Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier: H7oLy+9R3a+f2bwUKAt5uUTK40p3QQ/kX/swCqJ9fN0=
Subject key identifier: 12:29:54:41:61:80:89:45:00:A7:25:65:10:97:F9:F6:23:6C:71:6B
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial: 0197B820DE632A4D861AC9EFD929F81BE116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:00:51 +0000
Manifest this update: Sat 28 Jun 2025 20:00:51 +0000
Manifest next update: Sun 29 Jun 2025 20:00:51 +0000
Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=)
2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: DGnvhA4NwjVGwkuclTCJpjDOJYncy99qRjuYxHDmOag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:de:63:2a:4d:86:1a:c9:ef:d9:29:f8:1b:e1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
Validity
Not Before: Jun 28 20:00:51 2025 GMT
Not After : Jun 29 20:00:51 2025 GMT
Subject: CN=122954416180894500a725651097f9f6236c716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:d7:b9:d8:2a:eb:b5:8a:f2:ee:16:1b:10:
85:14:c4:94:d1:50:f3:b0:cb:8b:a5:66:64:bd:3c:
1d:16:f2:85:8a:bf:b8:4e:bd:5c:42:32:17:33:f9:
5a:29:1b:2d:cf:c3:c8:03:6c:b5:27:bd:46:a5:4b:
cc:8b:e4:5f:c0:85:cf:88:8e:b3:55:34:ad:75:8a:
e2:b9:92:3d:75:90:c7:89:b9:25:d0:61:b9:f7:05:
96:11:ca:50:b8:69:b9:e9:b5:03:c2:69:2b:46:0b:
b7:1f:ba:ec:ba:19:00:bc:06:42:62:fe:0f:80:08:
56:88:70:53:21:fd:08:51:73:b8:60:70:45:3a:04:
26:77:5c:54:23:6b:fa:d8:65:c4:85:d5:21:d7:34:
cd:00:f7:a8:71:69:a9:59:e5:85:8e:85:5b:14:41:
93:46:67:d2:aa:1f:40:39:38:a5:69:d6:7c:f9:30:
00:74:28:4f:4e:bb:c9:6d:e4:8e:ae:86:c8:3d:e4:
71:0c:5d:0a:39:c7:ac:c6:5b:f0:cd:ac:c6:50:c7:
f1:22:a1:71:d3:fc:07:59:51:a7:51:72:f4:37:32:
d3:81:f8:15:38:52:f2:49:08:dd:9c:a7:73:ba:4d:
4d:a7:e3:56:70:0a:5a:86:55:ac:17:f6:05:91:91:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:54:41:61:80:89:45:00:A7:25:65:10:97:F9:F6:23:6C:71:6B
X509v3 Authority Key Identifier:
keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:da:5c:d1:db:00:68:8a:bf:fd:c2:0f:95:b7:a9:86:5c:aa:
76:c7:c7:40:92:c2:e4:f1:f0:90:51:b7:32:ec:96:6d:7b:3f:
ab:f0:fd:a4:c2:83:58:da:ca:eb:67:a2:6a:89:19:5a:b8:90:
4c:67:f7:52:a4:74:a8:34:8b:19:d9:37:09:78:16:5c:01:9c:
39:b5:86:15:10:a1:83:6b:1a:03:3e:98:a1:35:aa:16:89:ac:
7c:2b:28:5e:68:72:f7:e1:df:f9:07:9a:75:a3:00:df:21:76:
c6:f0:7c:db:fe:1e:db:3e:c0:ce:d6:08:7a:9f:71:7d:08:43:
6b:21:7c:42:bd:a0:5c:cd:12:fc:5a:93:2b:c9:da:ca:cd:88:
32:e9:49:7a:e3:ef:dd:a8:58:5c:a2:0d:b8:cd:12:78:b1:9c:
72:ce:e0:d1:50:85:50:08:aa:ab:95:ed:01:18:fa:5f:c8:74:
b1:6b:f2:ad:b1:50:ca:b3:0d:9c:b8:c3:e2:0a:c5:59:9d:11:
1c:e4:67:01:7c:6d:a4:2c:be:75:c0:04:fa:89:51:0f:cd:73:
38:2f:22:e6:f7:82:25:f7:b8:f9:17:9b:5c:f1:5a:00:b7:7b:
d9:98:4b:7f:17:a7:e1:81:03:11:57:aa:1a:ab:43:01:e9:8a:
bb:ee:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:59:40 2025 by rpki-client