Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: wXG+b+iluedCQOIAsD9ql7cLhrShaIZdv202f/IKQIs=
Subject key identifier: B6:DC:4E:32:54:1E:9E:52:B5:92:34:56:A4:A6:26:15:11:AF:E0:5E
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 0197470BD30BB62F9BAE8B0BA04A51F94618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 03AE
Signing time: Fri 06 Jun 2025 21:00:46 +0000
Manifest this update: Fri 06 Jun 2025 21:00:46 +0000
Manifest next update: Sat 07 Jun 2025 21:00:46 +0000
Files and hashes: 1: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: 9iEtkPWBWr4vgWkpv7rhCQKXsaqozXg7Xl43shlQKsQ=)
2: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (hash: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:d3:0b:b6:2f:9b:ae:8b:0b:a0:4a:51:f9:46:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Jun 6 21:00:46 2025 GMT
Not After : Jun 7 21:00:46 2025 GMT
Subject: CN=b6dc4e32541e9e52b5923456a4a6261511afe05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:57:79:45:5a:fd:91:35:ec:9f:9d:42:38:
30:08:6f:17:45:f4:fc:d2:7d:c8:79:94:f5:d5:88:
f2:06:a1:cf:cc:40:50:50:f1:80:c9:ca:53:55:4f:
fc:7a:a2:13:83:e6:83:57:d7:03:af:ce:e2:62:68:
3b:39:fe:42:fd:e8:21:8e:00:39:cd:21:d1:05:42:
07:d3:bd:ea:6f:1c:29:33:d0:62:a1:7c:93:e8:aa:
64:5a:9b:60:16:66:de:0f:01:fd:49:65:1e:e4:8e:
9f:1c:40:dd:90:c8:e5:b8:74:db:44:d7:74:a5:e6:
da:cf:d0:ec:3b:2d:99:f2:c2:99:09:1b:b9:d5:9c:
7a:11:79:51:55:16:46:15:ed:eb:7a:ba:dd:49:2f:
5b:e5:8d:cd:57:4e:23:83:89:4a:36:94:07:f1:b5:
b9:a0:ee:1c:d0:a4:d2:fe:98:e9:cc:5b:70:8c:2f:
f2:9a:7a:39:29:74:f2:32:65:dd:56:29:32:9e:33:
35:4d:35:03:8e:41:2d:41:d7:d8:6b:f2:90:b2:10:
89:b5:95:3f:59:e3:e0:f3:59:59:a7:79:3a:b9:67:
13:c1:ef:b9:02:d1:6e:3b:b4:f7:74:db:82:57:fa:
1b:5c:f4:52:d3:8b:19:6e:5d:4e:3e:2c:db:e5:63:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:4E:32:54:1E:9E:52:B5:92:34:56:A4:A6:26:15:11:AF:E0:5E
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5e:ec:ae:9e:96:de:f1:66:9f:e3:34:c0:19:c8:b4:a6:76:
42:d9:53:e8:e9:2e:51:e9:49:fb:6c:87:f3:dd:15:1e:bf:fb:
07:93:0d:74:bc:2c:a2:e2:8d:85:c7:49:cf:9d:1f:dd:a3:1a:
2c:cc:4b:fd:d3:de:97:a1:95:48:3f:88:ec:ec:f8:34:ba:5d:
f2:65:96:dd:dc:bd:d7:39:b9:eb:e6:18:1b:77:d0:bc:ac:38:
c9:63:e1:11:fc:24:33:2b:ca:59:ad:63:4a:a1:d6:94:24:05:
b0:7c:88:27:2d:e7:60:cf:2a:3a:5c:22:6b:09:d7:9a:b1:eb:
7b:a9:39:e4:b2:f3:6d:56:a3:9d:54:7d:05:9f:69:9a:98:d7:
ad:31:20:c8:92:1e:b2:a1:bd:1f:89:45:97:d0:1d:04:f6:3d:
fc:4f:02:f8:3e:33:6d:eb:39:ed:0b:f1:d2:e9:df:05:3f:b6:
1a:b3:98:70:13:77:63:f5:df:83:c2:54:d2:7c:87:ab:df:ca:
e3:9d:0b:7c:04:e4:bb:d6:05:d2:ca:42:e5:cb:ac:c0:a9:6f:
a1:a6:6c:50:8f:13:cd:03:36:c4:76:94:f2:19:65:b2:5f:12:
ac:72:a4:28:ac:7f:8b:70:f9:cc:02:e0:6f:9d:bd:a3:17:19:
43:ab:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:31 2025 by rpki-client