Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: 2H08v3raGPgz+KahKbvuL0lWnB6p22RcIdI0Onqs5Q0=
Subject key identifier: 7B:B1:55:D1:E5:AE:33:3C:C5:26:A2:64:8D:F5:0C:9E:11:95:D3:E6
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 0197B6D799BC23BDA1E367F4DCF7B2E47867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: d0hh4ywqHLulLr+goE7c8yqCGTqpB9vfQtTEoJliMgc=)
4: xVoWPteOkysGzMqfxgi3XvQDa0c.roa (hash: y5AR4qkIxHvuU7VtfK3TX7mIOGmTaWSa06ypi+bML3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:99:bc:23:bd:a1:e3:67:f4:dc:f7:b2:e4:78:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=7bb155d1e5ae333cc526a2648df50c9e1195d3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:c0:0e:93:d8:3c:32:a8:94:68:5e:7b:c8:
ca:b1:f8:fe:a1:64:b5:3d:f9:d6:bc:18:43:d7:ba:
ca:2e:84:26:91:66:7b:d8:3d:b9:37:10:90:45:e7:
c9:de:0b:a9:78:33:02:d1:c3:75:7d:e6:7e:78:fd:
61:82:a1:77:a8:b4:95:91:29:5a:3c:5a:cb:cf:30:
ec:63:56:ac:9a:ca:04:2d:0a:4b:35:c6:b4:a3:c1:
fd:ea:37:4f:88:d9:61:2f:90:56:e4:ab:f4:5a:be:
83:61:5e:2d:42:79:46:fb:0c:3e:8c:50:c0:23:ea:
7f:96:5f:fb:e7:6a:a8:4a:fe:8c:b8:f3:87:78:c7:
f0:83:29:db:ab:b9:94:aa:9e:06:c3:70:da:ea:4c:
19:38:ad:e6:73:3d:b0:fc:c7:f9:b8:e1:0d:98:0b:
fe:fd:4b:b5:b4:f7:e0:30:fe:37:4a:72:81:cc:71:
ae:a4:39:f2:29:cf:19:f0:80:92:1b:2a:7f:2b:06:
96:12:d9:ea:db:dc:06:f9:46:ec:9a:39:65:9d:b1:
d4:1c:8c:94:8f:57:70:87:cc:16:e2:aa:4f:5a:18:
43:66:33:cc:0a:1e:91:0c:29:aa:36:63:cc:46:77:
63:86:73:8c:4f:6b:c9:21:82:3f:d1:2c:8b:de:28:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:55:D1:E5:AE:33:3C:C5:26:A2:64:8D:F5:0C:9E:11:95:D3:E6
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5a:33:ca:d8:1b:c3:9e:bc:d1:ac:f2:25:2f:6b:a4:c6:2c:
21:3d:13:02:6d:5c:54:72:d8:d8:80:fe:87:a5:a8:b3:15:a7:
41:29:ad:e1:3b:23:44:2b:8b:fb:12:0b:d0:40:c4:82:3b:ea:
50:eb:7b:c8:13:12:aa:42:bc:0e:95:4b:55:62:92:40:1f:34:
69:38:24:8d:2c:29:02:43:57:ef:e8:55:2a:92:c0:ab:38:aa:
d8:89:38:f8:d8:c7:28:a4:14:85:e5:5f:cf:59:77:88:c7:78:
4f:3b:b3:e6:24:fd:60:f1:21:53:87:8c:79:63:2e:52:04:72:
9c:5e:37:f9:17:7a:c9:72:85:ec:d9:4e:ce:87:9f:22:85:d7:
8f:6b:7a:2b:ca:48:87:ca:63:47:39:01:15:e2:c4:0a:ab:81:
88:b9:f7:c4:54:4c:4d:80:8a:61:12:ca:91:8c:10:d2:50:d2:
27:77:47:e5:a0:99:0c:cc:7c:74:ef:3f:91:c4:f7:dd:1e:b4:
bc:e9:a1:3a:7d:ba:5f:14:6c:56:de:78:55:5d:f8:71:4b:29:
7e:bc:fa:56:db:ce:eb:4a:18:fa:96:ae:47:ca:c3:f0:ba:5a:
ae:e1:0f:9e:ce:3c:23:7b:b7:2c:e1:de:78:a3:2c:ff:c6:c5:
29:18:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:32 2025 by rpki-client