Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: 5N6XOFQPHTVlpAFhd63lxhDoEupI0Ce1VcyK25F7x6k=
Subject key identifier: 8B:9B:7E:6C:83:CC:46:E2:FC:5B:C6:A8:6D:58:00:91:4E:70:B3:A8
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 01982747AC8C00636C777383EA77984F2C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1583
Signing time: Sun 20 Jul 2025 10:01:05 +0000
Manifest this update: Sun 20 Jul 2025 10:01:05 +0000
Manifest next update: Mon 21 Jul 2025 10:01:05 +0000
Files and hashes: 1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: 8Br9r2Mm25MHtrR2/8/oCki5AITjs/xUZAcgN3ZXLqg=)
2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:ac:8c:00:63:6c:77:73:83:ea:77:98:4f:2c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jul 20 10:01:05 2025 GMT
Not After : Jul 21 10:01:05 2025 GMT
Subject: CN=8b9b7e6c83cc46e2fc5bc6a86d5800914e70b3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:7e:ee:81:3d:f0:2c:d0:90:37:57:de:f6:
84:c0:b5:36:19:b8:8c:cb:bb:10:a8:77:90:65:49:
74:82:6d:99:08:a3:da:cd:a5:e1:f5:d2:9b:4f:18:
42:86:bf:54:3d:25:82:3f:78:e7:11:8a:ac:53:26:
0c:43:5f:48:78:ba:0a:50:c9:5c:57:e1:15:58:af:
21:c1:75:97:ae:74:52:e3:eb:65:2e:49:4e:e4:77:
b3:44:0a:27:61:1f:74:64:0a:1e:e2:f0:3b:74:c9:
ef:1e:d9:6f:e3:37:07:e8:40:94:2f:f6:32:3b:39:
99:38:79:2d:52:07:04:be:c2:88:77:93:0e:69:af:
e7:13:9c:cd:1c:c4:86:21:61:a6:b8:2f:f4:05:5b:
ef:34:b1:ce:57:00:5e:28:b0:ef:7a:e6:aa:2a:cd:
94:eb:e2:3c:85:6c:35:f6:d6:d9:a1:e8:61:7d:a5:
a2:a5:05:da:72:c6:22:4d:ce:8e:14:ad:eb:0c:7a:
11:af:e3:6b:c4:43:c1:16:0d:7e:45:b0:81:c7:39:
5a:03:a2:99:c4:dd:47:a4:44:a4:b8:ae:52:6e:2e:
49:cd:75:51:9f:51:77:73:af:90:ad:b4:11:af:24:
3d:dd:d6:52:51:45:b0:18:11:f9:dd:9f:af:a0:99:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:7E:6C:83:CC:46:E2:FC:5B:C6:A8:6D:58:00:91:4E:70:B3:A8
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:12:5c:9e:e0:39:0b:06:dc:50:54:d9:d6:fa:ca:41:98:
05:2a:24:57:ae:3f:50:4c:ca:d6:7a:74:c5:73:2a:58:ac:7e:
0c:ee:09:b1:e4:05:3c:02:ac:12:52:dc:be:2d:7c:67:41:d4:
f7:5b:92:d0:c9:4a:46:07:28:c7:42:83:4d:45:9b:ae:db:aa:
57:90:91:aa:a4:74:d8:15:39:c9:45:47:1a:09:17:04:ff:22:
ba:20:ba:e2:d3:38:52:7d:47:9a:69:d8:34:22:1c:84:c0:9e:
0b:8c:b0:7e:ff:34:e6:8a:21:f4:6d:95:60:7a:7a:f9:6f:6e:
85:f4:85:6d:e8:43:49:87:51:42:13:46:fe:9c:ca:e3:a0:bd:
10:54:75:ed:a6:61:1d:3e:2f:68:0d:dc:ee:28:57:59:da:9b:
41:2a:23:53:a8:59:12:19:1c:6a:6c:a2:8a:a4:ac:a9:0e:f3:
c9:21:17:3d:0a:db:a9:1c:25:fd:9a:d4:90:1e:a6:f7:23:66:
c7:c6:86:27:9f:81:78:48:21:cd:10:bb:57:96:b2:cf:fd:d2:
8a:20:c1:77:68:26:1c:e9:2d:5e:8d:76:01:e2:98:ad:48:f2:
4c:9c:1c:5d:f6:36:43:37:9b:42:96:fe:ca:cf:09:0f:9e:47:
f7:4a:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:30 2025 by rpki-client