Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier: B1eJ/48rt9GN8m5hqywRfpjhZaVmyNaz9gNkvZF/ebA=
Subject key identifier: 2C:67:BA:33:FF:BB:3A:B3:0F:BF:F8:03:B4:04:23:08:1D:A6:C2:8F
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 0198485349E91ABAC737284BFFF2263A0453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number: 0E68
Signing time: Sat 26 Jul 2025 20:01:14 +0000
Manifest this update: Sat 26 Jul 2025 20:01:14 +0000
Manifest next update: Sun 27 Jul 2025 20:01:14 +0000
Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: SajCNE19jtvKJN1r0vOfcbf3g+PJYNYbiYh4uPgREg4=)
2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:49:e9:1a:ba:c7:37:28:4b:ff:f2:26:3a:04:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Jul 26 20:01:14 2025 GMT
Not After : Jul 27 20:01:14 2025 GMT
Subject: CN=2c67ba33ffbb3ab30fbff803b40423081da6c28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:bf:48:16:b0:af:45:a6:13:b9:b2:06:d1:
9d:e2:28:d3:a6:3d:7d:29:d0:73:4e:5f:91:fe:ad:
f2:ab:6e:aa:1c:55:c3:94:f9:f1:7f:83:d7:ca:a2:
3c:fd:8c:b4:77:47:2a:95:c8:59:ef:7e:d7:b0:af:
24:60:1e:a2:26:49:46:40:27:74:f5:6e:a3:33:ac:
2e:cf:a5:e4:b8:44:9e:d2:67:b1:62:72:20:e4:a6:
ce:db:1e:eb:88:ba:b8:85:77:a4:45:ae:f2:6d:95:
6d:ad:a7:03:c4:65:25:bd:fe:29:50:10:6c:7c:93:
36:ca:c7:6b:e0:a2:d6:b0:de:97:22:d0:b7:23:1c:
fa:aa:33:1d:46:08:3e:2c:a7:06:e7:e6:b1:7f:61:
60:5f:99:db:12:4d:9c:90:d7:99:30:76:06:ec:fe:
1c:10:17:2e:05:32:4c:89:99:19:63:3e:ab:03:ef:
2d:01:3c:85:a7:7f:48:e7:fb:73:d2:10:3c:d9:83:
e9:3b:e2:d4:c0:19:09:30:f1:d7:6c:f4:4b:15:47:
0d:c9:38:23:27:6d:a0:9a:b4:0a:9c:09:f6:0e:19:
a9:5c:05:2a:f3:b6:41:df:49:9d:33:65:ac:1e:a8:
7f:82:09:d3:c5:04:85:3d:da:87:15:7c:fe:90:30:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:BA:33:FF:BB:3A:B3:0F:BF:F8:03:B4:04:23:08:1D:A6:C2:8F
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f0:26:01:e0:97:c5:d1:32:b1:43:a4:42:a7:f4:b7:6d:d2:
ef:16:23:1f:c4:fe:d8:b1:6c:ef:18:ae:18:d5:df:5b:9e:5a:
89:ca:b7:76:72:38:48:35:1e:38:a2:02:63:ed:1d:3d:33:5c:
d5:74:b1:af:c0:45:72:17:81:17:86:f1:19:50:6e:ec:a9:7a:
a5:7c:dc:6d:f4:9c:62:80:1c:4d:5e:48:99:e1:ce:26:dd:29:
79:e1:8a:a8:5a:c1:e7:82:a0:35:20:c8:8a:ad:0a:46:13:af:
75:79:30:6e:08:46:7e:cb:a3:4e:9a:f5:28:e6:76:d6:5b:90:
d7:ba:23:91:cb:2e:3f:06:f1:4d:82:8e:f7:63:b5:2e:2c:6b:
b8:55:85:2c:61:f0:52:58:9b:f8:35:a5:44:01:81:a0:a9:81:
60:9c:f9:56:41:bd:4d:99:53:0c:08:ae:c7:af:d9:2a:6e:4e:
46:aa:53:c3:df:2b:d1:ca:d3:42:d9:91:fb:e5:9e:b3:7d:de:
42:4d:94:fa:00:39:e3:f7:a1:38:db:67:7f:6f:85:25:ff:cb:
4b:36:4b:7c:96:01:16:36:e0:46:39:f9:ef:d3:f4:2f:c5:8d:
de:e8:99:11:fb:70:ea:04:75:77:1c:0a:0d:9c:ed:0c:91:f4:
d9:7a:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:11 2025 by rpki-client