Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: ptoSHlsOWqrK/w1Jrs80unPKKqtGwL5APNgdF5t/UUI=
Subject key identifier: F2:75:BC:7E:95:7A:25:04:D5:13:8A:25:8E:0E:24:11:9B:3E:8F:07
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 0197477996FB2FD15E01A258172D5384792A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1583
Signing time: Fri 06 Jun 2025 23:00:40 +0000
Manifest this update: Fri 06 Jun 2025 23:00:40 +0000
Manifest next update: Sat 07 Jun 2025 23:00:40 +0000
Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=)
2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: ltUNsitq16aEf08OOkvbUdHa1lnLpP0C85WSpBEvhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:96:fb:2f:d1:5e:01:a2:58:17:2d:53:84:79:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Jun 6 23:00:40 2025 GMT
Not After : Jun 7 23:00:40 2025 GMT
Subject: CN=f275bc7e957a2504d5138a258e0e24119b3e8f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:59:79:41:48:32:58:8b:d1:bb:d2:b8:b4:
5d:b8:e1:6e:8d:7c:a1:3d:28:48:6a:e1:9a:57:97:
f8:fc:63:4e:f4:89:38:23:77:5c:2e:d6:53:f1:51:
4c:d4:36:22:2a:11:41:ad:92:9c:7b:cb:4c:5a:99:
04:02:f1:1f:94:58:c5:c8:03:e3:62:09:07:b4:e0:
be:4e:99:02:7e:28:fe:9d:75:b3:e3:1e:25:00:9f:
b3:05:33:c4:19:21:bf:94:85:c9:11:cf:02:6d:59:
f3:5b:ae:07:34:45:0c:e8:d8:c7:e6:23:46:87:4f:
74:0d:ae:6b:ae:48:82:40:1c:5e:96:fb:d8:90:3c:
51:ea:20:64:8f:fe:33:2b:d6:6e:e9:6c:67:50:7c:
00:a9:66:49:a3:00:df:f1:b5:3a:b1:88:46:44:9a:
49:a4:02:a3:63:40:e6:15:26:51:22:46:5c:fc:d2:
e3:94:33:4b:a3:d9:8f:a4:41:a3:5a:48:c9:f6:a1:
f0:17:c5:a3:19:f5:91:29:de:91:1f:69:73:05:0c:
c1:b2:51:ed:8a:1c:b6:92:09:38:27:6a:8e:ed:52:
99:1f:3e:9b:37:a1:23:57:a2:80:7c:f4:19:9a:93:
43:5f:86:3e:d9:1b:e2:80:14:6b:fd:8d:f7:7e:f6:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:BC:7E:95:7A:25:04:D5:13:8A:25:8E:0E:24:11:9B:3E:8F:07
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bc:18:fc:8a:d7:5d:7b:80:dd:81:cd:9a:fd:6b:47:b1:6d:
8a:41:78:dd:2e:d4:11:89:1b:dc:94:9f:0a:41:95:7f:ae:cd:
36:9c:3b:f9:d7:cf:3b:f7:28:46:f3:af:a8:7b:7a:17:c3:13:
0e:78:48:e8:0b:67:25:db:48:c7:24:f6:8e:3d:c7:b8:8d:89:
63:75:8c:42:0a:0d:cf:7f:28:80:81:e5:39:ee:79:a7:62:67:
75:90:cf:f9:ec:eb:94:3b:8c:ae:47:ac:ce:53:68:2a:c5:b6:
a3:ba:cb:5b:36:3f:4e:ad:67:55:76:7c:f3:ce:30:80:25:96:
84:78:b2:13:2f:5c:e2:e0:a1:90:d3:fc:c0:c4:75:05:ba:ac:
35:3a:0a:37:66:01:c7:e7:07:35:ae:96:03:da:16:da:0a:7c:
4a:69:ee:c0:4e:1b:88:18:1a:8f:a0:81:69:54:ac:c1:3e:2b:
8b:64:0d:8f:c6:b4:0f:87:42:50:e8:55:19:5a:02:0f:34:fb:
87:22:b4:4d:f6:ea:dc:ae:2c:60:6a:53:1e:9b:cb:d1:53:21:
ee:b1:fb:00:d2:d3:76:ff:d9:7f:0d:ca:86:7e:39:2a:08:7f:
ff:7a:60:24:2f:99:5b:bf:91:83:a0:72:8d:13:4e:31:cf:58:
76:31:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:02 2025 by rpki-client