Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: 9kQKXTVUhnjzxpHiAh8yPAXg3+5pjJ8I95rCkgIScSc=
Subject key identifier: 78:95:01:2C:7B:9A:9D:12:1C:59:23:9D:E8:25:1B:95:08:56:0A:E2
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 01974AE83CFF8F769E151B04AE35D0D60A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:23 +0000
Manifest this update: Sat 07 Jun 2025 15:00:23 +0000
Manifest next update: Sun 08 Jun 2025 15:00:23 +0000
Files and hashes: 1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: bN7WvbceKu9s6FIWTjTuGwllAOOM9c8KqZ6smOO4yNA=)
2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:3c:ff:8f:76:9e:15:1b:04:ae:35:d0:d6:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Jun 7 15:00:23 2025 GMT
Not After : Jun 8 15:00:23 2025 GMT
Subject: CN=7895012c7b9a9d121c59239de8251b9508560ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:50:88:b1:e9:41:7e:b3:fb:c7:08:9c:93:
c7:89:c2:32:32:e7:1d:33:4a:24:eb:85:24:b8:41:
35:d7:5c:f5:18:80:12:03:9c:fc:49:ee:be:92:f1:
a7:c9:e1:73:28:7e:35:79:91:95:15:3b:b6:af:0b:
90:b7:2a:d1:52:46:62:5a:0c:cc:5f:57:2f:8d:97:
75:92:a0:f6:f4:67:33:a3:d5:48:71:60:bc:7e:8f:
1f:70:2e:f7:39:b9:7e:37:1d:1e:fe:94:90:b5:6f:
a9:08:9c:96:7c:f8:92:ff:0e:7b:33:6a:0d:bf:37:
15:6d:06:78:c5:f3:e5:02:9b:28:04:e1:02:8e:5a:
50:18:2d:d7:4c:a1:db:9e:45:37:bb:5b:3b:dd:cf:
d2:c8:08:5a:5f:09:4f:61:c2:69:33:56:bb:4d:7b:
2e:e0:1d:1d:5b:a9:df:19:9e:6b:6c:dc:5a:86:cc:
18:5e:4e:9d:1c:02:64:08:0b:4e:34:06:39:ec:6c:
cb:72:34:59:23:29:ed:a0:50:35:29:22:b7:18:21:
4a:65:11:1a:5b:74:7d:df:01:a1:ee:d2:34:ad:57:
7a:a8:75:eb:2e:28:8b:49:11:b7:59:e8:15:97:1e:
b3:41:8a:00:3b:81:e9:10:fa:ed:bc:24:79:ed:09:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:01:2C:7B:9A:9D:12:1C:59:23:9D:E8:25:1B:95:08:56:0A:E2
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d8:d4:04:97:4f:96:87:6b:97:9b:b4:dc:cb:34:d8:03:c1:
8a:2b:05:81:2c:ed:6b:b4:7b:c7:68:d5:a3:f6:ac:e5:8c:50:
54:f6:01:2b:3f:1d:38:01:48:fd:43:1c:f3:be:a7:8b:b9:02:
42:c0:8a:d9:2e:5c:95:00:35:ec:07:7d:2a:61:ae:9d:22:38:
e9:4f:e3:14:dd:47:4a:46:d8:43:a4:14:e6:93:85:5b:53:76:
a7:2a:e0:65:fa:fe:d3:11:50:81:39:5c:f5:f2:ac:ec:cc:6e:
e8:3d:b0:bd:74:f9:5a:03:53:1a:53:5b:04:92:93:09:32:a9:
eb:31:d6:9f:4a:55:b7:c3:69:ab:3e:b3:8d:0d:66:cd:da:a0:
dc:b6:fb:d8:ae:c7:b2:23:8e:bc:1d:d2:01:59:ed:a4:69:a7:
65:73:c9:5a:df:7b:52:58:72:b4:76:13:a6:f3:59:da:f8:34:
59:35:e0:21:7a:8e:42:7f:04:43:bb:4a:92:d8:78:b8:07:11:
c3:5a:78:39:ff:e7:1d:4d:04:86:ea:4b:c0:2f:bc:31:c2:3c:
68:59:4c:1f:9b:69:e4:fe:8b:cc:ee:5a:18:d3:d4:63:97:4b:
c7:02:f3:84:bb:71:e6:55:a6:e3:09:67:20:e6:92:3e:2f:44:
d7:06:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:26:28 2025 by rpki-client