Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: khq9pYckl7hvxG2wz+n/a23qQTJJ51GWQW8xzM15FZg=
Subject key identifier: 55:F9:A5:46:9D:61:DF:CD:2E:73:04:4F:46:98:CE:EF:95:ED:BB:3A
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 019847E55A3D5FD97C6BAECC732545AB4C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 06E9
Signing time: Sat 26 Jul 2025 18:01:09 +0000
Manifest this update: Sat 26 Jul 2025 18:01:09 +0000
Manifest next update: Sun 27 Jul 2025 18:01:09 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: cwURiUc6+bUMjobTsSVXjAW5NkWB3oBZHhPze5Eg5o8=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:5a:3d:5f:d9:7c:6b:ae:cc:73:25:45:ab:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Jul 26 18:01:09 2025 GMT
Not After : Jul 27 18:01:09 2025 GMT
Subject: CN=55f9a5469d61dfcd2e73044f4698ceef95edbb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:43:f3:d4:70:80:53:ba:aa:cb:04:f0:e7:
a6:51:8d:c5:a6:b9:9c:73:f7:6c:e4:f2:e3:c1:ad:
88:fc:2b:75:c3:92:2a:a3:24:83:4e:b8:8e:c8:d5:
5a:f0:56:d5:7a:66:42:35:34:8c:f5:00:de:6c:72:
3e:2f:49:58:36:fe:41:00:4c:dd:96:a9:45:03:f0:
98:4a:88:a7:aa:ed:f2:fc:ce:0e:47:15:6f:fb:4c:
e5:86:58:9f:fc:58:40:f0:19:55:d3:4d:10:2d:f9:
55:bb:e6:d9:f2:9b:45:2e:10:de:cd:75:be:cd:08:
2f:4f:93:3f:62:74:97:31:09:3b:ec:a7:84:0f:a8:
69:5c:71:b8:ae:9d:89:0a:e7:c4:ba:88:77:48:3c:
5f:cf:86:0f:56:11:30:51:1b:70:5b:1a:3b:86:31:
64:05:85:aa:ae:26:5a:64:38:82:de:27:db:1b:10:
2f:e2:16:cf:18:2b:4d:3e:f4:a8:fc:32:93:db:af:
30:a3:ae:7e:ba:60:41:30:52:10:12:8a:9f:61:0e:
0e:98:00:ed:59:4f:d5:0b:50:2c:04:90:9a:db:fe:
fd:20:8f:ba:ec:11:d9:12:bd:4f:5a:71:b1:44:b6:
0d:77:03:12:ac:43:79:79:38:61:39:42:17:97:db:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F9:A5:46:9D:61:DF:CD:2E:73:04:4F:46:98:CE:EF:95:ED:BB:3A
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:73:fc:b5:fc:c8:ee:1c:02:11:34:02:cc:53:33:d8:24:75:
a8:37:d2:ee:12:9c:94:b7:2b:7c:a8:c9:62:d5:02:eb:53:c5:
e1:7a:8e:d2:35:35:51:f6:b6:78:8c:34:75:be:db:65:d8:e2:
ca:bc:7c:ef:f2:d5:2d:a6:8a:88:1f:a2:37:cb:6e:02:08:db:
40:3b:ba:e1:43:83:a8:e5:18:05:3a:2b:83:e4:68:29:85:5f:
ac:e4:c0:47:56:0b:75:7d:94:b9:ff:c3:f6:ca:32:4c:76:63:
5c:b7:9d:79:b4:5c:58:bc:41:cb:f7:fc:01:87:d5:dd:1d:0a:
53:a6:81:89:4d:51:63:c2:38:bc:9a:a5:27:6c:07:b2:cd:0c:
83:1c:6e:f0:56:75:58:5a:d4:f8:4d:56:90:59:e6:db:db:1a:
c6:9a:c9:40:a9:9a:4b:7e:30:bb:7b:64:db:07:00:36:57:a7:
27:0b:40:32:81:3e:71:71:74:59:c0:fd:45:d4:51:8a:e9:1d:
73:b4:6c:4a:d4:a3:8c:19:7d:57:a7:cd:33:b7:d6:82:9b:1b:
2c:6f:26:3d:49:b0:f2:61:b7:58:cb:0e:7c:d8:b2:4c:eb:c4:
0e:52:3c:f3:9f:21:72:06:79:b2:3a:5e:e6:ba:77:6e:ba:3a:
a2:8b:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:11:33 2025 by rpki-client