Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: ktYpUsYxHdJCD2fIFiwqeLwXeahTlJoockPfJKtO4aQ=
Subject key identifier: 70:BC:62:92:92:5D:C5:ED:F6:25:DA:B0:10:E2:0B:B3:1D:CD:2D:ED
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019748FAA518A562584AC19869677FC1F371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 11F4
Signing time: Sat 07 Jun 2025 06:01:15 +0000
Manifest this update: Sat 07 Jun 2025 06:01:15 +0000
Manifest next update: Sun 08 Jun 2025 06:01:15 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: qssJxC64BJlDGMO/fp9+T8gRmH6wtsat+70Na4+PcJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a5:18:a5:62:58:4a:c1:98:69:67:7f:c1:f3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Jun 7 06:01:15 2025 GMT
Not After : Jun 8 06:01:15 2025 GMT
Subject: CN=70bc6292925dc5edf625dab010e20bb31dcd2ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:a9:64:e6:1d:64:82:81:e9:ad:91:db:fc:
a0:66:f0:a6:02:69:25:cf:2f:6e:c2:28:c2:cb:8f:
89:99:27:d9:36:f2:ea:4d:8e:97:f4:46:6c:9b:a7:
44:2e:b2:3a:da:cc:35:9f:61:5e:c0:a7:7a:0b:4c:
de:a7:aa:6d:1b:2f:ea:fc:f6:ce:fe:9f:a2:aa:c9:
5e:2e:33:33:85:9f:dd:11:52:20:cf:27:7d:24:1b:
a1:e6:40:c4:a2:1a:6a:c3:a8:21:38:0f:bd:02:5d:
4a:91:d5:0d:37:df:49:0c:61:ed:55:37:45:b0:3b:
cf:be:ad:95:74:c2:63:0d:8e:57:48:02:95:7c:72:
8e:2b:c2:0d:0c:82:82:80:a0:8d:59:e7:1c:78:95:
71:c0:58:55:0d:92:38:f8:05:c8:eb:69:b3:71:ab:
c7:08:3e:d6:df:e6:44:97:a2:4f:3a:37:87:fc:e6:
1f:b4:f7:92:c6:76:a0:5a:eb:28:ad:a6:c9:c0:19:
b5:b6:3c:8e:b9:06:3d:fd:92:b8:ff:cc:d7:6a:4c:
1c:be:7c:14:f8:19:63:7f:b3:e3:17:d1:4b:e7:ee:
6b:ed:c0:77:22:6e:08:4f:6a:c1:0d:d5:2f:31:63:
ac:3a:31:34:ee:9b:b7:5f:cb:33:59:d7:b5:1b:b2:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:62:92:92:5D:C5:ED:F6:25:DA:B0:10:E2:0B:B3:1D:CD:2D:ED
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b6:2a:14:04:51:03:1f:2b:cb:9d:41:bf:01:60:fb:a6:a3:
1d:00:52:2e:a7:49:9e:ea:69:89:74:0d:f6:26:b8:04:9a:40:
3f:3c:7e:a8:95:22:07:fb:c7:b0:fb:d7:79:03:91:e9:0e:fb:
a4:c2:93:85:7a:c3:16:71:96:93:a4:48:5a:89:f4:b2:e6:0b:
22:47:57:89:be:cd:2b:dd:0c:59:e2:0e:9e:52:9f:2c:2f:c2:
c8:ca:75:4e:74:af:f3:c0:17:c0:77:4e:36:0a:db:c3:10:17:
90:a6:38:03:33:9c:c1:2c:81:47:d9:da:03:fa:ec:ce:a2:12:
20:91:9e:f3:9f:d9:1e:e9:e9:39:fa:73:69:f8:c0:17:13:5b:
ac:03:56:14:fe:d8:79:39:6e:e8:2b:e2:16:72:0f:9c:f6:14:
d6:01:3c:f2:b6:47:e6:0e:f6:1b:07:08:ba:f5:8e:f1:8b:9d:
99:40:9c:ad:eb:6c:d1:3d:91:3c:01:37:0d:60:22:f5:cd:5a:
8d:af:f8:c4:a1:59:c2:db:65:88:1c:a7:f2:a7:ee:8d:24:bd:
59:5d:bd:c7:06:08:37:87:4a:1a:1a:9e:6e:c1:ce:8e:12:59:
1c:4f:97:06:06:31:e9:0b:1e:ce:75:fe:ff:8a:47:1f:90:16:
ef:48:b2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:02:38 2025 by rpki-client