Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: fSdFO8laN8NO4Ml+zwu+0Vl1Xmqz3EWnkbhRCfo2I7U=
Subject key identifier: E7:37:67:6F:21:DF:02:B8:73:F7:CB:A6:9E:7E:83:5C:04:93:A6:D4
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 01974B8D967DAB4F8113A9A9BCA3DA8AFDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 038C
Signing time: Sat 07 Jun 2025 18:00:59 +0000
Manifest this update: Sat 07 Jun 2025 18:00:59 +0000
Manifest next update: Sun 08 Jun 2025 18:00:59 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: Sr8mO94FYW5tBZbA28/ZA5oz4n6lt93PjZxXYr+D9q4=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:96:7d:ab:4f:81:13:a9:a9:bc:a3:da:8a:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Jun 7 18:00:59 2025 GMT
Not After : Jun 8 18:00:59 2025 GMT
Subject: CN=e737676f21df02b873f7cba69e7e835c0493a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:38:44:ca:11:85:0e:aa:6b:56:f8:a8:f6:
92:f1:e8:82:4c:33:74:dc:9f:b5:58:6a:80:9f:6a:
a2:de:f0:10:22:29:54:da:a7:8f:1e:46:1b:66:b9:
b6:d0:41:05:27:69:62:31:16:fc:a3:5e:a1:d7:33:
a2:bd:07:0e:d0:bf:01:92:38:4a:54:1e:81:2d:92:
44:b7:08:15:84:0b:b6:19:52:d4:3d:e3:6f:ec:10:
5f:4f:d3:4c:d1:d5:74:72:db:9a:36:be:bf:92:83:
33:fc:6a:4b:56:ec:53:53:b5:2b:f3:23:50:c6:bf:
64:10:40:3b:11:b5:29:d4:cb:91:e9:aa:06:fe:c6:
30:83:91:3c:64:cc:18:f9:f2:1d:46:31:7a:af:f5:
01:61:27:03:2f:e9:06:9e:e0:8e:d2:8d:4d:29:2c:
ad:30:f0:e0:fb:e4:92:53:9f:94:9e:d7:f6:90:04:
ec:66:68:6c:3e:a9:d8:5a:9f:36:d3:87:56:2c:a3:
31:68:04:ad:3c:62:e6:ac:83:f1:77:d3:54:34:6d:
73:2c:f0:2e:e5:2e:b9:fb:23:28:25:4d:c3:e0:b9:
75:80:8a:b4:2a:ad:3f:99:86:dd:3a:90:c3:16:70:
a1:39:fb:5f:b8:31:32:7c:33:b8:f9:e9:78:c6:fe:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:67:6F:21:DF:02:B8:73:F7:CB:A6:9E:7E:83:5C:04:93:A6:D4
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:70:ca:05:dd:ee:2f:00:8f:ef:2c:1a:95:10:e1:1b:a4:0a:
58:b7:38:4b:91:ea:5d:9a:d4:8c:07:24:34:87:9b:81:6f:25:
1c:e5:9e:7f:cf:d0:d4:ae:73:02:a7:d3:ca:7d:73:ac:91:0a:
7c:1a:1d:56:f5:c9:1e:fe:aa:77:01:fb:b4:2b:49:03:a9:c6:
be:69:c1:97:f7:ac:b8:a0:1e:0a:7e:9f:95:39:04:33:4c:ef:
5a:6e:68:0a:d5:6d:16:17:df:82:a5:24:7e:d5:6b:9f:cc:87:
0c:1a:b5:1e:6d:38:d6:b4:d4:9e:aa:04:20:d8:b2:2b:61:06:
f8:de:7e:bc:bf:61:72:fa:6c:e4:9a:cf:ca:d1:81:17:64:1e:
ea:27:fb:33:5f:f1:81:a2:6d:bf:40:55:1e:aa:66:73:02:8c:
fa:54:c7:64:a6:1e:c9:00:2b:16:87:9d:f2:41:5f:29:50:eb:
2d:ee:56:57:dd:a3:66:88:8e:73:3d:53:d7:62:b9:7d:26:75:
ba:05:8f:73:15:e4:f2:d4:0a:ff:39:c6:f5:e4:85:bb:d8:91:
c0:b6:ac:ab:6b:36:82:fe:7a:89:5d:33:bc:1d:8c:a6:e3:00:
58:d2:5d:cb:44:49:7d:bd:a0:f7:f4:4c:dd:d8:be:cc:15:95:
b1:25:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:58 2025 by rpki-client