Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: OwfkaGXwivXEjBEmyvbydiUrtlij41kS8Dd7G3oiS+o=
Subject key identifier: 5D:93:C4:07:12:11:1B:F1:09:E8:3F:8B:FA:4C:24:E6:7C:A5:39:E0
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 0197B7EA9C92B03271DA9D12C50AF528F4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:35 +0000
Manifest this update: Sat 28 Jun 2025 19:01:35 +0000
Manifest next update: Sun 29 Jun 2025 19:01:35 +0000
Files and hashes: 1: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
2: MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa (hash: 5TORTeqJiwMyc0YYZ+uZpy4vEZ3dc7NK/jSlgDV+/8Q=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: uGZLMOaue0hZ5t1WegZ4+iWWwOZrZj1LGD0Wg1jRJOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9c:92:b0:32:71:da:9d:12:c5:0a:f5:28:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Jun 28 19:01:35 2025 GMT
Not After : Jun 29 19:01:35 2025 GMT
Subject: CN=5d93c40712111bf109e83f8bfa4c24e67ca539e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:bd:34:2a:cb:e6:30:cf:3b:64:77:7e:88:
71:c0:d1:80:74:87:6c:ec:f5:6e:98:3c:49:bb:d5:
42:6d:d2:77:c5:eb:80:4f:cd:7f:8e:f5:f4:a1:59:
49:b8:3f:b7:aa:ef:2f:7f:b7:ff:93:18:09:02:50:
e8:76:93:1a:ab:49:67:4d:ee:1b:3d:4f:92:81:37:
cb:bd:e3:c3:8b:7a:aa:ff:93:c8:20:09:9d:a1:2d:
50:bb:8d:e4:ca:c9:5a:15:3f:87:a9:04:e3:01:4e:
67:7c:49:a9:2e:f3:e9:37:0d:c2:cf:a9:fa:fc:77:
17:c8:28:0c:e2:88:d1:78:bb:6c:c8:88:80:97:d6:
07:f1:67:6f:84:3b:24:3f:2d:80:bd:69:32:6b:6d:
7b:69:9d:f4:91:06:a0:56:a9:6a:56:b9:83:71:18:
9b:a6:8c:e7:96:4c:23:54:46:38:ca:30:ee:ac:f6:
1a:aa:61:8f:c7:e5:16:ac:79:8d:ac:69:d7:a2:57:
af:34:85:23:a7:68:68:81:1a:87:0d:19:7e:75:32:
cb:4a:4e:2b:9b:11:98:b3:4a:ad:a2:65:83:2a:cc:
06:68:ce:0d:3b:a0:a8:2c:86:e5:4a:07:e2:67:53:
a0:51:57:ec:a4:f7:a3:56:b3:0d:b3:c6:7e:24:ab:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:C4:07:12:11:1B:F1:09:E8:3F:8B:FA:4C:24:E6:7C:A5:39:E0
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ed:f3:64:8f:b3:b3:8a:43:37:a6:fe:a8:36:47:3f:22:33:
b3:b5:fb:56:c3:74:7f:d2:22:fd:9b:1d:a3:3e:09:24:b0:86:
12:97:48:ad:ab:c4:3b:7f:e5:3d:78:8e:d3:68:1b:ff:75:2c:
84:ae:17:72:e2:98:4d:c5:16:c3:48:dc:73:d3:ea:16:18:63:
3e:2a:c8:2f:6e:8d:c7:79:36:21:3d:89:10:18:36:8b:f9:0e:
b6:65:04:c2:74:20:4c:26:11:6a:37:03:1f:fc:5c:ac:4c:22:
0e:aa:e4:d9:6b:f5:ea:35:f9:21:30:f7:bb:a6:56:a2:0d:97:
a3:dc:11:e6:18:1c:d9:7c:93:79:02:8b:d4:53:6d:b6:07:ba:
67:b7:87:19:1c:22:67:ca:9c:93:c6:ff:ea:c0:05:60:42:ac:
2d:90:3e:82:cb:14:54:3c:fc:98:a3:8e:d5:b3:b4:9d:63:0a:
97:2b:fe:dd:94:20:68:b8:58:d6:8c:da:d1:5f:82:32:27:30:
c8:97:6a:1e:cd:4a:e4:f2:71:63:d4:c5:a6:53:ab:06:3f:9f:
1c:bb:67:ac:ad:c6:e2:06:33:71:5b:c6:9d:df:37:3c:f8:7f:
ff:98:58:a2:70:f5:46:50:dc:21:c1:5d:a5:ac:fe:67:a3:58:
cf:53:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:43 2025 by rpki-client