42:
f6:38:51:ac:24:90:2a:9f:e1:af:a6:18:af:87:97:
d6:f3:51:89:9b:ce:53:7f:70:3e:7c:25:32:2f:43:
aa:b1:df:71:e9:ca:4e:5d:f6:8a:be:c9:b5:b2:db:
27:c5:6e:1d:5a:02:d7:42:43:db:09:5c:9b:7b:fe:
88:ae:be:24:4e:ce:11:4e:bf:e0:10:42:08:09:71:
3b:b2:89:11:fc:05:69:37:70:03:9e:17:aa:18:e0:
57:64:4d:f8:ae:31:ee:46:a0:fe:e8:96:0a:59:66:
4d:d3:97:a9:34:f1:85:86:1b:b8:e7:da:ac:79:dd:
5c:55:6e:7f:87:3a:c8:32:7e:3e:e6:e1:90:21:ca:
71:c9:c5:9a:60:f3:ff:8d:97:ae:72:66:c8:f4:ec:
78:b9:e1:e5:79:af:85:b4:46:43:27:4f:fd:59:1f:
9e:a6:9a:bc:27:5b:f3:ac:20:ca:5e:86:f1:33:8d:
62:ec:c3:bf:8f:fc:d7:99:90:1d:71:0a:bc:fb:eb:
10:11:28:e0:0d:fd:68:8e:09:50:28:28:30:0d:7f:
85:ab:a3:94:ea:4e:12:12:ba:05:fd:bc:d2:b6:74:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:0E:B6:DB:91:7A:E9:C8:A5:EE:91:1F:2F:5B:A4:23:23:FB:32
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4b:44:f4:27:de:ea:d1:04:3d:bd:c9:ed:ab:44:d4:da:8e:
6a:87:d6:79:8d:23:79:3a:ba:3d:7d:08:90:6c:5e:90:f3:74:
0d:bd:da:3f:cb:95:28:9e:2a:c3:c1:4e:19:a1:56:03:ba:72:
18:ab:a0:9d:a6:64:59:cb:5d:e6:09:4a:aa:7a:9b:d8:69:d1:
a2:8b:71:1a:33:42:5d:9e:8e:6e:ab:73:30:53:01:43:cd:ff:
3b:81:46:34:fa:92:4e:6c:a7:11:92:62:ba:f0:f7:6c:fd:d0:
df:7a:87:79:d2:10:d4:2f:15:53:ad:23:47:d7:1c:b3:55:9c:
c2:97:64:c4:47:34:19:cf:e3:13:cd:e0:9a:b5:c4:0c:5b:43:
fd:91:ba:e7:2f:98:44:e5:a0:a3:7f:e3:bc:fc:7c:d1:d1:02:
da:86:57:6f:1e:10:f6:0f:b8:82:73:4d:c6:15:bb:2d:ff:1b:
98:7a:5e:88:7d:24:2a:7e:5a:3e:b9:2e:a9:a2:40:ca:16:e5:
c7:61:25:f8:5a:55:35:cf:b5:e4:34:6b:d2:b3:f5:2b:d9:b9:
b6:d5:c3:6f:6e:cc:83:11:d5:af:cb:42:37:83:e7:51:50:2c:
dc:be:5e:0b:bc:a0:3e:46:15:01:71:51:b6:8a:3d:a0:d4:83:
57:6b:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:13 2025 by rpki-client