Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: oAUPqWshRG76G51kI4dukl0KfPR6fmfcOzbIGH0qv3A=
Subject key identifier: E5:28:AD:E1:F7:3D:29:F7:C1:40:7D:1F:1E:82:B3:79:4C:4C:B1:18
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 01976B4F2E646E14B668626BFA60D274AEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 14FB
Signing time: Fri 13 Jun 2025 22:00:40 +0000
Manifest this update: Fri 13 Jun 2025 22:00:40 +0000
Manifest next update: Sat 14 Jun 2025 22:00:40 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: Q4XbDFnhouqGeIpHH/uIPtQyRAZh1kndk3Gj/rxiWQ4=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:4f:2e:64:6e:14:b6:68:62:6b:fa:60:d2:74:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Jun 13 22:00:40 2025 GMT
Not After : Jun 14 22:00:40 2025 GMT
Subject: CN=e528ade1f73d29f7c1407d1f1e82b3794c4cb118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:19:1e:5c:53:23:25:7f:42:54:3a:0c:d4:
30:b5:98:0f:95:c7:67:55:3e:c9:6a:98:13:c8:dc:
35:93:f5:6b:75:f0:e9:b2:73:52:d5:f4:7d:6a:0e:
d6:f7:d3:62:72:ce:ca:cc:bb:ed:75:b5:0b:47:4e:
cf:0b:14:b5:59:dc:f2:e7:11:db:89:89:58:4e:a3:
f4:70:03:4e:5e:8c:31:e6:df:ed:12:46:ad:aa:26:
00:9b:ec:a6:4c:e0:09:e5:2f:8f:72:a5:71:19:5b:
96:15:4d:e7:7e:1b:55:ec:c4:be:73:72:58:62:9c:
68:83:23:11:54:8f:c0:8f:7b:b9:b7:53:5c:83:53:
93:94:e7:1b:1e:c3:a2:fa:a9:8e:43:46:a8:93:4c:
b8:d1:68:64:d7:e1:28:d8:01:d5:d5:b2:fd:91:69:
ad:83:f5:07:d4:ba:3b:57:5e:98:ff:7e:8d:8f:50:
2c:7e:66:41:e3:f5:fb:42:5f:75:ed:7a:a3:03:8f:
b3:31:b2:7a:da:4f:e3:0a:3d:8e:fe:70:18:16:83:
ca:24:ce:46:c6:3d:af:8e:a2:bb:a9:30:7e:98:48:
68:2a:29:a9:4a:7b:57:26:f7:ba:85:73:0a:9d:39:
68:fb:d5:aa:d7:cf:5f:9d:55:87:a5:af:da:28:25:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:AD:E1:F7:3D:29:F7:C1:40:7D:1F:1E:82:B3:79:4C:4C:B1:18
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:82:b2:7f:91:04:3f:f2:a1:62:eb:c5:17:27:a7:09:02:59:
ab:86:35:7b:ba:0f:eb:59:85:b3:66:d4:f5:14:19:71:84:28:
57:72:3d:2a:85:01:4a:76:f8:ca:b3:02:96:44:e9:96:19:77:
ed:36:25:71:e4:9c:65:e0:ba:08:98:55:ad:97:78:77:3b:fe:
cc:0a:23:6d:cc:25:4f:67:6b:d5:b1:9b:6b:92:23:d7:e6:a1:
90:5e:8b:9e:93:a5:0e:02:9c:3b:54:ca:ea:11:84:a7:c2:d2:
4c:85:bc:b1:2f:37:c4:7c:57:e7:2b:74:97:0c:1d:ed:0e:8b:
de:c5:75:46:db:c6:16:04:54:48:a4:36:9f:36:e9:66:e7:ae:
da:f7:67:66:f7:38:61:f8:89:84:8d:ec:b9:73:07:fc:2f:b5:
29:8b:c5:a9:73:42:af:90:f3:14:37:83:7d:a9:13:78:b3:6a:
02:93:e1:aa:bf:a2:bc:d1:9e:39:b0:ac:42:6f:8d:49:cb:54:
07:81:58:a7:67:6c:21:30:63:99:48:30:95:dc:89:ae:e7:cf:
84:4d:fb:06:80:f2:f3:9a:5b:89:21:f1:13:b8:ff:83:de:a6:
56:32:6b:b6:4a:31:74:dd:9a:b7:13:87:d3:16:dd:ce:a5:0a:
0f:c6:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:05:53 2025 by rpki-client