Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: GSjd7fwQSmO6LEyOVvggExyN91mE3vdhjDOrMb5JAXg=
Subject key identifier: 28:36:47:BC:4F:72:6C:AB:89:A9:BE:15:D6:E8:56:EE:18:67:7C:28
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 01984B5436DC4860C946207FE8A2CD9D6646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:01:06 +0000
Manifest this update: Sun 27 Jul 2025 10:01:06 +0000
Manifest next update: Mon 28 Jul 2025 10:01:06 +0000
Files and hashes: 1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: yusynIcub9hmCa9BssnR+EyT3Tb7cimnxYtFZ7ULbxQ=)
2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:36:dc:48:60:c9:46:20:7f:e8:a2:cd:9d:66:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Jul 27 10:01:06 2025 GMT
Not After : Jul 28 10:01:06 2025 GMT
Subject: CN=283647bc4f726cab89a9be15d6e856ee18677c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:36:d0:df:11:1c:31:bd:32:2a:a2:3b:69:
6c:a2:d0:75:51:ee:b5:14:09:ff:1e:b0:80:44:80:
af:11:8c:1b:73:35:5c:62:d9:7e:80:f1:10:80:92:
8d:bf:bb:4d:93:99:92:48:5d:aa:d8:ef:1d:06:45:
11:83:30:a1:0d:e8:1d:05:95:1c:9e:64:d6:83:01:
6f:06:6f:d3:c2:a2:73:d1:87:ea:b3:29:c9:b4:6c:
d7:5a:2b:fa:0a:bd:81:33:ac:71:2d:9c:3c:52:61:
f5:c6:11:c6:ac:bc:e8:2e:b6:ae:c9:e0:60:6e:70:
43:02:f6:31:6a:6e:f8:bd:10:c2:63:29:08:85:4e:
76:0f:f8:52:97:f4:14:15:a3:75:5e:c0:20:1f:a9:
7d:2d:c2:c2:9b:45:fd:9d:40:86:f3:bd:59:fa:b4:
b2:59:a4:33:8b:ed:b2:3b:fe:9b:bf:de:3f:a8:35:
ca:b9:86:7b:0d:02:00:af:f4:e9:a8:8b:91:3a:b6:
78:fd:f8:59:47:d2:50:d4:58:ba:15:1f:d9:4f:de:
38:e1:35:b8:d8:02:85:18:b0:5e:9e:4f:97:3d:3b:
b8:55:21:0e:56:71:7d:d4:ce:3b:64:f2:16:7a:76:
68:ed:26:77:f0:7a:1b:7b:a5:5e:ca:e2:8b:1b:6a:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:36:47:BC:4F:72:6C:AB:89:A9:BE:15:D6:E8:56:EE:18:67:7C:28
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:40:54:58:fa:d0:5a:05:44:be:a7:91:d3:97:d8:4e:99:9d:
d9:84:fa:c5:15:66:29:82:6f:8a:9b:ca:18:0c:9e:e4:ba:42:
3f:de:7f:89:44:07:85:c5:1f:c1:a6:62:76:44:fc:a3:11:0c:
5a:88:25:00:d9:07:62:da:cd:94:00:b8:1b:3c:30:a0:90:3c:
9f:85:06:76:73:9f:bb:95:7a:90:4d:ef:eb:76:5f:3e:e1:31:
a0:9f:c7:dd:28:5a:72:53:95:13:a3:80:03:61:3b:4b:0e:a2:
a1:b8:3f:8b:7c:df:e3:6d:3f:f5:b1:aa:39:b0:5b:3f:03:9a:
71:62:94:4c:43:f9:09:4c:fa:44:a3:2d:dd:86:85:82:cb:3c:
60:eb:da:67:41:3b:96:d8:9e:71:23:2e:fd:56:9a:a3:a5:67:
53:1c:4c:b3:3f:8f:3d:48:02:91:a3:2e:40:58:30:1b:0e:b4:
7f:f5:79:57:5f:97:34:9b:48:09:51:cc:c5:a0:05:4e:9d:8a:
e1:74:55:82:3a:07:66:fc:58:f3:3c:12:ee:19:b1:eb:33:47:
37:33:11:dc:ad:31:8a:a1:01:78:97:d8:22:59:ce:48:d2:45:
e9:0e:15:e3:15:17:7d:7a:fd:71:c4:db:e2:c3:bf:c2:46:b6:
ba:bf:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:17:28 2025 by rpki-client