Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: 69Ci9Huig5YLasF0Jdzv/+nZHzzcyQhDO5qjxvgrN/0=
Subject key identifier: 13:E5:A9:A5:00:E6:6D:AE:B0:A1:88:13:02:72:47:59:81:CE:29:D0
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 01974BFB4AC18CEF1EB999F70B2406F8530E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 0FF8
Signing time: Sat 07 Jun 2025 20:00:49 +0000
Manifest this update: Sat 07 Jun 2025 20:00:49 +0000
Manifest next update: Sun 08 Jun 2025 20:00:49 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: P49jkIvJDvuz//X9Hs6HZwofO2ACn+Y0iKGZmQjcSrg=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:4a:c1:8c:ef:1e:b9:99:f7:0b:24:06:f8:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Jun 7 20:00:49 2025 GMT
Not After : Jun 8 20:00:49 2025 GMT
Subject: CN=13e5a9a500e66daeb0a188130272475981ce29d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5e:52:13:84:19:d5:ca:b8:21:3b:f8:2c:63:
c1:fb:01:0b:3b:f8:55:e9:fe:86:2a:a7:1a:81:ec:
7c:82:4c:b6:b0:2a:61:02:44:bb:65:4e:be:b8:18:
23:e9:ac:a4:7d:da:0d:d6:19:f8:97:46:3d:86:fd:
5a:f9:9e:3e:cc:45:2b:88:ac:59:4c:11:c0:38:51:
0f:ef:18:be:a1:13:60:4b:bc:49:c2:97:13:1f:8e:
5e:11:75:16:03:22:8a:6e:a6:f1:9d:ae:d0:c2:e1:
dc:81:1d:3f:d7:7f:20:95:b4:9b:67:a4:43:7f:d0:
e4:16:b9:6d:fd:b2:e9:8a:4e:f7:64:83:97:ee:93:
a0:6c:d1:a3:e1:95:dd:17:a0:28:f0:49:42:40:6b:
84:f3:9e:04:05:d9:72:76:27:14:60:80:28:51:6f:
08:85:9c:ec:8e:d9:9e:31:1b:ec:91:52:2f:7d:8c:
5b:a7:27:0f:b6:5b:7a:3a:cf:fb:47:27:37:cf:cd:
94:73:ab:53:02:8f:21:b0:a5:8d:f6:da:96:b1:ca:
89:17:0d:a7:66:b6:4a:41:bc:60:b3:89:94:5c:a2:
1d:ef:a3:db:01:fc:33:72:75:19:a3:73:ba:72:3d:
18:6c:7f:13:ca:b9:c9:c6:ac:de:10:46:99:09:87:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:A9:A5:00:E6:6D:AE:B0:A1:88:13:02:72:47:59:81:CE:29:D0
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:64:6d:60:29:13:cc:2a:f1:2a:2d:9a:35:5d:f6:6c:7d:
e0:c4:3d:d1:22:2a:d8:af:1f:7c:f5:22:9e:ca:5f:45:3f:1c:
bf:c9:b1:b5:03:40:a2:48:2c:d4:4f:51:28:d0:69:9d:1d:23:
b7:f4:4c:e3:29:41:72:ff:12:bb:ad:7e:d4:ad:22:17:4d:e7:
ae:42:a8:6f:49:a0:d4:7b:0f:de:6f:6e:86:85:87:59:96:7a:
92:79:00:ae:95:17:98:3f:94:e2:43:01:08:b5:c4:26:a7:69:
2e:14:c1:43:4c:bb:46:cf:f1:c0:cc:2f:05:4a:24:4c:f0:5e:
9e:df:b6:71:a9:1a:e7:82:20:49:dd:3a:48:2f:ff:ee:2e:58:
6c:06:6d:ec:bd:3c:7d:bb:82:f0:68:1e:b1:45:b3:7e:94:68:
89:7c:60:49:80:0b:f0:62:2f:b2:06:58:67:4c:8b:f7:ed:86:
82:5b:aa:98:4e:d7:26:39:41:6f:85:89:92:b8:d9:81:85:6b:
6f:b0:a2:8f:dc:67:d3:08:84:a7:db:14:39:13:7d:57:a5:97:
aa:70:94:fb:37:91:90:9c:13:76:d0:53:2d:db:09:b6:99:f1:
73:cc:06:50:58:7a:f4:77:7e:76:e5:f4:52:94:54:c7:59:fe:
db:08:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:28 2025 by rpki-client