Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: hov+hzH0frTCfum3Gaetoi+ssWpRfAY0UyiPZMGJpFY=
Subject key identifier: 8E:87:54:18:6F:CE:B8:1E:41:6F:0A:54:FD:27:DF:BF:94:77:AA:78
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019754C76EE2F38A80567B2DBE0E83B652E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 14E0
Signing time: Mon 09 Jun 2025 13:00:45 +0000
Manifest this update: Mon 09 Jun 2025 13:00:45 +0000
Manifest next update: Tue 10 Jun 2025 13:00:45 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: kRI1J4niKv4qr6eJSEH9AYEuix4jsqbaSN9yrll69IE=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:6e:e2:f3:8a:80:56:7b:2d:be:0e:83:b6:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jun 9 13:00:45 2025 GMT
Not After : Jun 10 13:00:45 2025 GMT
Subject: CN=8e8754186fceb81e416f0a54fd27dfbf9477aa78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:7c:ec:13:73:a8:eb:f0:40:0e:48:51:16:
41:b1:68:85:3e:91:01:89:b3:84:e4:ce:4f:1f:61:
d4:2d:83:33:02:ec:f2:0d:70:cb:4f:49:e7:e2:29:
a7:7f:24:98:80:b6:42:f3:74:5f:3c:d7:a4:d9:6c:
6e:f4:13:7f:20:00:fa:23:78:0c:84:24:59:0b:39:
df:2f:c0:7a:73:0c:52:b1:c3:83:4a:7c:72:ee:5e:
39:7b:f8:25:a3:70:41:21:27:4c:4b:23:89:f0:18:
85:f1:71:3e:45:76:e0:f2:ca:5d:73:66:56:dc:9e:
6e:1c:6b:3f:d0:33:58:37:12:28:94:51:29:cb:e9:
ca:3d:f4:6b:77:e0:6f:ee:75:9d:61:db:51:7e:e3:
eb:59:b1:1a:68:1a:3f:bf:54:76:df:5c:b6:15:71:
33:88:10:67:67:e7:f4:32:2b:5a:69:02:cd:e7:dc:
60:50:5c:47:7c:2b:92:3d:04:39:38:bb:3d:27:b0:
d4:26:34:09:6c:2b:f9:ec:3f:43:f5:81:5f:8b:cd:
a3:6d:13:9c:ce:d7:79:d6:53:e8:d9:1e:ef:68:2a:
e8:bb:ba:a6:35:15:da:fd:11:b3:1b:08:bc:e6:90:
eb:a0:2b:de:32:c6:b2:95:46:06:26:51:b6:9d:bc:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:87:54:18:6F:CE:B8:1E:41:6F:0A:54:FD:27:DF:BF:94:77:AA:78
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:dd:0b:18:69:d4:2a:87:05:57:ab:46:f9:ac:6e:37:14:04:
80:77:40:3e:d4:a4:8c:ec:44:3a:ca:c1:8d:96:b9:9e:8b:72:
5b:f9:0d:31:c9:2c:92:27:a4:0a:34:c3:99:c0:51:7a:99:4b:
aa:fd:a1:2a:14:8a:6b:a1:0f:98:94:35:8a:a7:51:ab:c6:dd:
5b:71:78:a6:be:0d:90:04:39:fd:15:34:b1:33:97:59:4e:73:
a6:54:b7:50:8c:3f:a2:b7:9a:a9:fb:9b:79:73:6a:66:aa:11:
89:98:a0:d0:88:14:d5:dd:90:46:00:d4:7f:c6:a0:0a:dd:66:
8a:0b:01:1d:4a:ab:32:83:cd:5c:41:6c:21:4f:12:44:81:e1:
8e:7f:e6:a7:8c:a8:87:04:ee:a6:bc:ed:dd:bf:05:ef:62:41:
b0:2c:ed:fb:a3:4f:39:93:51:ae:4e:c8:b0:e7:6d:c5:b5:9e:
f7:a5:59:f4:e0:4f:b9:07:7f:03:ba:9f:f2:c0:c7:8d:3a:51:
d9:09:2c:ec:6f:4b:b3:64:ea:bd:7d:13:60:4b:6a:ec:f0:d5:
89:30:b4:d2:cb:19:41:7d:d1:6a:9f:e6:78:0a:88:46:1d:fd:
e4:26:06:00:0f:a7:61:e4:4c:34:ea:a2:07:00:ba:d5:04:ca:
06:39:a3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:02:28 2025 by rpki-client