Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: ZzVBDs3eeBrmg0nvrECMwRJfSx6QBLSkOfHNCz6YXLM=
Subject key identifier: 8E:A7:30:F4:1B:5A:97:6C:49:C3:D4:BE:18:04:33:43:5D:A9:21:E4
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 01974B568F3B80306FD936372C817FC960B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 136D
Signing time: Sat 07 Jun 2025 17:00:53 +0000
Manifest this update: Sat 07 Jun 2025 17:00:53 +0000
Manifest next update: Sun 08 Jun 2025 17:00:53 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: BMJBzF+zshh8/fI3Fj2QCQF+D6JdY7uljL7GX9u/GEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:8f:3b:80:30:6f:d9:36:37:2c:81:7f:c9:60:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Jun 7 17:00:53 2025 GMT
Not After : Jun 8 17:00:53 2025 GMT
Subject: CN=8ea730f41b5a976c49c3d4be180433435da921e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:7c:2e:33:8d:83:d8:22:63:c1:19:7d:00:
97:2d:b4:57:ff:d6:b1:9d:6e:a5:3f:e3:f9:ed:b1:
a7:60:fe:b2:90:66:59:93:d7:30:7e:0b:2a:89:20:
e8:22:c3:b4:ca:aa:73:bd:05:f2:66:df:fc:82:5e:
69:1e:3a:0c:c5:f1:0a:72:db:ae:34:f4:1a:4e:84:
7c:87:fb:46:4f:2b:b2:95:11:b2:89:a3:03:fd:b8:
26:0e:04:9e:4e:2a:8a:4d:f8:09:6d:e5:f9:b6:60:
15:05:3f:bf:4e:c0:f3:b0:39:1a:34:3b:fc:62:5a:
ee:61:47:e6:91:04:4a:2c:c2:ae:b9:50:72:d0:51:
5c:48:25:02:f4:1f:62:f8:53:1a:45:f4:b4:62:51:
b1:8b:ef:7e:b8:79:14:c9:e5:69:49:f4:c6:18:3c:
13:06:0b:ad:f0:55:12:78:24:70:8d:44:eb:65:1c:
d6:6a:93:01:9f:a2:f0:01:5d:6f:a3:04:39:b5:1b:
b4:de:02:8c:68:6f:b7:5c:0c:dc:eb:75:5a:03:b8:
c2:32:1d:5f:13:b1:d6:71:cd:8b:03:72:09:52:68:
2f:d5:46:b1:03:1e:98:fd:38:c3:ac:75:cc:02:df:
9a:af:48:89:dd:3b:76:78:95:81:5d:38:93:a7:14:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:30:F4:1B:5A:97:6C:49:C3:D4:BE:18:04:33:43:5D:A9:21:E4
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b7:a2:7a:84:a9:0f:d2:31:23:7e:d3:51:40:e0:c8:48:bc:
e1:96:1a:d8:45:41:2c:ce:62:46:40:ff:c0:aa:05:37:70:43:
a4:f2:72:a3:97:98:16:c5:f3:d6:9b:70:28:8e:ee:72:01:62:
94:72:18:00:f9:5c:1e:4b:78:f9:30:c6:32:30:63:ce:14:ea:
b4:b7:44:39:f5:f1:66:41:c8:1e:c4:e8:66:c7:7d:3b:bb:4f:
c7:d6:a9:91:7f:ac:a0:fc:e2:4d:76:8c:3b:08:d3:6a:8c:c6:
d2:8f:78:33:02:02:75:f6:50:c8:c0:6e:ae:ee:3e:48:1c:91:
7a:9d:84:ad:0f:3a:c2:f4:c1:42:a2:04:0a:49:73:e9:de:57:
0d:7a:44:6e:6a:fc:53:93:0a:6b:27:18:ab:46:da:fc:00:2b:
50:fc:e4:3e:99:a3:06:61:bc:72:26:60:cf:74:0b:52:e7:c7:
77:6d:e7:5e:f4:1e:ca:2c:19:23:93:12:98:ca:07:8a:47:dd:
dc:00:5a:34:0c:cc:3a:4b:c2:2c:56:2d:bf:fa:57:7f:d9:b4:
f6:d1:9a:62:9f:97:e1:3e:ea:3a:9d:70:3a:b8:e9:00:97:08:
0e:59:80:4b:c9:ed:9f:fa:94:f6:9f:98:6a:b9:2b:89:aa:74:
68:99:94:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:38 2025 by rpki-client