Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: aIMZA5qwz5GmqkNDKTWLLraf81sgXxjlm9O77hLBo4Q=
Subject key identifier: B5:94:F1:0C:DC:8C:70:BC:AE:65:B4:FC:F2:FD:3F:B1:53:73:68:1A
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 0197B745699A08883E520F561F0C383B7006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: 4_25V1XttJ1qw5vFtRBIGOQ28e4.roa (hash: jrFE5OHsnZSV8YIte/QlrxAa0XpS7lb+A+yiq4ZHdDE=)
2: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: pTWda5TTHS5TRBpnQk/7TKoqBk7IU/7nxqj/CorMryY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:69:9a:08:88:3e:52:0f:56:1f:0c:38:3b:70:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=b594f10cdc8c70bcae65b4fcf2fd3fb15373681a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:df:db:44:22:2b:8d:0c:fd:7a:e4:c7:d9:
34:54:60:56:ce:98:cb:c4:89:8a:7b:e7:12:f3:b5:
ee:49:cb:78:da:ed:84:43:da:f5:81:23:5b:c5:62:
41:82:79:db:5b:52:5e:80:94:cb:67:85:7f:e7:61:
2d:4e:4b:b8:da:57:da:97:1b:a0:93:1e:3c:91:d3:
bf:ad:1b:b4:80:64:b3:32:9f:d2:68:5a:5a:ac:12:
c6:f7:12:e1:fc:c2:d7:59:4c:31:d4:f6:67:3b:61:
4f:a9:a1:9d:7e:6d:15:55:3e:8c:1a:4e:bf:a8:d8:
1a:c7:50:39:2a:60:05:d5:ee:23:ca:61:99:62:87:
e6:cc:e3:8e:d2:37:56:2b:f8:50:d8:41:60:66:d2:
9b:56:03:bd:74:5e:80:85:ef:6b:ac:9c:89:42:84:
21:da:23:a2:c1:54:ae:aa:b2:4c:a5:6a:4d:1b:ee:
32:ca:1c:2a:f7:41:18:af:e0:37:68:6a:2e:ed:1b:
c8:db:1d:09:ad:c0:9d:54:1b:fe:c0:9e:0f:12:df:
5f:9d:55:4f:94:64:17:cb:ad:91:c0:40:05:0a:21:
5e:b5:c9:5d:27:8d:ac:7a:26:00:eb:f5:03:51:06:
b6:16:93:b6:97:bb:fe:54:0a:97:fb:18:6e:cd:b0:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:94:F1:0C:DC:8C:70:BC:AE:65:B4:FC:F2:FD:3F:B1:53:73:68:1A
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3c:3f:a4:0e:44:a3:a8:fc:f9:a0:93:98:3e:2d:bc:2b:4d:
4e:35:3e:b8:cc:55:17:10:50:e8:a8:c4:3c:c5:2f:00:00:92:
8c:d1:65:ef:56:39:c5:d6:b4:56:e2:81:bd:f5:a7:bc:18:44:
be:86:23:d2:b7:4d:e4:13:62:0f:db:c6:b4:e7:b5:68:d1:4f:
ca:5b:55:65:f1:5e:e0:43:7e:c6:69:fd:e6:0e:6a:22:3f:83:
8e:b3:0b:4b:9a:c5:9f:c6:4d:77:08:45:8f:4e:3f:be:b6:15:
dd:2d:7a:a8:14:1f:3e:03:e4:64:d4:9b:54:2d:a4:11:d4:c6:
20:14:c9:ab:65:d7:6f:c8:ba:2c:38:bc:6d:60:e1:3c:7c:99:
f2:c2:96:b2:48:18:0f:de:3e:4c:d1:92:f2:47:6d:71:7e:74:
4d:b4:55:49:03:f7:74:7d:4d:72:28:11:ef:64:8b:90:49:00:
1b:40:02:9f:8f:50:55:1d:e6:b7:fd:ec:02:4a:92:6a:95:67:
6c:a3:2a:b7:99:32:98:e4:eb:2d:26:c2:5c:c3:a5:3c:33:77:
64:3c:09:30:75:a1:f5:1d:cf:b7:9b:b8:78:94:04:3e:ec:03:
f1:76:db:ce:0b:e1:5b:d1:d8:27:7c:6d:b2:12:d1:8a:7a:b8:
2d:6c:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:13 2025 by rpki-client