
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: AjUyhmCTUJtrs9L3g6YzkUifyAG6L+A4bkQA8VCrVOg=
Subject key identifier: 01:5F:C1:84:93:51:8A:1E:18:04:0C:9A:88:43:FD:7B:E6:6A:DC:9B
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 0197488C76F9F64FFC05C8F33687CC1AE1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0A37
Signing time: Sat 07 Jun 2025 04:00:54 +0000
Manifest this update: Sat 07 Jun 2025 04:00:54 +0000
Manifest next update: Sun 08 Jun 2025 04:00:54 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: tS3OO4Mhh/9o+SIqbRLdf6FxLo6Un9eS3jV/6Ff5aq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:76:f9:f6:4f:fc:05:c8:f3:36:87:cc:1a:e1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Jun 7 04:00:54 2025 GMT
Not After : Jun 8 04:00:54 2025 GMT
Subject: CN=015fc18493518a1e18040c9a8843fd7be66adc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:f1:24:4f:cc:f8:31:58:2a:a3:cb:90:83:
c7:6c:53:bb:a6:0c:1f:84:8e:32:d2:fe:c1:bc:e9:
ed:90:ed:9a:b7:55:0b:68:cf:84:f0:55:22:ed:1b:
ac:ca:86:29:89:ae:3d:db:6c:76:93:00:e4:e7:ce:
af:25:7a:04:45:19:a5:81:c7:d0:6a:26:d8:2f:52:
8d:fe:01:2a:9a:11:d1:fe:fc:a1:0c:d4:39:fb:e7:
85:fb:27:65:9b:aa:53:93:50:ac:cb:97:e2:f9:ec:
88:2a:b7:b1:86:5a:22:22:61:74:53:8e:d0:0a:2a:
41:3a:97:bd:20:00:ba:52:00:7c:69:7e:90:34:4f:
76:81:64:d4:d7:c9:4e:04:7d:e2:c8:8d:97:18:b1:
bf:df:cc:2a:77:84:f0:52:92:9a:ed:9e:e9:15:4b:
71:53:34:67:4e:28:91:30:56:21:51:65:12:aa:35:
e8:ae:5a:96:4c:49:80:c7:54:3a:8d:44:d3:97:45:
16:69:7b:f2:dd:98:69:8f:2e:34:77:9a:ed:b0:07:
d8:3c:97:9a:a6:b8:c0:40:0e:ef:e1:38:59:70:99:
60:2c:ff:9a:c6:b8:33:47:18:0c:3d:31:ed:83:42:
f8:79:e1:9b:29:fc:c4:d9:1a:d7:07:34:fe:2c:99:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:C1:84:93:51:8A:1E:18:04:0C:9A:88:43:FD:7B:E6:6A:DC:9B
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:eb:ab:d2:67:f6:12:92:65:6c:d5:62:12:2f:f8:d9:93:80:
ba:f1:3a:3e:98:91:46:64:d8:4b:07:88:92:c0:53:6b:58:7e:
2a:37:07:6b:d0:0a:5e:13:48:26:ba:43:f4:2c:83:55:3a:96:
bf:00:2f:fc:42:cd:14:11:0b:0e:68:b1:3d:72:06:a1:e5:55:
5b:9d:1a:aa:39:10:b6:0c:eb:02:66:f6:d8:47:3b:47:ad:53:
18:89:d1:6a:73:91:63:5f:4d:78:81:26:59:33:f0:2e:98:62:
37:2a:af:d4:d3:36:98:23:62:72:c1:90:a6:08:f3:7b:79:7c:
76:ef:09:ee:8c:de:c3:16:8b:74:c4:bb:aa:9d:7b:3a:b2:1c:
b4:cb:29:f6:08:21:d0:45:21:f8:b7:cb:52:72:5c:1e:c1:2b:
fe:46:51:eb:26:b7:11:df:42:5e:f0:be:9f:69:3b:ac:44:ee:
be:1a:2b:76:78:62:e4:1f:e5:f3:f2:e1:cf:d5:60:92:12:b1:
2b:bd:1f:f8:ed:33:fe:8e:6b:2e:49:66:3b:b6:e9:3a:a5:0f:
73:45:e6:63:a8:22:44:0d:1c:3c:b7:a0:e8:30:ed:02:8c:85:
36:de:55:f0:da:3f:c0:b3:c0:10:a3:cc:84:d3:96:f0:1d:23:
ce:40:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:07 2025 by rpki-client