Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: hWo1/KkNlpbEHCKZg7mbLVcou9FGQ4nFnjqkARZBREY=
Subject key identifier: 0F:91:AB:67:EC:55:DD:8E:33:7C:EC:16:8F:41:F4:79:08:7D:49:8D
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 01975C12FAB546BD9CD2B7F0EA35A627C943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 23:00:37 +0000
Manifest this update: Tue 10 Jun 2025 23:00:37 +0000
Manifest next update: Wed 11 Jun 2025 23:00:37 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: EUxjv8eU800rXz052RQ1eQho45OQcTMmd25ZlyylEM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:12:fa:b5:46:bd:9c:d2:b7:f0:ea:35:a6:27:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Jun 10 23:00:37 2025 GMT
Not After : Jun 11 23:00:37 2025 GMT
Subject: CN=0f91ab67ec55dd8e337cec168f41f479087d498d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:ae:b1:37:b7:7b:91:06:b3:f6:62:37:e9:
86:d4:0e:72:2d:2c:e7:de:c5:7f:15:af:82:8c:df:
6e:73:f8:6c:b4:3c:54:10:a5:0b:b2:3b:c8:04:3d:
d5:b7:20:b6:af:22:d8:a3:11:36:20:26:b5:80:2b:
eb:78:74:58:bc:15:56:40:75:3f:4c:3b:29:f1:f7:
a2:18:9a:68:2f:16:1e:ff:d7:cf:01:98:76:c2:30:
40:92:36:5b:49:6f:df:92:d4:01:34:e1:d4:2e:23:
4a:6e:3d:c0:c7:49:51:31:05:a8:cd:0e:46:1b:29:
03:3f:cf:9e:d9:eb:01:f3:f3:21:b8:48:7f:9a:8e:
ad:25:74:a5:48:ef:57:f5:5c:ce:54:2e:15:2a:e6:
34:d0:06:6f:e1:f6:59:11:b1:9a:b6:d4:fa:d0:d1:
53:4e:bc:5d:c1:67:1e:83:e5:88:de:29:ca:71:e8:
3a:60:1b:80:67:0c:c9:e2:5f:10:15:40:5d:77:93:
0b:b5:24:9a:9c:7a:00:bc:75:6d:4c:5f:9a:2c:db:
1f:2f:5a:66:37:6a:f0:cd:75:c4:99:b8:8c:93:48:
ec:02:65:1d:ed:9e:d0:99:f6:3a:34:a4:70:84:f9:
54:72:0c:59:dd:e1:eb:71:fa:fd:9f:52:b1:cd:31:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:AB:67:EC:55:DD:8E:33:7C:EC:16:8F:41:F4:79:08:7D:49:8D
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:df:0f:3f:ad:c4:f6:c8:06:69:6a:e8:f6:f7:38:0a:a2:b5:
94:bb:76:57:c3:87:a8:26:c5:4b:2a:0b:98:7f:74:d5:44:38:
36:6d:7e:b9:28:54:c7:5a:64:46:24:a3:8e:b6:9e:1c:7b:1f:
42:82:e1:7d:00:c5:84:53:ab:00:61:20:b3:fa:35:7e:d2:56:
de:e7:0a:35:21:1f:66:0c:94:0b:a6:b6:bd:e7:f3:38:72:b8:
00:99:be:40:d5:bb:bf:62:f4:07:89:58:ee:8a:51:61:de:0e:
76:04:bf:ec:43:63:06:8c:02:23:71:c8:89:ce:b5:ee:1a:42:
fc:dc:3e:e1:0b:f8:af:bf:53:f7:63:32:84:f7:a0:b1:ae:51:
01:35:2b:a5:72:9e:b4:bf:7b:05:67:d0:34:98:30:55:8d:4f:
f0:c9:c4:ec:c9:71:21:65:10:f8:14:32:f6:91:ad:89:8f:4a:
47:31:12:8f:00:06:0c:b5:f0:f8:54:20:3c:b4:86:90:52:93:
07:39:56:f5:ef:2d:87:b0:b3:af:18:3e:b8:ba:d5:58:06:29:
ad:85:0d:95:34:e8:24:b2:42:61:88:a4:43:30:45:d7:a5:11:
18:08:c1:30:1a:95:9d:92:1f:1b:58:04:bf:7c:44:7d:da:fc:
ba:ee:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:54:00 2025 by rpki-client