Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: wo98HkTsUefCoIyY3tGypYsYy47qrTi+xkdLJn7C2vo=
Subject key identifier: E9:41:49:38:B1:4D:C1:66:C3:7D:B7:B7:15:72:5D:66:BF:34:BB:A8
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 0197C86FEC167120120488594DC4B9CF1320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 00:01:07 +0000
Manifest this update: Wed 02 Jul 2025 00:01:07 +0000
Manifest next update: Thu 03 Jul 2025 00:01:07 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: U1fBqFBpW9wWfQxyT2R+9wNDbWA9oqc2wjkjoHa3RTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:6f:ec:16:71:20:12:04:88:59:4d:c4:b9:cf:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jul 2 00:01:07 2025 GMT
Not After : Jul 3 00:01:07 2025 GMT
Subject: CN=e9414938b14dc166c37db7b715725d66bf34bba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:16:80:ad:f5:05:7a:7a:6f:cd:93:7e:df:
52:12:a6:0b:3d:d0:78:69:3c:dc:29:88:39:3a:60:
0d:a6:e0:03:15:d7:37:36:39:d0:3b:ac:7b:35:1c:
af:45:f0:18:bd:f1:33:82:8f:42:1c:6b:b0:9b:57:
bc:1f:f7:f3:6b:67:2a:74:85:db:6b:56:93:4a:d4:
f1:42:dd:91:0d:61:a2:b3:39:8d:a6:f0:1f:8f:7a:
c1:31:82:40:d9:7c:be:bb:f7:80:5f:cb:3b:b4:79:
a5:3a:2f:6a:bc:7d:53:d1:7b:23:20:12:f0:9e:88:
75:83:c3:20:0b:fb:96:06:c1:f2:03:38:cd:09:cd:
19:b1:d8:0d:88:ff:b5:5c:2d:e3:5c:3e:d5:a3:03:
95:18:8e:86:21:16:11:64:a7:a3:5e:fe:2f:6b:8b:
ad:85:20:47:ff:80:09:42:e3:4b:1d:fe:b3:3f:e2:
b7:dc:2f:37:d6:83:73:c4:7f:6a:5b:35:05:85:00:
a7:5e:30:00:c5:e6:01:67:83:b7:c8:76:f7:21:69:
5b:38:82:b8:56:46:00:e8:59:20:00:35:03:46:17:
f7:2f:ad:86:67:52:74:d2:2f:2b:43:6b:d0:3c:7f:
6a:34:df:74:7b:11:8c:96:c0:84:72:1e:ec:32:c8:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:49:38:B1:4D:C1:66:C3:7D:B7:B7:15:72:5D:66:BF:34:BB:A8
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:af:2e:5e:e5:9a:26:15:cc:bd:72:44:cc:42:69:67:be:75:
4f:c6:ce:3f:02:c3:f5:94:da:7f:eb:a4:27:9d:67:5a:8a:af:
32:e9:9e:14:51:c4:c8:a0:83:c1:91:b7:1e:2f:dd:49:65:3b:
74:e5:40:67:6f:40:bb:d2:05:e1:60:88:37:1e:22:ff:eb:4e:
d6:bd:e0:95:d7:a4:a2:9d:e1:05:4c:06:a7:0f:c1:f1:35:a6:
72:fd:29:2f:c8:b4:7e:65:50:37:04:5d:ad:26:48:64:b8:b9:
c3:37:86:b5:db:0b:5d:7d:2c:dd:25:fe:d8:3a:cb:24:e4:31:
0a:28:31:49:d1:1c:3c:fc:5a:3e:55:2e:bd:d0:c9:d4:2e:86:
47:6d:5f:23:97:d3:5b:0d:f0:ca:d8:24:b5:c7:d3:20:64:1f:
5d:bc:b8:7b:b9:58:7c:05:7a:f1:25:a5:f4:1a:70:84:61:63:
75:63:ff:d2:e8:7b:86:d0:f1:d6:58:6d:c4:41:d7:f1:d0:a4:
9b:c2:07:8a:7a:9e:b1:a5:f0:7b:ce:7e:d2:62:52:0c:3d:80:
d1:46:7a:f5:91:c3:8d:ec:fb:64:32:0e:18:fc:49:42:f6:22:
cc:eb:aa:36:4d:64:e1:e6:20:53:33:65:16:9a:d6:7b:78:7f:
77:03:af:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:56:24 2025 by rpki-client