Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: Tm/WTIqgOmJiHd3odBTQLyzm3UWkQ7NxmDs+qgh68no=
Subject key identifier: CE:13:A4:D5:E6:70:A7:F6:74:0B:74:7B:48:73:B8:EF:4F:BA:DB:E9
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 0197481E36B13E0AEAA35F6923D4EA54239D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 02:00:28 +0000
Manifest this update: Sat 07 Jun 2025 02:00:28 +0000
Manifest next update: Sun 08 Jun 2025 02:00:28 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: rG15hpB72tN1g7LEcId8h0KbTbfuLF8Mkj7klchO3PA=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:36:b1:3e:0a:ea:a3:5f:69:23:d4:ea:54:23:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Jun 7 02:00:28 2025 GMT
Not After : Jun 8 02:00:28 2025 GMT
Subject: CN=ce13a4d5e670a7f6740b747b4873b8ef4fbadbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:ea:5b:56:b7:f6:e9:7f:67:c4:77:89:82:
fa:73:2c:f4:1d:cf:b7:bc:f8:65:a2:04:cc:b6:fe:
27:1c:c3:10:60:ed:91:68:5f:20:79:49:af:25:52:
c9:00:35:43:2f:3c:aa:2c:ac:52:01:3d:d2:13:ef:
64:a6:ff:ad:23:dc:1e:58:21:26:30:62:2a:da:92:
89:aa:b3:a2:5a:5b:cc:79:a5:61:21:5a:59:8a:dd:
92:b8:95:be:4c:9d:f1:94:5a:96:80:77:70:af:7c:
f8:03:11:79:7e:a5:81:d4:35:d8:6d:3b:2c:88:3b:
ad:55:9a:bb:7d:d5:24:11:e7:6b:d7:71:cc:4b:8e:
bc:a4:94:b0:31:6b:bc:8e:06:4f:c6:f6:ed:1d:3f:
77:1a:51:1e:3c:6b:ae:31:7d:f7:e1:44:fa:a3:f7:
89:1f:97:dd:14:6b:5b:f0:74:f3:7f:67:18:45:ab:
f0:2b:fd:ba:a4:3e:71:f8:87:43:23:d5:24:e6:dd:
4d:d9:e9:50:ea:65:cb:f1:39:88:da:a2:be:ba:77:
be:ea:5e:90:7b:d0:e7:cf:bf:4d:cd:5b:3e:c3:5a:
af:98:40:a5:fe:0c:26:60:50:ee:63:e6:4b:25:13:
2c:eb:b3:41:b5:9b:fc:1a:18:ea:cd:e9:29:6a:9b:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:A4:D5:E6:70:A7:F6:74:0B:74:7B:48:73:B8:EF:4F:BA:DB:E9
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5f:72:cc:46:b9:45:0c:cb:36:c4:19:8c:ed:77:2b:3c:71:
a7:ca:67:43:a1:b8:5d:e2:44:e2:90:c2:db:0c:f5:fe:e8:47:
ce:ff:72:16:66:da:cc:7a:2b:de:c0:30:42:cc:b2:41:16:fb:
da:26:94:fa:36:ca:f5:36:8d:79:12:59:01:8b:1f:7f:9e:16:
61:36:6f:6b:26:30:ee:54:a9:8d:84:9d:fc:98:53:46:cf:97:
c4:ea:a6:14:ed:70:c8:4d:81:54:3f:88:ea:be:78:05:5f:39:
37:77:3c:0c:30:ac:80:c7:9c:d4:f1:98:12:65:05:ad:6a:a1:
ee:dd:41:15:05:b7:fa:f8:ea:75:a5:b8:7a:68:4b:f7:0d:83:
3e:7e:c4:13:ab:5c:90:a7:89:6c:00:7e:0e:ca:56:37:77:af:
da:2b:4a:11:5a:51:d9:b1:66:35:81:62:bd:85:9e:30:d0:63:
8c:74:33:34:37:48:d0:f5:b9:0d:e2:f9:6e:32:6e:ce:c2:eb:
c6:f0:1f:aa:4e:fa:0a:bc:d0:0e:d8:f4:33:98:42:35:08:25:
4e:bc:84:02:f0:32:da:b9:a7:46:c1:d1:3b:14:e4:63:51:39:
77:e7:0e:2a:dc:f8:6c:2e:48:a8:2f:df:aa:59:9c:8b:c2:0f:
0e:47:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:57 2025 by rpki-client