Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: yGG1D/+fxfUUEFvBsAVy56Axf6plwa5hhO+1gPu4y30=
Subject key identifier: 33:BF:C4:6B:17:2A:D8:B2:71:62:A0:61:07:EE:23:E6:0F:46:14:FF
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 01974B1F18F8F015D55594814FC95ED1C9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0B44
Signing time: Sat 07 Jun 2025 16:00:18 +0000
Manifest this update: Sat 07 Jun 2025 16:00:18 +0000
Manifest next update: Sun 08 Jun 2025 16:00:18 +0000
Files and hashes: 1: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (hash: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=)
2: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: z7SDb4UnWGV0gQauzL5cumr3v/BsYkYDwt58UZlbvGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:18:f8:f0:15:d5:55:94:81:4f:c9:5e:d1:c9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Jun 7 16:00:18 2025 GMT
Not After : Jun 8 16:00:18 2025 GMT
Subject: CN=33bfc46b172ad8b27162a06107ee23e60f4614ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:d8:48:9a:22:e3:ba:aa:7e:3b:50:89:9c:
3e:26:a3:b8:1a:bf:4c:a1:a6:3c:f7:58:e9:e5:20:
52:df:bd:75:88:41:03:34:d7:da:5e:87:41:33:7e:
08:32:44:06:aa:78:cf:95:2d:08:72:b2:ea:32:76:
1e:85:f8:76:07:0f:b1:cc:89:ce:69:f5:0a:46:1e:
b8:fe:12:3d:c4:26:1d:9b:4c:aa:dc:f8:8c:ea:5e:
e5:fd:2a:a0:97:59:f5:cd:bc:11:0a:e4:d1:8f:df:
ca:77:70:45:1f:35:11:73:23:ae:37:a5:ad:04:06:
d6:35:ee:0c:a5:84:fb:49:f3:ea:69:90:2b:00:65:
db:c8:b5:9e:91:ab:31:28:ff:2b:db:ea:5f:f4:00:
e0:72:e5:87:f8:c8:b0:de:88:ca:f1:e8:89:a2:35:
57:36:a2:c2:e8:f5:47:3a:03:81:63:28:5c:f3:14:
9e:69:94:57:e7:22:6d:09:ed:c6:23:09:01:23:dc:
b8:13:d8:76:3d:2e:ba:78:b3:96:8c:de:79:72:be:
22:fd:6f:f8:55:61:25:67:de:06:88:b6:86:5d:d5:
5a:80:5d:aa:59:f3:f4:6c:f1:bd:b6:ec:6a:16:e1:
e7:89:67:08:6f:7b:aa:65:57:69:55:a5:69:73:f6:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BF:C4:6B:17:2A:D8:B2:71:62:A0:61:07:EE:23:E6:0F:46:14:FF
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f4:a0:4f:a4:10:9d:f2:99:23:3c:3e:3c:9b:81:e1:2a:30:
9d:35:e9:95:3c:94:16:7a:43:e5:6a:58:a7:83:42:a6:2b:a2:
3e:0c:aa:81:d3:09:3e:4b:b5:a1:47:b2:26:6b:19:5a:ef:9d:
d2:25:28:04:85:ef:15:a5:38:bf:ba:63:cb:98:00:0d:ee:af:
37:60:2a:e7:c2:20:24:af:f7:0c:83:7c:43:2d:2d:0d:ef:06:
1d:3d:bc:80:b3:66:02:0f:25:f7:4d:39:90:08:11:c4:67:c3:
b6:e1:20:64:ab:f7:ca:11:7f:ef:ea:16:06:71:c5:40:31:3c:
b0:c1:65:4f:01:4a:39:5f:8a:82:6c:71:81:b3:59:dd:a6:ba:
3a:5e:bb:9d:61:24:e5:cb:66:dc:0d:f3:f1:54:2f:c7:6f:14:
47:1a:4d:91:aa:a2:4e:9c:46:cd:06:4d:e1:33:de:a7:f7:a4:
46:fd:ed:e6:1d:f3:12:ce:91:40:af:7f:e5:44:79:36:c7:80:
1d:85:bc:85:3c:77:55:6f:3b:d3:41:65:39:a8:3d:2b:e4:a3:
70:c6:b3:87:39:4d:76:e0:8b:4b:9b:a2:5c:bf:5b:31:bd:b8:
65:9f:25:e2:2b:60:eb:94:4c:9a:5c:5f:16:7e:33:8e:be:73:
c9:07:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:33 2025 by rpki-client