Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: p157+2e2lAXlRkRGxR3hK3BlhLZZdq685uHAAXBl+B4=
Subject key identifier: 8E:67:2C:07:64:9C:BF:A7:0F:2C:7E:3B:31:C7:DC:C3:48:D5:F9:90
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 0197B6D7BEED961FAB8C1B2767DEB5F8A896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:01:21 +0000
Manifest this update: Sat 28 Jun 2025 14:01:21 +0000
Manifest next update: Sun 29 Jun 2025 14:01:21 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: Q53CC046H4QXmGb/j3cUw68k6qlMUWmnXRyQMy9KCdE=)
2: Rvoozr9-AEirIvl3H78yEjywI3M.roa (hash: C8PH+7JgTNI/2g3gAC+RhVDcD73858pmRmw+QrCbn9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:be:ed:96:1f:ab:8c:1b:27:67:de:b5:f8:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Jun 28 14:01:21 2025 GMT
Not After : Jun 29 14:01:21 2025 GMT
Subject: CN=8e672c07649cbfa70f2c7e3b31c7dcc348d5f990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:b3:5d:09:7b:f4:71:18:dc:7c:e2:f3:fe:
58:2f:5b:65:ca:a3:12:69:65:d5:83:91:2a:61:b2:
b4:f0:aa:9d:ca:88:f1:ce:c0:57:e0:31:04:57:e7:
8d:fd:89:c1:d2:c2:02:f0:f5:a9:01:d5:33:88:6c:
55:dd:73:e1:68:f2:2b:82:50:20:e1:46:34:a5:06:
b1:c4:aa:8a:ef:75:30:66:f0:08:27:51:7e:0b:16:
76:08:49:80:9a:00:44:0c:c6:74:49:b0:ee:81:50:
eb:8b:36:d8:39:a0:e6:c4:18:77:e4:6c:ea:7d:e2:
7e:01:c5:d3:28:48:a7:d4:63:b3:3d:30:c6:10:00:
62:e0:11:c1:1d:30:12:21:1e:ed:6a:47:d5:fd:3c:
20:2e:17:39:cb:24:92:6b:8e:42:f3:83:26:e6:df:
02:5e:71:52:37:c3:e7:96:1b:7e:50:23:8d:09:6d:
42:d1:f8:d4:b7:2a:09:48:27:92:93:ee:b3:8f:04:
dc:d0:d9:5d:c2:78:53:5f:d7:5b:1f:32:44:4c:2b:
ea:05:23:be:99:f6:c0:f0:1f:fa:16:78:33:76:d5:
5e:b0:51:d1:5b:58:be:02:23:44:7c:4b:8d:e8:e0:
a3:3e:8a:54:f3:d6:61:cb:3a:7e:04:c4:75:b0:51:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:67:2C:07:64:9C:BF:A7:0F:2C:7E:3B:31:C7:DC:C3:48:D5:F9:90
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:88:07:02:10:90:8f:64:fc:e3:59:94:ff:24:fe:8a:78:46:
15:22:8d:af:ff:34:65:9b:e7:0a:8c:d1:7e:b9:ad:d2:4c:a6:
10:dd:b8:07:9f:76:be:95:6b:ce:33:94:a8:33:3b:5b:4e:74:
be:ae:5e:aa:5e:6f:6c:78:e9:9a:19:39:5b:9b:92:c5:6a:1a:
83:5c:eb:6b:38:47:32:27:8b:d9:17:e9:30:34:89:d7:9e:f0:
fd:1e:30:e9:b6:e8:d0:3c:83:20:1d:e5:1e:9a:04:b7:44:f5:
5f:56:6c:0f:85:f5:1f:19:35:9d:fe:b6:68:66:5a:75:d5:62:
a2:8f:b0:dc:01:98:d5:87:16:dc:79:43:1d:dc:2b:ce:61:56:
a0:0b:fd:af:ec:5d:1a:1f:ad:cb:40:59:37:c2:30:fd:61:db:
2e:1c:5b:21:06:af:4b:f4:9b:6a:1f:84:ab:3c:f3:0b:83:15:
f2:00:7c:46:e1:7a:b5:df:78:57:d7:a4:33:0d:c4:a7:47:c5:
92:71:dd:24:d8:b8:26:f1:32:15:0a:07:01:c4:fb:48:3e:35:
42:a3:57:b4:22:d3:15:f5:aa:78:a2:3e:4c:c4:de:50:7a:1d:
c0:a2:d3:44:3e:4c:da:51:3d:b2:2e:e8:93:52:0c:cc:eb:ae:
4f:10:5e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:22 2025 by rpki-client