
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
File: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft (raw, json)
Hash identifier: OGqPwmWKYdXoJkUnR6SmDmvcJhFRShEf+k5ORSL/Wj0=
Subject key identifier: A7:79:AE:D1:79:91:04:E6:0E:88:8E:BF:C0:5C:59:25:37:B1:1F:6C
Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
Certificate issuer: /CN=ac328756dece8f29f97f41b81a087db524e159b7
Certificate serial: 01974CA00D29FE47067847D3B98DBAB4BA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
Manifest number: 11C9
Signing time: Sat 07 Jun 2025 23:00:46 +0000
Manifest this update: Sat 07 Jun 2025 23:00:46 +0000
Manifest next update: Sun 08 Jun 2025 23:00:46 +0000
Files and hashes: 1: KhThgn0FLgtxgLmV5WuQd88UjJs.roa (hash: UVyvP36EKpZylxYZtY94LC7cB1Xoy48Pim7visCwDUs=)
2: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl (hash: 7a/GTYbVwRgqkeEsVwoArJ36p99+Kz90uRVFTBJlcyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:0d:29:fe:47:06:78:47:d3:b9:8d:ba:b4:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7
Validity
Not Before: Jun 7 23:00:46 2025 GMT
Not After : Jun 8 23:00:46 2025 GMT
Subject: CN=a779aed1799104e60e888ebfc05c592537b11f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:fc:58:eb:61:c9:13:4b:2f:15:99:a1:93:
3f:ea:46:bf:ea:ca:fe:e1:a4:c8:3f:82:68:51:76:
bf:97:aa:f9:45:2c:24:ff:59:14:61:3a:86:d8:7c:
f2:5f:6d:7b:41:0b:e7:f6:39:5f:78:3a:4f:7a:08:
da:48:f3:3f:53:24:98:42:a4:ac:aa:55:d2:3b:0c:
1e:af:e1:01:e8:2e:12:1c:3b:31:7b:43:5f:c3:a3:
a9:c0:40:e9:94:3c:0a:f0:9a:18:b5:73:49:55:fa:
4a:72:78:96:7b:81:26:05:15:7c:e0:f5:1f:72:f1:
a8:76:a8:25:89:f2:53:0a:af:ec:d7:cb:d3:47:30:
ce:43:9c:df:a0:6b:ad:8a:27:1c:55:b1:16:40:57:
25:d2:40:a5:b3:c7:03:04:f9:40:a4:a5:6e:e1:8e:
0b:57:74:6a:86:0a:1e:d1:bc:28:ba:bb:1b:13:94:
9d:be:0e:fa:e0:14:7b:6d:16:f7:34:b8:31:36:ce:
8a:44:23:cb:a5:55:a7:0a:ad:4b:28:ea:12:c9:b4:
54:be:01:61:68:68:ed:fb:9c:47:aa:5d:7d:72:30:
b6:ac:07:7c:8e:b5:6e:ea:33:ac:75:9f:df:a1:e6:
c0:6c:57:d5:e9:b8:aa:cb:ab:06:8b:53:b7:ef:24:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:79:AE:D1:79:91:04:E6:0E:88:8E:BF:C0:5C:59:25:37:B1:1F:6C
X509v3 Authority Key Identifier:
keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b6:65:cc:2a:f1:8d:17:c9:75:e2:06:42:ac:01:eb:46:2f:
a9:c4:d0:4e:fc:75:4a:92:80:20:eb:0d:40:fc:46:2d:ce:eb:
d9:ed:ff:fa:71:da:29:46:af:c9:ec:7a:56:49:6e:e0:00:44:
1c:c6:d0:c6:f6:d9:cb:47:bb:6e:bf:03:db:9a:51:6e:61:29:
d5:51:88:0b:cb:9c:93:a1:b0:81:45:ea:54:66:da:49:a7:4a:
87:be:3d:75:5b:72:d3:d7:d6:0f:99:66:4b:5e:a6:2b:e7:06:
c1:cc:fb:2e:ed:e8:5b:25:a0:dc:9a:6d:11:17:6a:a9:36:ae:
4e:73:73:38:54:b0:7d:57:83:7f:19:de:c1:7f:a8:fb:75:4b:
1f:8b:2a:4d:0e:d0:66:4f:a5:f2:5f:8f:4f:f4:a2:ca:84:61:
55:08:3f:01:d5:28:dd:4c:48:f9:57:16:c7:6a:d9:e2:25:b1:
8f:a9:a9:b9:87:3e:9d:0c:5f:37:35:20:e2:df:76:4d:dd:f1:
4e:ba:7a:93:de:fe:65:7b:30:30:06:fc:9b:40:d6:df:8a:58:
f3:94:63:1c:e1:a9:75:13:52:e6:02:78:b1:f3:94:c0:3f:df:
39:e1:2b:ba:f9:26:c2:fb:ae:34:34:da:2c:ad:68:c3:e5:80:
c5:11:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:20:57 2025 by rpki-client