Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: gCmgpyd3w1/NajTxnmW1IVNqKpzvyBDxsFrnrc/DyfM=
Subject key identifier: E1:9E:82:43:A6:7A:2E:A3:E1:FA:FF:F8:6C:3A:29:A1:F3:8F:9B:16
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019855329737F1949B336C36EDC9BE7D6D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 08:00:35 +0000
Manifest this update: Tue 29 Jul 2025 08:00:35 +0000
Manifest next update: Wed 30 Jul 2025 08:00:35 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: cMbX9vEdGPZ9OEfaMK5KLNbyMq6xNp71RIAkhanXodE=)
2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:97:37:f1:94:9b:33:6c:36:ed:c9:be:7d:6d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jul 29 08:00:35 2025 GMT
Not After : Jul 30 08:00:35 2025 GMT
Subject: CN=e19e8243a67a2ea3e1fafff86c3a29a1f38f9b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:38:fd:86:91:8a:b8:d0:5f:8f:14:92:d0:
65:28:07:40:ea:d3:39:c6:54:2f:01:64:a1:4d:cb:
6e:6f:9c:fa:27:81:bf:45:f5:9e:81:b0:22:d2:c0:
09:57:00:b5:da:68:7b:b2:c7:43:83:eb:aa:83:be:
e4:6d:ba:b9:0e:73:01:99:e8:0e:2c:91:1e:e8:df:
38:e2:f3:21:5d:54:88:0c:fc:3c:42:c6:92:03:c0:
b9:d4:a7:08:4d:d0:61:8c:7f:0b:e0:c3:ae:fd:a0:
d8:c8:9e:84:3d:16:07:b1:9d:b1:48:f5:48:9d:95:
a9:10:bc:7b:02:e8:91:42:60:39:ca:98:89:3e:be:
b0:aa:2c:a9:fb:6e:6e:73:86:cf:9f:1f:3a:48:71:
00:aa:3d:1e:df:93:14:f4:e3:be:df:a1:a1:32:8c:
b5:8c:c7:89:8d:08:f6:84:26:bb:53:8c:3e:6e:be:
e1:4b:78:c4:f3:ae:10:db:58:0f:29:78:48:94:ee:
fc:42:a1:c2:b7:c9:07:da:43:c2:02:56:0e:8f:78:
6f:0e:8d:5e:04:f4:e4:98:13:29:0b:f0:23:20:e7:
43:e0:96:e9:9f:23:2c:5a:43:26:a5:92:1d:de:05:
93:dd:cd:86:c1:a9:9a:d9:fe:84:41:cc:45:41:31:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9E:82:43:A6:7A:2E:A3:E1:FA:FF:F8:6C:3A:29:A1:F3:8F:9B:16
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:17:1c:e8:b9:84:8c:8b:a5:8a:a3:be:aa:ee:1b:21:a0:87:
67:06:6d:27:7a:68:70:fa:01:0b:ff:84:0d:14:d4:47:59:d1:
45:a6:91:1b:b7:4b:c6:4a:5f:e7:ee:91:f3:29:21:f3:c3:1c:
1e:54:c9:37:86:40:13:a2:4d:f7:7c:99:0a:24:a3:01:61:28:
b9:43:77:ae:4d:1c:93:17:f2:60:82:1c:ec:1e:90:74:37:77:
66:fc:50:4b:93:69:09:e9:dc:f9:aa:e4:3c:5d:07:7b:e9:b1:
d5:9c:19:bb:45:ed:4d:f5:38:84:e8:fc:b5:00:3d:41:a9:ea:
a0:8f:e5:0e:f0:13:cd:9a:e1:b3:b1:f1:f9:18:eb:f0:7c:e8:
8e:88:bd:0d:8d:fd:f8:7f:2b:be:f5:00:35:b4:db:8f:2a:81:
88:9d:82:3c:a3:7f:81:df:12:7a:21:6c:ee:c6:ee:b5:f1:43:
9c:44:68:b4:8e:da:d4:33:99:c8:da:41:40:24:ac:b5:9a:2e:
f1:62:d1:58:42:46:b3:ad:c0:ba:26:f8:16:8f:f6:5b:b6:4e:
bb:35:9b:e0:cf:10:df:41:a2:bf:99:18:95:f9:ad:66:52:3c:
40:48:84:85:82:86:bc:d2:e4:8e:81:20:88:ee:94:91:99:80:
66:9c:72:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:37:09 2025 by rpki-client