Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: HpJHthNurhWNNcmdt3/kkGqj5FuPMe2LQUATeJ2OGZ0=
Subject key identifier: 0D:6B:7B:55:91:66:5A:CE:FE:01:66:4B:B3:CF:06:48:58:4C:EF:4C
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 01975BDBC2B3113A0A049363864F8E600CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 22:00:18 +0000
Manifest this update: Tue 10 Jun 2025 22:00:18 +0000
Manifest next update: Wed 11 Jun 2025 22:00:18 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: PRYKXiWTjQa7gqL6G4vZckeGxCsJW2yR1qRTnp1RGQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:db:c2:b3:11:3a:0a:04:93:63:86:4f:8e:60:0c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jun 10 22:00:18 2025 GMT
Not After : Jun 11 22:00:18 2025 GMT
Subject: CN=0d6b7b5591665acefe01664bb3cf0648584cef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:44:dd:be:2e:9c:34:8c:1f:25:eb:1b:4c:
d3:7c:c2:13:74:c2:9d:c0:37:61:2f:cf:c3:a1:ba:
8b:22:dc:35:a7:75:2a:8f:d4:55:07:d6:55:b5:1e:
f0:d0:7e:80:c5:bf:0f:ab:0b:2f:88:9a:34:a6:c6:
83:d2:75:cd:08:b9:9f:76:19:56:f8:ff:8e:6e:96:
8c:74:76:de:93:67:3c:a7:92:2a:a6:9e:a1:26:fc:
3e:55:c8:80:32:70:d7:7f:bc:8e:c2:e8:bc:1d:0c:
5d:2c:84:b7:ca:9e:01:2d:fb:41:31:b8:02:41:96:
fa:7c:da:39:ca:51:13:83:a5:a2:0b:27:a8:ff:70:
d2:16:b4:ef:12:98:40:28:f0:7b:43:0b:8f:8f:37:
a8:59:15:2e:ee:5a:0b:34:9b:e6:57:b0:ca:98:7b:
30:23:9e:0f:1a:9d:2c:7f:8c:05:68:5f:34:76:11:
34:a5:3f:3b:e4:04:e0:1c:ab:e5:f5:53:10:1b:5f:
8e:71:6f:1d:e6:6f:6e:59:2c:7d:0c:de:40:4b:31:
a6:af:1b:0c:ef:11:d9:ae:ec:58:9c:e2:40:de:90:
45:a0:e2:c1:6e:f7:ff:12:74:b7:e0:3e:90:4b:e8:
cb:a1:1b:fe:6d:24:f4:bb:31:e4:67:bf:1c:4c:2d:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:7B:55:91:66:5A:CE:FE:01:66:4B:B3:CF:06:48:58:4C:EF:4C
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8f:dd:85:eb:b6:f5:3e:15:f8:06:cc:b1:76:af:ed:8b:07:
a7:93:e5:66:f0:d8:4c:af:ba:af:c1:4c:0e:13:cd:85:2d:f1:
f5:8b:3f:59:57:80:96:85:a2:32:3f:dd:5c:8c:b3:e0:a7:2e:
07:e6:62:4e:06:f0:96:b1:d2:50:05:87:b9:86:9d:f7:ac:93:
2a:78:06:fa:af:34:50:98:b2:2b:b6:fd:9c:5e:84:7e:39:34:
12:21:b8:0b:23:04:bb:2f:1e:cb:f7:ac:b0:d3:b3:6b:19:68:
7d:05:bc:f7:31:1b:0b:6b:51:39:7f:86:44:5d:94:c5:9d:78:
4c:a2:6a:ea:5c:48:2a:c2:2e:5d:6b:ac:5e:87:16:b7:32:c9:
83:56:56:a6:51:24:71:9a:7c:0f:76:32:94:a6:d7:71:f9:c6:
e3:a1:83:14:8f:17:40:8c:f0:cb:56:49:62:71:fb:a0:54:c0:
93:2b:fe:73:57:79:87:92:ce:7d:83:a6:57:4f:ca:c6:ab:bf:
0f:4e:39:55:af:33:a4:47:97:86:44:dc:2c:1e:6e:32:36:f3:
71:7a:bb:ed:eb:02:0f:82:11:02:36:11:e5:18:7b:0b:06:fa:
a7:ee:26:6a:2d:63:ce:d1:a3:8a:87:9b:32:43:c0:79:66:2e:
d9:5b:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:33:30 2025 by rpki-client