Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: OZ6ThTn7kjiY8vTouaEt1ws4Ipc4BXbQXVCZrOl3SPs=
Subject key identifier: B9:2D:FA:50:8A:6B:CC:86:17:0E:09:50:41:26:9C:7B:B3:E0:64:8E
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 019845889B93AF43186FC8C25C05041E0654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 01BB
Signing time: Sat 26 Jul 2025 07:00:37 +0000
Manifest this update: Sat 26 Jul 2025 07:00:37 +0000
Manifest next update: Sun 27 Jul 2025 07:00:37 +0000
Files and hashes: 1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: /SjROTr/j4AmPlAEAg935wOujSSbLHK/d0ridFrjifU=)
2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:9b:93:af:43:18:6f:c8:c2:5c:05:04:1e:06:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Jul 26 07:00:37 2025 GMT
Not After : Jul 27 07:00:37 2025 GMT
Subject: CN=b92dfa508a6bcc86170e095041269c7bb3e0648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:bf:ff:a1:4a:16:d0:9d:0d:e4:0c:b1:9d:
5d:0e:d3:a8:a9:54:ec:fd:68:c0:3c:04:90:5b:4a:
06:b1:94:f3:45:f2:98:d1:f3:75:6d:27:85:10:26:
ab:eb:5e:a3:d0:78:9c:76:60:f1:f0:45:59:58:fb:
b0:cd:85:e5:ea:51:55:57:dd:35:63:01:05:41:c9:
0b:e9:86:44:4c:5b:ee:da:ac:d5:e1:1e:96:ab:f6:
cc:41:f1:56:82:65:66:61:a9:85:ce:f0:22:3c:2b:
7c:16:54:52:a2:95:0f:96:87:df:fd:60:68:58:9f:
66:33:c1:7a:77:5f:a2:04:39:96:62:f6:a5:22:68:
c3:1f:13:89:20:46:09:66:45:b7:6e:30:90:0b:24:
2a:f5:1f:07:2e:7a:0d:af:f4:d2:96:e5:f3:3e:ba:
d1:61:3f:61:46:ea:d7:c2:9b:2e:a2:5c:c3:3f:63:
a3:44:af:60:93:96:f7:fd:01:2c:3c:9b:b6:2e:68:
86:05:70:e6:64:b3:4a:b6:c8:ce:c5:03:38:42:2b:
00:fb:e5:7a:b4:6b:7c:8d:51:13:c5:a4:31:51:2e:
84:ce:af:39:5f:e3:90:ae:bc:88:77:56:9a:24:05:
52:5e:d0:7a:79:e0:b9:97:27:1d:6b:39:b0:71:35:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:FA:50:8A:6B:CC:86:17:0E:09:50:41:26:9C:7B:B3:E0:64:8E
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2c:1f:10:71:70:78:01:cc:32:f0:60:b7:77:cf:fc:67:8d:
ea:3c:15:52:72:fc:76:47:73:10:17:b7:bc:97:ca:98:22:70:
e9:e6:58:e0:42:e5:29:be:64:58:87:08:db:08:16:a6:e1:01:
69:3f:1b:4e:a1:f7:c7:94:47:a2:fd:c9:b7:e5:75:33:92:23:
27:4f:d4:d3:77:d4:47:ea:05:7c:a1:45:c1:ed:ab:5e:25:18:
72:c4:23:2e:d5:50:08:d7:bc:bc:11:72:ac:83:29:10:c9:c3:
58:e2:29:f9:2a:fe:f4:d7:fc:cf:92:fc:3b:d3:0b:fe:8e:63:
47:45:65:19:c4:32:d3:9b:60:a1:d5:cf:99:cc:84:5b:ff:95:
00:91:a9:44:5b:52:35:af:54:8e:69:0d:48:be:89:3f:f3:21:
5e:a2:7a:1d:5e:10:63:16:60:5b:c9:46:77:f6:a4:5f:b6:1e:
85:52:8b:ad:cd:24:60:bd:9f:06:3a:7d:f2:e9:15:74:77:4b:
6b:03:ab:a0:23:57:03:5f:e4:de:ee:53:15:ef:e8:dc:81:8b:
49:b0:0e:39:01:17:60:ab:63:ee:8b:a5:1a:71:9f:09:ad:b7:
58:ea:2c:80:e3:6e:28:c4:56:4c:d1:4b:7b:55:83:9b:e3:5f:
c0:d3:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:58:15 2025 by rpki-client