Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: Qk2LquGJ2L3vgZLsOAQpt59Chcb64zl36N5uz9h4j7g=
Subject key identifier: 67:50:5A:B8:46:BF:03:40:D3:2B:AA:1C:57:E2:D9:BF:A6:2A:63:15
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0197462FC948B237B9B1B7FF42800B2BFA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 0F66
Signing time: Fri 06 Jun 2025 17:00:26 +0000
Manifest this update: Fri 06 Jun 2025 17:00:26 +0000
Manifest next update: Sat 07 Jun 2025 17:00:26 +0000
Files and hashes: 1: BlZTyn453CV0yZnKwe_T35RBLj8.roa (hash: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=)
2: UDoseI4zszDcDoPnMdfmZguRd1g.roa (hash: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: TaerRXJUKoAXCyyzzdBr8BGA5EesI6pzHpte0XlYEf8=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
9: saRTVdpqQA0OCzsMYir3B6BlFes.roa (hash: nWaisSWXPPt/Ku1COahUOFAKdzpunAhgMbmaca4maXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:c9:48:b2:37:b9:b1:b7:ff:42:80:0b:2b:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 6 17:00:26 2025 GMT
Not After : Jun 7 17:00:26 2025 GMT
Subject: CN=67505ab846bf0340d32baa1c57e2d9bfa62a6315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:e2:b9:36:c5:52:5b:af:26:4f:9d:bb:9d:
e4:9b:05:03:78:30:99:8c:25:a2:ed:c9:a6:08:e7:
da:ce:53:a2:22:1d:66:04:8a:82:13:bd:79:a6:ae:
20:f0:d2:26:b3:07:4d:c3:2d:63:a6:31:d1:30:66:
88:df:cc:5f:29:20:c2:87:4c:76:14:5c:bd:11:b4:
89:b2:63:73:97:a3:14:22:ca:e0:b3:73:2a:36:33:
dc:44:e0:2f:80:93:5e:a8:f8:39:73:c1:54:24:13:
4a:63:a6:b3:ba:44:de:bf:eb:a3:65:3e:64:54:2e:
ce:b2:a6:34:13:9e:2f:bd:1b:1f:0c:95:d5:bd:c6:
7d:8e:aa:38:16:3a:98:23:d6:39:79:c0:fd:f4:5d:
0f:db:74:6a:56:37:3a:81:de:ca:65:b1:ab:10:42:
2a:0e:9a:11:6b:6d:0b:63:db:47:20:e4:e7:ed:91:
2c:53:4e:2d:f7:32:40:53:b5:eb:f8:c5:47:90:bd:
ca:85:06:b1:f4:17:86:8e:75:75:a7:ef:ef:44:f6:
d2:ef:a2:7f:31:bd:88:cc:ec:f2:41:13:ac:d8:13:
fb:71:0c:07:39:65:8e:2e:0c:06:2f:40:0c:df:f9:
4f:05:af:5a:d2:56:fb:19:5b:d2:44:5c:15:d0:51:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:50:5A:B8:46:BF:03:40:D3:2B:AA:1C:57:E2:D9:BF:A6:2A:63:15
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:ac:a0:12:23:f2:d2:55:6c:34:a3:4f:43:09:72:f5:fe:
45:bb:47:76:57:01:af:b3:91:a3:a4:9b:c9:14:54:a9:24:14:
3a:0d:84:9b:3b:bd:d7:d8:a8:c5:ef:d9:ba:59:ab:b0:3d:87:
18:39:3c:97:98:da:70:e0:14:cf:7c:58:84:3f:3a:06:d6:6e:
18:74:62:c4:63:86:20:36:fd:1f:c1:36:1c:19:e4:6e:dc:1f:
4a:cc:b1:cd:f9:3a:a1:5e:97:b6:f0:23:5f:1f:ea:fa:92:7d:
a9:c1:8f:d4:17:f6:19:90:ba:25:62:53:0b:4d:15:30:49:4b:
fe:63:a4:09:c0:25:72:ea:32:04:6e:49:f7:f7:24:29:ba:66:
8c:4e:08:da:0b:9b:8c:8c:c9:30:67:2e:4a:31:05:64:de:58:
6d:7b:31:35:95:54:ff:85:e4:56:92:22:84:15:7f:c1:72:87:
41:fd:56:56:14:1e:4b:62:d0:f3:85:5a:18:15:61:a3:37:b5:
77:f9:56:33:5d:58:76:95:a2:fa:e2:76:71:1b:a5:ac:3e:53:
e0:9a:05:76:87:51:72:cb:8e:35:61:c7:4c:7d:41:7f:29:a9:
1d:6f:41:a3:1a:a4:51:6c:8b:01:da:34:aa:3b:36:36:9d:a4:
ee:8b:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:32:43 2025 by rpki-client