Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: BHUny8eMYBqs5Qdbog70TpVErlGGbDjIA+Gif0d1Iio=
Subject key identifier: C9:E3:2D:18:1D:C2:B0:98:34:15:73:72:36:29:29:84:07:F5:63:9E
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 019750458113AAAF2ED5ADD764ED5D9182CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 16:00:21 +0000
Manifest this update: Sun 08 Jun 2025 16:00:21 +0000
Manifest next update: Mon 09 Jun 2025 16:00:21 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: L4yU8AyadcJOlunQhs6M/dXq7xfifHSxCahKzgg80lA=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:81:13:aa:af:2e:d5:ad:d7:64:ed:5d:91:82:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Jun 8 16:00:21 2025 GMT
Not After : Jun 9 16:00:21 2025 GMT
Subject: CN=c9e32d181dc2b098341573723629298407f5639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:a8:37:f6:2a:a7:c1:cb:fc:4f:e1:a1:dd:
5d:67:24:0e:22:c3:7d:33:a4:95:ae:fd:e5:68:d5:
14:70:6e:5c:6c:35:97:db:5c:b7:a7:e8:90:f4:70:
b9:be:c8:27:f3:69:64:8c:f0:e2:71:4d:f1:32:ac:
b5:23:53:23:19:2f:e2:20:d2:b6:1f:c6:15:62:a2:
e5:d6:30:a0:0f:2c:11:23:f5:dd:b6:a6:83:33:2a:
19:04:9b:86:c6:1b:2c:91:ec:df:90:0c:b3:25:7e:
4b:c5:da:37:dc:25:e6:ad:39:15:cf:04:5f:7b:69:
b6:c0:23:86:41:34:52:4e:a9:14:57:b2:36:96:ab:
0b:1b:f8:0a:33:3b:07:d8:62:4f:06:08:a4:42:ec:
8a:e2:3f:bf:4e:79:ea:6d:2b:4e:c3:7e:be:c8:8a:
f9:fb:ec:b5:c0:72:e8:59:10:49:17:59:42:38:fe:
7d:d1:39:f6:ae:d1:b3:b3:a8:38:a4:5b:0f:d4:39:
f2:43:54:24:b6:98:5b:39:30:b2:7b:62:1e:97:14:
3f:c7:0b:14:e0:92:65:6b:08:03:ab:96:c4:49:ba:
b3:66:a9:9b:f5:72:79:a5:c8:0a:98:2b:ea:18:54:
62:48:7a:4d:77:83:cf:31:da:a7:a4:c0:f2:32:6e:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E3:2D:18:1D:C2:B0:98:34:15:73:72:36:29:29:84:07:F5:63:9E
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c9:fd:aa:18:bc:b5:5b:4c:22:3b:46:fa:c3:40:ef:1c:ce:
a6:d0:69:c8:fd:71:71:13:67:fb:7f:47:0e:a6:17:05:67:5c:
bb:ce:fc:a6:fa:6a:cf:a5:b9:a2:2a:9f:d4:51:d4:d9:ad:cf:
d8:0b:c6:80:93:a9:28:2a:ab:ff:59:cf:98:7c:7f:a5:69:69:
bf:df:9c:89:37:42:76:bc:29:95:fb:76:17:6f:f7:1b:6c:71:
4c:98:f3:44:f0:bf:69:a9:97:2a:74:e9:ff:9a:f3:13:a4:db:
ae:62:02:85:5e:4b:1c:83:11:b6:f5:26:56:cd:4d:7a:fb:31:
44:bd:79:f0:de:55:9f:8f:9c:da:72:fc:cd:22:d3:ff:9b:65:
c8:2a:48:cd:d4:c3:16:ff:3d:f8:77:9c:35:22:5b:6c:d3:35:
94:9d:7f:8a:2e:78:35:57:55:1f:85:68:53:5d:2f:6b:b1:f5:
b3:9e:4a:70:fd:d0:b1:8c:1c:53:2d:7c:41:f0:c9:eb:1f:a6:
84:3a:78:c6:49:db:38:ea:91:34:a4:14:6f:49:17:24:fb:82:
07:90:9d:5f:10:f8:0a:d4:82:49:17:e4:65:b1:60:00:31:d7:
88:0e:83:57:65:90:78:77:c5:cb:cc:7f:cf:aa:e6:e5:05:75:
7d:ca:98:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:38 2025 by rpki-client