Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: Xg06Z82bxiCZxoTsfaOuTw8DMd6cprV4Q6Or1Kq1TiM=
Subject key identifier: 24:DF:6E:CC:E9:36:7A:20:C9:4D:65:24:0A:19:70:9D:FB:B8:66:63
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 01974140B827090A7A368E230B20441034BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 157F
Signing time: Thu 05 Jun 2025 18:00:49 +0000
Manifest this update: Thu 05 Jun 2025 18:00:49 +0000
Manifest next update: Fri 06 Jun 2025 18:00:49 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: 4T5fDQ1LuppFxl+u/S2wvu5rherPVaWiaXXXyjr7Kkk=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:40:b8:27:09:0a:7a:36:8e:23:0b:20:44:10:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jun 5 18:00:49 2025 GMT
Not After : Jun 6 18:00:49 2025 GMT
Subject: CN=24df6ecce9367a20c94d65240a19709dfbb86663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:da:18:7d:06:cc:98:fe:30:6c:f3:19:61:
9d:d3:37:78:b7:6d:03:a5:fb:9e:f5:70:d1:5d:91:
ad:c9:0d:f9:2e:fe:29:a8:5f:d1:ed:a7:4b:16:59:
50:be:51:3d:fa:d6:6e:88:c5:ac:c7:a9:a4:35:5c:
5c:07:1c:57:f1:fc:53:1b:c6:43:ec:c6:f5:97:1a:
f5:9b:b3:31:19:b4:05:6f:f8:3b:47:29:71:6e:09:
61:ac:fd:03:a8:13:0a:8a:74:12:53:62:aa:d9:47:
b3:f5:2d:d9:63:b7:80:c2:c7:a5:4d:c4:8f:db:81:
36:5e:c5:d0:48:0f:06:eb:b5:db:6a:a5:a2:72:5c:
1e:33:a9:8f:ea:a3:ba:c8:51:f9:46:34:b6:6b:8c:
93:07:94:a1:eb:6c:66:36:ce:70:07:79:3f:a7:3e:
8d:c7:8f:ad:cc:66:9e:a7:d1:32:6f:e2:fe:d2:90:
c0:af:47:1a:54:d3:ba:9c:e8:5f:9d:fc:e0:9a:45:
be:69:ce:b8:b5:f7:0b:f0:fb:28:73:37:8c:8e:91:
0e:8a:e0:b3:89:2d:32:35:bb:2a:02:75:68:81:b1:
b8:2b:28:06:4c:2b:0d:ec:dd:f9:ee:f1:d3:c0:9e:
81:fd:4b:e3:ca:23:f3:7f:44:64:77:5d:9e:fb:21:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DF:6E:CC:E9:36:7A:20:C9:4D:65:24:0A:19:70:9D:FB:B8:66:63
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ed:5e:01:4e:fa:0d:ea:d1:28:46:75:42:a9:70:12:98:9e:
17:f1:d9:3e:6a:87:54:c8:32:a7:20:54:59:11:33:d2:f4:75:
15:5a:1d:fe:75:eb:e1:a5:8a:91:b3:73:57:d0:2d:b2:12:6a:
6c:eb:6b:51:9a:a3:b6:d6:d5:46:ab:24:4f:60:da:5e:4a:22:
59:21:d9:21:5b:14:3f:8a:a2:13:3e:13:92:ce:14:cb:89:ef:
44:27:29:0c:d7:09:b5:20:38:38:c2:4a:10:4e:55:84:6a:2e:
6a:88:69:ae:d6:a9:ed:49:0d:11:17:e7:cb:5d:fe:72:9a:45:
12:7b:68:c5:2e:1f:8b:4c:0e:0e:9a:e0:12:8a:25:8e:fd:f3:
fe:aa:e4:56:73:cb:09:4b:94:2b:d7:10:64:c9:2d:4c:45:70:
cb:cb:d2:cf:9c:02:db:2b:1c:99:3d:24:03:cc:cb:b9:5b:38:
24:55:d5:31:39:8e:c8:ad:95:08:74:39:5e:f0:f7:fb:71:1c:
e3:14:a9:3c:02:8f:2d:18:ad:1a:58:9f:8a:d3:46:f5:66:ce:
75:98:fc:ef:dc:50:cb:cf:7e:ad:df:0d:e7:78:5d:bf:28:1c:
73:ca:e2:9f:d2:86:f7:d7:6e:0e:ee:17:9c:f9:32:73:ef:25:
12:3c:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:05:48 2025 by rpki-client