Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: RtQjrJGWvLCuxdd6AuDTtVgut6t+wu9w5eNHh40IEoQ=
Subject key identifier: 59:76:F5:43:E2:C2:0C:33:9D:E1:B9:C4:F6:17:3F:2F:0D:59:70:BA
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 01976AE16727DC4967DB95263F7A9DB3D03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 20:00:46 +0000
Manifest this update: Fri 13 Jun 2025 20:00:46 +0000
Manifest next update: Sat 14 Jun 2025 20:00:46 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: 1oDRqYGY2FgWbMhoahfFFuMK9PLPFIHzdkkyROfi5Uc=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:e1:67:27:dc:49:67:db:95:26:3f:7a:9d:b3:d0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Jun 13 20:00:46 2025 GMT
Not After : Jun 14 20:00:46 2025 GMT
Subject: CN=5976f543e2c20c339de1b9c4f6173f2f0d5970ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:1e:e0:62:80:65:d2:e6:a2:55:41:c1:93:
bd:a5:c0:e1:cc:28:ac:44:7a:4e:da:c4:01:c0:91:
34:95:7e:a6:03:bb:af:f6:a6:48:bd:c6:15:e6:b8:
d8:b6:99:e9:ab:8b:47:8a:9f:19:44:91:ab:b4:b7:
95:31:1f:66:34:fc:41:b4:fc:3a:4b:e3:09:06:44:
51:d9:cf:cc:9b:17:58:10:a0:17:81:83:aa:cf:97:
fe:37:0c:2e:4e:6d:03:48:7f:4d:08:a5:90:1b:cb:
26:7b:f5:c5:4e:8d:ef:05:1d:e2:b0:23:1d:5f:2f:
8b:60:0a:c0:14:f1:3f:a3:17:44:6c:e2:f9:50:de:
2a:25:f0:c5:85:fb:33:89:c8:80:a4:1a:3c:2f:84:
8f:7e:88:9c:ab:0c:8d:b5:59:fc:ed:f5:7d:8f:70:
6a:df:30:b4:2a:2d:ab:70:26:84:a3:fc:48:c4:60:
5f:03:23:89:60:ce:37:e4:d5:55:cb:0f:49:9d:47:
d9:aa:c4:0f:5d:93:3d:fb:6d:8f:58:22:87:ff:fc:
83:d8:90:c8:a9:00:a9:75:6f:79:93:dd:24:f4:e4:
70:7a:85:91:43:b4:c8:e9:de:17:c3:d8:e5:fa:80:
01:07:a4:3f:e1:72:28:47:c6:e2:85:56:34:29:0e:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:F5:43:E2:C2:0C:33:9D:E1:B9:C4:F6:17:3F:2F:0D:59:70:BA
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:75:26:4d:8e:77:c8:f3:09:4c:e5:19:7e:11:4b:d5:d8:c1:
cf:7a:f2:0f:97:3e:41:88:65:05:28:2d:61:7d:17:26:4a:27:
62:20:23:a2:6c:2c:a9:fd:0f:c6:20:96:a9:52:ef:49:ab:26:
73:cc:bf:02:2a:94:ba:b2:5d:f8:6e:f1:5e:59:13:19:31:60:
6e:c8:78:df:4c:13:23:77:2f:25:08:13:e4:51:70:38:78:f3:
f8:ac:17:51:8b:86:3b:5c:87:a2:15:28:41:95:8d:f7:17:bb:
14:cb:fe:89:cb:29:19:7b:1f:97:72:1e:01:c9:51:fc:f6:02:
c1:d7:e9:3c:48:82:77:03:f9:0f:0b:e0:ba:9a:ca:f7:84:5e:
29:68:61:1e:17:10:31:11:4a:af:94:1c:21:bf:bd:27:5a:49:
f8:4e:2d:06:2d:d8:df:d4:1a:1a:db:c1:9a:96:c5:ca:58:71:
77:ec:17:e1:4f:6d:70:1d:e1:e4:57:3d:fb:0e:fd:50:e5:a3:
45:06:3f:bf:38:9f:0b:5b:d0:4d:cd:99:1b:5b:85:6d:ca:e9:
d0:0e:7a:eb:d3:bd:bb:d8:fe:da:50:31:f9:0d:ca:66:91:fc:
2b:bf:37:e3:66:57:d5:cc:8a:a1:1b:35:3b:12:2d:8f:9c:40:
81:c4:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:55:15 2025 by rpki-client