Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: MvCx1RgbI+qazTYnjGELBIzSWHOP9N1g3MA9dY282Ds=
Subject key identifier: F5:3E:C0:86:52:F4:96:A1:99:42:24:5A:E1:09:F8:07:2F:D0:DC:D9
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 0197C94BB9B0CB88AF27C919B1DD4B91257E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 04:01:12 +0000
Manifest this update: Wed 02 Jul 2025 04:01:12 +0000
Manifest next update: Thu 03 Jul 2025 04:01:12 +0000
Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: yWoQANqXAFIs5Nmf2Qb50jkIZGpGwbK5z/liv7b9fpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:b9:b0:cb:88:af:27:c9:19:b1:dd:4b:91:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Jul 2 04:01:12 2025 GMT
Not After : Jul 3 04:01:12 2025 GMT
Subject: CN=f53ec08652f496a19942245ae109f8072fd0dcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:b9:f7:f0:c5:26:dc:82:0c:af:0a:b4:85:
ac:d7:10:78:0e:61:54:0e:53:f2:06:0d:bd:4e:3f:
79:a6:dd:d6:b3:3a:e9:eb:7c:75:75:62:30:de:be:
34:c5:14:46:4c:39:ca:c0:f9:c0:d5:75:9f:90:fe:
13:ce:62:76:7a:6a:52:2b:62:9d:c2:20:56:c4:f0:
7d:24:5d:f4:f8:10:f0:0c:a0:47:25:a0:e3:9c:fc:
98:ee:14:02:ea:d2:9c:40:85:71:55:84:8d:20:b7:
06:cf:17:31:b6:ee:c8:9e:5f:81:de:2a:fa:c2:7a:
7f:80:88:1d:8d:78:23:e7:51:56:95:a7:d2:0f:c4:
1e:d2:f9:4c:59:ec:73:91:43:aa:c7:9f:00:4b:12:
64:e0:9a:3e:e6:b0:17:01:c0:8b:47:55:53:77:79:
ba:14:e2:23:d5:89:7a:5c:8d:b6:8c:37:0e:81:68:
0e:2a:64:84:78:d5:7d:a5:48:9e:15:35:6a:11:98:
53:62:8d:11:29:36:18:a0:7a:d5:9e:5a:5a:3c:2e:
85:d3:0f:85:68:23:74:56:f8:09:f0:bb:97:3f:81:
91:b9:6a:12:f7:32:4c:b3:43:e5:be:31:af:e1:ab:
c0:9a:d8:11:b3:b2:41:56:9c:b1:43:74:b6:80:c7:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:C0:86:52:F4:96:A1:99:42:24:5A:E1:09:F8:07:2F:D0:DC:D9
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fd:e5:28:cb:c1:4b:d5:0e:60:4e:c4:77:a3:da:e2:e0:4a:
c5:cb:d9:b8:93:d5:2b:36:74:38:fb:2d:f3:59:f1:31:59:b3:
80:26:e3:d5:3a:9f:99:c6:f7:b1:b8:18:ed:e3:cc:4a:03:94:
5c:da:e9:bb:6a:9b:f5:28:30:5f:bf:2e:e2:9a:d5:84:88:fa:
48:7c:f1:ac:2d:7e:3e:37:38:67:a5:a9:05:74:72:62:34:0f:
a6:58:22:01:f8:d0:a5:a6:5b:62:b2:29:7a:25:6d:6a:a6:b0:
68:3f:7e:35:99:f0:85:13:27:07:1d:01:48:ea:a0:0f:44:d7:
e5:9e:09:56:59:24:52:2e:2a:5d:4c:30:0c:83:c8:dc:cf:64:
cf:ea:37:63:78:d0:0b:3b:35:79:e1:a0:9a:ca:47:08:34:cc:
ee:cf:e2:da:b8:f7:b6:f5:cd:72:08:7e:c4:4c:f1:a0:95:fe:
93:d1:d3:de:96:cb:8f:9d:2f:68:4e:f5:11:10:af:22:b6:02:
86:56:e1:db:b5:18:d0:c8:0e:27:42:0f:94:75:e7:89:8a:a3:
b8:02:75:24:3c:7a:4f:fa:e2:fd:dc:d2:8e:b9:5b:2e:7c:48:
6a:41:72:76:09:64:fd:81:aa:e0:60:07:a1:5d:6d:32:bd:2e:
c5:d5:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:06:39 2025 by rpki-client