Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: i2fklonJXcBQvKkX90mx5z2hEhk0MkOQadmcHnyTwc0=
Subject key identifier: EE:79:95:33:F6:41:8E:D9:33:57:E5:91:4F:ED:32:53:40:8E:D7:D1
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 0197B857ACA75B3917C62801D85129E38BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 21:00:42 +0000
Manifest this update: Sat 28 Jun 2025 21:00:42 +0000
Manifest next update: Sun 29 Jun 2025 21:00:42 +0000
Files and hashes: 1: GNCSCL1A69c-2LgbusKDr8P-HCA.roa (hash: QezJGuY+HuavTnAz9wcZ75GKOyiiIHLjidHdvwMDFAM=)
2: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: B8XoJ62bJsp1grPr0FzC8ID88xfS0/0UUEbHaJPp2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:ac:a7:5b:39:17:c6:28:01:d8:51:29:e3:8b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jun 28 21:00:42 2025 GMT
Not After : Jun 29 21:00:42 2025 GMT
Subject: CN=ee799533f6418ed93357e5914fed3253408ed7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:58:36:9e:e9:ce:7c:bc:ac:85:b5:8c:fb:
b3:37:cc:e0:ab:9a:c7:e9:71:1b:e9:38:87:89:14:
d3:3d:cd:6f:69:18:2c:27:88:ed:3f:f4:3a:8e:3a:
c2:15:ec:0e:31:bf:9b:c3:81:65:b0:e6:97:53:50:
60:cc:c2:5f:3b:89:04:6e:21:14:f2:d0:a9:19:17:
7c:5c:50:c9:70:8d:fd:b7:ef:82:d4:91:13:a2:85:
1c:3e:49:a2:41:75:50:95:98:f9:85:3a:f2:6d:d7:
22:0d:56:9f:86:be:42:48:48:03:b8:e3:07:09:ef:
a0:bd:2c:86:f9:d4:3f:64:b6:ec:ea:0e:b0:28:fb:
d4:4e:7b:1b:22:26:02:20:46:29:81:1f:cb:ad:57:
e5:df:66:37:9e:92:cb:9b:96:f5:45:84:a7:bc:46:
48:53:58:10:6b:ef:31:0f:2f:d5:2c:09:6a:10:01:
36:a3:e4:4f:45:9c:0a:d7:53:ed:2a:b5:da:1a:68:
d3:52:77:1f:d6:65:4f:da:2f:96:2c:f7:79:2f:09:
17:79:ff:a0:d4:76:84:40:88:a6:fa:bc:f7:77:5a:
e6:ea:c2:80:16:6f:00:f6:d8:cd:69:c7:88:34:a7:
f7:49:53:f5:8e:ac:17:49:b8:ef:8c:d8:50:d7:01:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:95:33:F6:41:8E:D9:33:57:E5:91:4F:ED:32:53:40:8E:D7:D1
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:37:20:96:f9:89:ad:0b:1b:79:41:d2:e0:02:d6:9c:fa:12:
0b:e2:2e:1a:d6:45:70:b0:92:3c:7a:1b:0c:c6:57:29:5c:21:
af:8a:89:06:6d:e4:43:1e:8f:d6:f0:36:78:fc:a2:89:f7:cf:
05:a1:bc:ae:e3:2d:66:7d:ad:f2:55:b6:b3:93:4c:3a:80:ef:
4e:90:b8:b9:32:f9:5d:9b:8c:05:43:4a:0a:2d:d7:80:51:3c:
71:7a:43:40:f3:3d:b6:72:65:6a:56:25:3e:ce:0a:f0:23:58:
88:da:80:6b:02:4c:18:31:9c:26:4e:8c:b6:41:d9:90:af:40:
e1:46:f7:28:e1:07:a1:1f:af:fc:21:f4:1d:19:29:72:71:80:
cf:93:78:2d:ef:94:f3:d5:32:5f:0e:32:2a:98:5c:de:ca:1d:
ca:90:23:97:72:ec:35:b3:ff:8e:bb:60:ff:97:63:99:91:2c:
c2:af:41:bf:8f:fe:32:1a:e2:94:99:44:07:18:5b:e3:93:fd:
8c:90:94:f1:df:50:48:5e:e4:cc:f1:4a:c6:7e:bc:77:ae:e6:
cf:f3:e8:47:34:ac:ca:90:5b:c2:0d:86:a5:d6:8f:dd:b3:88:
0c:f7:61:94:77:36:4b:e3:16:eb:f5:52:0a:98:16:18:4e:8b:
4c:e6:3a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:27 2025 by rpki-client