Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: evJfNRQ8bt/dKHaE3vIAv+y6VZz4/FuFKG5Q1GphlOs=
Subject key identifier: 8E:AD:0E:04:24:89:DC:02:4B:93:C7:4B:A2:F3:E8:0F:F1:B1:54:F0
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 019748555FFA42FC6E59EF2A49DA5085F938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 0DE2
Signing time: Sat 07 Jun 2025 03:00:44 +0000
Manifest this update: Sat 07 Jun 2025 03:00:44 +0000
Manifest next update: Sun 08 Jun 2025 03:00:44 +0000
Files and hashes: 1: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: ovIC6zPRB9B/QBX5WE0A3es9Enb0l3D+Jj5D5+leok0=)
2: FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa (hash: 1BVoM3pIwN+Dth/AavDroFy4/aBiv0LMqKNh/mLZqqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:5f:fa:42:fc:6e:59:ef:2a:49:da:50:85:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Jun 7 03:00:44 2025 GMT
Not After : Jun 8 03:00:44 2025 GMT
Subject: CN=8ead0e042489dc024b93c74ba2f3e80ff1b154f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:2c:68:97:8f:a4:24:53:0a:07:ff:1f:0a:
6d:35:63:3e:47:94:66:42:19:ed:71:20:88:57:87:
bb:1e:ab:9b:c9:3e:6d:af:0a:79:6d:2a:05:09:66:
c0:47:44:9d:53:57:34:f6:23:5c:3d:de:aa:aa:d4:
a2:68:22:82:73:6c:b3:d5:87:0e:3a:6b:3b:f0:47:
2a:e5:39:82:78:2d:38:c4:20:8c:d4:bc:31:9f:d8:
c4:68:0d:02:6a:fa:e8:81:0c:76:27:28:5e:a5:1a:
b5:91:ed:2b:77:c5:80:d6:6d:31:25:62:34:d9:9d:
ea:e2:e7:8b:e4:23:00:a7:11:9f:61:25:f8:f4:29:
bf:fa:19:08:37:bc:38:5c:a8:95:8b:57:04:69:76:
26:00:18:2d:60:fd:6f:17:4d:e8:24:4b:cc:14:bf:
b7:f1:5b:3c:2e:65:0a:21:15:a4:3e:5c:90:91:14:
41:f1:26:7e:60:aa:e7:b0:15:b7:36:99:0f:08:3a:
1c:40:fc:a3:a5:69:67:de:8b:2f:ba:7b:46:68:7c:
e5:a2:22:79:9d:c7:40:30:10:f0:52:6c:07:04:70:
a4:1a:5e:3a:a1:58:aa:4c:b1:44:df:6a:d3:79:4e:
7a:73:63:f4:8e:1f:a0:88:a2:6c:df:57:b1:ca:db:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:0E:04:24:89:DC:02:4B:93:C7:4B:A2:F3:E8:0F:F1:B1:54:F0
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:77:8b:32:8f:0a:dc:5a:22:7b:3d:09:96:e5:c2:d5:0c:1d:
84:e7:e3:89:ef:1c:a3:f1:61:44:e9:a7:c7:a7:96:5e:c8:61:
78:a9:50:73:a0:25:b9:c3:d3:bb:42:ab:57:36:d5:cf:56:ee:
05:53:ee:f1:d7:16:20:ee:46:cc:56:8f:f0:d1:0a:40:e6:14:
dd:c7:ac:eb:38:de:fe:78:2a:8a:d7:75:52:a5:21:15:3b:c0:
88:e5:16:ac:a0:a3:d2:be:68:7b:53:c2:95:b9:57:d0:51:1f:
45:df:5e:81:ba:76:33:2d:3f:74:3e:2e:48:5b:bd:20:8e:a6:
6f:58:40:4c:5f:9a:c1:7a:cd:3e:92:f9:31:27:da:d9:b5:b6:
80:62:76:ba:b3:f1:a4:83:05:7b:3c:be:11:0b:a1:34:3a:03:
eb:5b:b6:34:df:eb:4b:2f:56:db:86:6c:92:7a:15:4f:64:5b:
ad:c2:be:63:d1:a4:74:01:1c:10:65:a9:a6:e8:4b:9c:25:c2:
7e:ba:a2:5a:9e:62:0f:7c:52:fa:af:b5:af:a0:7c:c3:f9:84:
04:42:5f:dc:87:7a:57:f5:40:65:22:92:56:06:a9:86:22:1c:
db:66:72:64:b9:65:b9:29:01:af:a6:e2:cb:fa:69:16:cf:41:
5e:94:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:16 2025 by rpki-client