Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: SoItj2uaUDJQYg6IyHzw159iaiMYdz0upbYYenietro=
Subject key identifier: E6:02:E4:02:78:52:90:A3:9B:EE:4A:75:30:70:51:74:2D:7A:40:20
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 0197B6A1C15F770A0E98D015EB61145B111B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: spXjB77SYlys74m2EyH7SMDnD6Qxhxf6A1sZen9wgUw=)
2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c1:5f:77:0a:0e:98:d0:15:eb:61:14:5b:11:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=e602e402785290a39bee4a75307051742d7a4020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:c1:fb:9a:43:f7:78:d1:a1:eb:f7:40:9e:
56:d0:9b:b2:9e:75:20:af:e7:87:b1:12:5f:ca:ef:
93:73:7a:7c:3a:e9:92:f3:65:18:66:31:a9:cf:01:
f7:1d:56:22:a1:b0:4f:a5:fc:67:86:4e:9c:24:69:
29:cc:bc:b6:ee:54:67:f5:2d:8d:34:26:d5:0b:32:
8a:90:7d:40:54:8e:2d:c0:d9:2f:d2:65:63:35:db:
48:9b:7d:8a:44:81:67:67:a3:c7:ea:cd:f1:a0:2f:
16:36:66:65:2b:56:5d:56:6f:4c:4a:20:4d:8e:52:
69:c7:26:43:b9:a6:4a:29:bc:da:54:99:ca:b2:6f:
81:85:e8:3a:10:25:fd:e7:6b:66:39:8f:1d:dc:9b:
36:fc:45:29:a2:9c:23:dd:e0:1f:93:09:fe:29:f2:
80:03:7d:9c:63:4b:5a:1a:0a:8a:21:5e:7e:45:d1:
7d:1a:a2:dd:95:dd:05:5e:cd:e6:c6:28:d2:97:89:
02:9e:b6:4f:a2:30:23:49:c5:ee:e6:8d:6b:be:91:
50:1a:24:73:01:a0:80:13:24:bb:76:2d:cd:19:04:
17:fa:e1:e7:0e:10:d6:aa:5f:f5:9a:5a:ae:f3:84:
40:06:eb:81:59:7b:85:70:0c:d5:ac:3c:97:0d:34:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:E4:02:78:52:90:A3:9B:EE:4A:75:30:70:51:74:2D:7A:40:20
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4d:65:7b:01:1c:cf:f9:f2:66:a5:fb:38:b5:98:7c:40:e5:
0d:cc:b4:87:80:ef:d9:2c:c8:5e:2c:7e:ee:3f:aa:bc:0a:28:
ea:e8:64:c9:f8:46:8b:78:d4:63:31:7a:a0:6c:cc:79:1a:e0:
bd:02:ce:56:7c:1e:32:cc:14:25:02:9a:b5:72:3a:f5:c4:25:
d9:99:df:ff:61:7f:ea:d5:0c:8b:73:13:70:8c:3a:53:b4:b6:
13:27:50:49:39:7a:a3:ac:b6:25:d6:fa:a7:31:7d:e4:04:1c:
d0:f0:ce:a6:2d:fc:c4:96:98:2d:70:b7:8b:23:ce:7b:f8:25:
ae:1d:57:f2:c6:06:12:51:fe:70:4c:21:6b:97:3f:e9:a0:38:
19:45:a8:4e:e9:72:f0:09:be:d0:ec:e2:c2:87:32:de:66:5f:
aa:47:46:a5:b0:63:1e:9c:70:b6:32:f2:c1:ca:c9:54:e9:5a:
98:ae:34:82:2a:98:bf:80:ab:57:0c:49:d5:04:69:2b:4b:ab:
f1:07:e3:f8:2d:d9:c3:d6:9b:0a:51:7a:64:aa:af:26:8a:69:
45:23:25:33:50:39:79:fa:b7:7d:1b:3e:b6:ba:ad:37:77:ea:
59:1e:8e:d6:98:a4:4b:37:0c:0e:6b:a2:93:ed:89:6c:73:bd:
a0:4a:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:37 2025 by rpki-client