Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: JIzxm/RQp1OrvxOLlonmtvbfosSKvtsuL2s6fPicWRc=
Subject key identifier: ED:3E:14:DA:C6:AD:3D:28:EA:DD:4F:40:73:30:E8:B4:54:B5:D2:2E
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 01974BFB6ADFE70244262EA4C1A423E82BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 20:00:57 +0000
Manifest this update: Sat 07 Jun 2025 20:00:57 +0000
Manifest next update: Sun 08 Jun 2025 20:00:57 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: ulOZ/lHBP5OV8JZdgjEFqdesW5yLqXe2RPcNGUr+IlE=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:6a:df:e7:02:44:26:2e:a4:c1:a4:23:e8:2b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Jun 7 20:00:57 2025 GMT
Not After : Jun 8 20:00:57 2025 GMT
Subject: CN=ed3e14dac6ad3d28eadd4f407330e8b454b5d22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:b4:68:98:53:ad:55:f7:cf:2e:d7:3a:f0:
51:f7:de:c5:04:29:62:51:c5:2d:5a:76:8e:de:26:
c6:b9:74:62:90:08:e5:67:3a:ee:8d:25:ae:ca:d8:
f9:0d:44:2e:7a:bf:98:19:31:10:ec:0f:2e:e8:96:
4c:87:de:50:7b:08:f2:65:58:94:1a:b0:73:17:c7:
4a:76:fb:bc:de:5c:2f:10:15:33:92:5e:0b:96:99:
7a:0f:5f:bd:c6:53:8f:10:74:f6:44:a1:a7:90:24:
05:37:2d:38:02:a1:d7:e5:ca:f6:02:36:c2:da:a2:
64:d6:47:25:16:9d:8c:b3:63:03:80:34:4b:6a:b9:
05:6b:da:25:02:6a:37:be:b6:fd:76:79:32:6a:42:
94:c1:93:5c:4d:ed:6d:cc:b9:3e:14:f8:d9:79:41:
5b:27:03:52:bc:42:08:0c:7c:7f:55:ac:24:e6:9d:
ce:ed:72:37:41:43:6b:af:32:a3:12:2e:f7:f3:5e:
e3:c3:6e:71:94:a7:56:ea:f3:fb:8a:f9:71:88:89:
4f:b8:b4:0b:df:68:b6:d7:21:c6:64:b6:94:92:f2:
a9:9d:f8:17:dc:85:09:25:df:6a:06:b1:4d:12:a7:
8e:62:84:12:da:bf:47:15:69:6d:36:e3:1a:c6:ab:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3E:14:DA:C6:AD:3D:28:EA:DD:4F:40:73:30:E8:B4:54:B5:D2:2E
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ef:1b:1f:e0:0b:1e:1f:d7:cd:b7:12:a2:e8:07:07:2d:3b:
68:13:63:69:b4:7c:e7:19:85:75:62:2f:cd:0b:0a:cc:00:7e:
55:ca:11:6d:37:b3:5f:f5:f3:3f:18:27:10:85:f7:d7:74:a3:
9d:ca:74:5c:86:f0:93:68:5b:34:15:63:39:ac:d2:71:81:e1:
d0:a9:9b:4b:e8:c3:3b:e1:8f:d3:4b:f0:56:b0:e8:db:d3:d3:
45:f9:19:9a:3a:e1:9b:60:91:71:b8:a2:45:06:09:f5:53:8c:
99:66:42:c7:4c:d1:9d:95:f3:31:71:4e:80:0e:de:93:a6:13:
93:e2:c4:8c:f8:71:4b:54:51:3b:5a:3d:70:b4:ea:6b:e5:c7:
d3:43:48:75:74:91:c6:9f:4d:b7:30:5a:25:8d:e0:b8:8e:b4:
62:c4:0e:e6:ca:2d:26:26:68:a4:d1:b0:43:9e:f8:9f:29:1c:
e7:1c:4c:f9:b2:cd:d5:b1:a7:49:8f:5e:b7:db:9a:0b:98:2e:
87:e0:7a:e7:83:4c:12:1e:3d:6f:c2:b9:62:a1:8c:ea:6b:c5:
de:ba:dd:f6:d6:c0:de:d4:e9:25:b2:ba:48:19:c6:67:50:1f:
59:8c:f3:ee:99:d8:bf:c6:3a:2a:7c:6e:bf:ff:5c:d6:ba:d9:
63:17:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:16:12 2025 by rpki-client