Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File: 1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier: qX5jlWG0ACqO3BLeEgHToMGtQqZnh4PfLCxJC4u8Hok=
Subject key identifier: 68:24:60:CF:D2:A3:AD:F2:BB:EC:5B:3E:DE:FD:62:B8:B0:15:82:83
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial: 0197B77CCD1597B7A81D2D574D4CA96625BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: eOpHB4+L6DMKTQjEp5kt1pZq/UGkdbUsD6x3tLu55to=)
2: LNGDPhvWhaUufvaPWy4zm2txK38.roa (hash: E9Pi4pJgm1TVZXCieOIM/HMpQ/NRLxBbn/SRBFS6LQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:cd:15:97:b7:a8:1d:2d:57:4d:4c:a9:66:25:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=682460cfd2a3adf2bbec5b3edefd62b8b0158283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:94:ce:55:ea:4f:2a:e6:4d:10:36:50:ee:
90:d6:6c:30:cb:f6:0b:1b:f2:f1:c4:25:82:d9:ef:
02:5c:4a:a2:f9:91:34:4d:67:4c:48:74:c8:12:ee:
fc:3c:94:d2:95:38:6c:ed:b1:5e:ed:e2:b5:b5:57:
6b:19:f7:52:4b:e7:dc:f5:e8:b3:e6:9b:29:cd:bf:
4d:8d:a3:6d:8d:2d:b0:40:01:f3:fb:84:c4:01:12:
3e:b8:7b:d8:d7:85:a5:79:86:87:9b:61:85:03:16:
8e:dd:e0:35:dd:6b:24:36:8e:3c:27:6d:53:d4:13:
ec:82:a3:c0:27:58:f8:7e:e4:da:3c:ac:c5:f3:ac:
ca:1a:04:ad:a9:2e:9f:e6:1b:2f:ac:85:90:ad:55:
00:5c:d4:3e:77:66:83:cf:72:4b:05:1d:b3:2a:82:
d9:6d:9f:32:a1:e6:6e:0c:87:b8:6f:f9:8a:55:da:
44:10:19:ff:05:80:4c:4c:2e:bd:63:ed:28:1a:42:
48:80:fe:f7:a4:34:b5:d7:12:5d:7f:1e:92:f3:42:
fd:22:30:a7:2b:22:e4:97:15:53:d4:51:bb:30:f2:
99:10:23:b3:18:9e:c6:cf:a3:fc:26:32:85:d5:a7:
a6:10:cc:85:a7:3e:ba:20:4f:43:c4:85:dd:d7:fe:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:24:60:CF:D2:A3:AD:F2:BB:EC:5B:3E:DE:FD:62:B8:B0:15:82:83
X509v3 Authority Key Identifier:
keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ef:9e:2d:04:d8:e3:c9:3e:07:6a:fc:d4:ea:ac:4d:d5:90:
74:82:7c:cd:5c:18:70:1b:b2:51:43:d0:5e:d5:2c:84:0e:75:
f6:a6:c9:bd:66:24:71:fb:cb:d5:14:73:a3:07:93:77:ac:50:
58:8f:1a:c3:85:39:65:a9:23:f7:30:b6:ea:2a:56:f2:a0:c7:
cb:d1:b4:21:df:84:31:e5:f6:95:30:84:5f:be:73:af:b6:c0:
7b:fa:8d:d2:c0:da:49:e9:0c:b8:26:48:96:18:3c:ea:04:06:
c3:6e:bf:7e:40:b2:64:84:0a:63:38:2e:d4:4c:6b:34:7e:d2:
81:7d:70:88:76:2d:b3:3a:12:69:04:9a:9c:6b:59:96:92:2f:
5c:bf:df:bd:f8:ce:43:8a:11:84:b1:8a:e5:92:00:61:5c:da:
50:15:56:62:8f:c6:eb:13:71:22:21:b9:08:18:0f:5a:51:90:
4d:f5:97:a0:f8:83:82:4a:1e:1b:66:13:f2:52:97:17:24:79:
26:60:ab:48:be:92:f3:03:ab:d0:40:ce:83:af:e8:bc:dc:e4:
a2:b7:e8:dc:60:ca:f4:11:01:c7:d2:93:3f:d0:19:aa:0b:25:
cb:49:6f:f4:3d:dc:6a:71:cf:96:c5:13:17:72:28:1e:fc:5b:
44:75:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:16 2025 by rpki-client