Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File: djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier: svlI6h0PDCGxZSvw9iQipx+zzN6eQQyN5rFd+AQbLKg=
Subject key identifier: 9C:2F:8E:CF:55:79:46:DF:F2:6A:50:06:ED:24:B4:AB:E8:6A:32:A3
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer: /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial: 01974A7A8F4E522C8B990FE33C2D8CFCDA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:00:35 +0000
Manifest this update: Sat 07 Jun 2025 13:00:35 +0000
Manifest next update: Sun 08 Jun 2025 13:00:35 +0000
Files and hashes: 1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: hbwq31PiojSBuKUn3P8tTAmJqntI5I+knun46wGrft8=)
2: qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (hash: ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:8f:4e:52:2c:8b:99:0f:e3:3c:2d:8c:fc:da:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Validity
Not Before: Jun 7 13:00:35 2025 GMT
Not After : Jun 8 13:00:35 2025 GMT
Subject: CN=9c2f8ecf557946dff26a5006ed24b4abe86a32a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:e3:9e:87:42:0d:c3:76:57:4e:92:32:0a:
3d:c1:22:37:de:de:52:0e:c9:2f:07:02:1c:e3:21:
a0:a7:32:f2:5f:14:7a:af:e8:5d:92:85:e5:04:34:
82:31:64:e3:81:d7:a6:30:03:1c:a7:bd:47:1b:bd:
a7:de:8e:5c:7a:bf:d3:b7:db:48:d9:5a:b8:a2:f1:
68:20:52:d1:d5:eb:a3:6b:24:95:df:db:9c:e9:c8:
78:f3:b7:d6:af:c8:fa:1f:63:73:fc:14:f6:7e:10:
cf:ad:41:ac:e6:af:b3:8e:53:83:79:ca:b2:67:ee:
ef:8e:8f:a1:ab:5d:ee:30:9f:6c:88:89:0a:7f:6a:
c7:e2:e6:c4:3a:59:c9:4e:58:45:5d:5b:b6:8c:17:
54:a2:0f:1f:64:df:34:f4:76:98:07:6e:1d:fa:d6:
be:17:e4:8b:5e:3b:1a:5c:bf:81:00:94:0c:27:c1:
0a:6f:c2:91:36:6f:9d:52:13:99:2b:62:b3:b3:72:
c2:6c:eb:ed:bb:fe:f3:07:c9:fc:28:6c:2a:19:c8:
b2:81:c6:33:ab:aa:b5:c5:a6:39:af:78:dc:31:cb:
ee:7e:ae:e8:55:4e:e5:8b:d9:7d:86:4d:ef:a7:be:
e3:00:28:9c:94:80:ea:f6:f8:49:bb:7c:45:6c:cc:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2F:8E:CF:55:79:46:DF:F2:6A:50:06:ED:24:B4:AB:E8:6A:32:A3
X509v3 Authority Key Identifier:
keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:53:48:4c:c7:d8:12:69:a9:44:8a:fe:94:52:9b:3e:2c:4a:
4c:a5:95:8b:5b:59:aa:50:f6:0f:60:5e:2f:a7:5b:9f:1d:fd:
b4:c9:59:db:e6:1a:f7:0e:38:0c:c5:6e:bb:d9:05:18:bb:07:
b2:ee:76:35:ba:55:90:1a:dd:12:c3:db:74:1a:05:cc:75:4e:
b1:05:b0:1d:de:30:65:cc:d9:66:9f:87:91:71:30:d8:1b:7b:
59:28:a1:19:96:b6:0a:7f:e6:97:24:ed:15:0f:2e:4d:bf:3d:
80:85:8f:9e:8a:f1:8a:ed:9d:a5:c8:90:b6:c3:3a:cf:a8:36:
d6:9d:01:d2:88:95:27:c6:9a:fa:94:34:72:55:d9:5b:5b:02:
ef:bb:0d:bc:37:a4:e6:9d:eb:a2:90:39:33:af:4c:b9:23:2d:
b5:9b:f7:cc:89:0d:76:aa:af:7f:06:6c:36:8d:23:40:d7:e2:
23:8d:6a:8f:5e:aa:89:24:7d:bc:63:52:5e:13:8b:44:5e:e2:
1e:32:6c:91:40:b9:ce:55:17:66:e7:3a:11:90:16:07:62:4b:
e8:f8:cb:ea:f9:18:7b:e5:9f:e2:94:39:af:0c:7e:c3:a9:19:
d9:ec:88:5d:76:e5:9d:82:a9:4b:e7:69:6c:9c:21:ff:0f:06:
b9:0a:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:52 2025 by rpki-client