Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: 0OnOpAltIO+gRp6w2VORJodS7zP1Vn59nsDko0Pv1YM=
Subject key identifier: 81:B9:DC:79:91:60:FA:65:9C:E7:58:40:D3:77:D9:6F:0C:44:06:A8
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 0197B6A06E59F4150998BEFCB6B61DB1EB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: R0RV2V01Yh6/8nsMKnQnqx/QZnVh8IRWBLho5p/C5xk=)
2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6e:59:f4:15:09:98:be:fc:b6:b6:1d:b1:eb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=81b9dc799160fa659ce75840d377d96f0c4406a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:c2:9d:4c:7b:a5:7c:d5:cb:a9:c1:04:07:
46:bc:fc:bd:52:8a:bb:cb:d8:20:00:52:be:1f:87:
98:48:0f:b6:f6:40:1f:6a:c5:e8:2c:42:df:dc:a3:
f0:2a:f2:77:fc:33:1c:15:6b:18:7e:28:35:4d:03:
cc:3a:02:d7:b4:43:21:09:fb:e7:dd:db:95:d4:85:
2d:16:18:a3:24:0a:a3:cd:7c:b2:5f:ea:bb:85:f4:
50:e3:ec:2d:c0:b2:99:f7:a8:59:0f:5e:07:aa:1c:
5e:70:b1:47:b2:65:0e:a1:68:9b:16:c1:8b:da:60:
43:84:06:a3:41:7c:1f:96:30:67:95:29:38:7c:ac:
53:b4:5d:ab:ec:e7:03:0a:27:6e:f9:e5:34:c3:91:
04:76:62:90:4b:63:26:dd:5e:36:4a:ff:48:4b:74:
a3:86:2c:2c:1f:62:4c:97:b8:53:4a:b0:c6:b3:9f:
cd:0f:0d:21:34:43:37:82:17:36:7b:fa:f5:42:a0:
2e:48:e4:66:5d:c7:90:1d:71:35:f2:32:c2:48:73:
2e:ca:bb:9d:e1:0f:fd:ea:6a:55:b7:91:84:7e:6d:
ed:83:24:64:00:c0:69:b1:e9:85:f5:0d:42:d9:e7:
99:09:6a:a2:bf:52:41:38:ec:67:fa:59:bd:e2:07:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:DC:79:91:60:FA:65:9C:E7:58:40:D3:77:D9:6F:0C:44:06:A8
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:99:88:b8:50:1c:ed:b1:3c:ed:d7:80:33:da:99:3e:88:
22:cd:c4:54:43:75:74:8d:45:9e:22:58:a5:a5:ef:2f:67:fe:
09:1f:e8:76:47:7e:1b:2d:5c:85:61:5d:a6:ef:4e:d0:e8:73:
56:14:30:c7:40:64:89:a3:7e:38:da:b8:ac:be:21:b8:74:bd:
a5:e9:c6:47:cf:3a:06:6f:50:41:7b:21:66:b0:95:32:84:e4:
3f:32:0a:5b:d9:6a:4b:77:36:3f:2f:56:df:0d:93:90:75:c0:
97:65:d0:8c:60:d4:6d:ce:50:7a:96:ad:2b:38:83:48:f8:5c:
b8:53:ea:ff:b6:5a:39:b3:56:8a:c6:7a:39:4e:57:72:3e:ed:
0e:9c:94:d6:c5:db:97:79:65:1c:80:63:b7:9e:01:a9:ac:6b:
fb:84:38:92:a6:54:5f:1a:92:83:73:43:1b:c8:71:5a:f1:b0:
ca:cc:87:43:d4:99:e1:c6:e6:0c:d5:7e:4e:d0:4a:b7:c8:e0:
95:e5:65:eb:0f:45:8b:ca:d1:03:f6:c6:66:b3:7a:32:2a:be:
ac:28:5f:a5:55:46:dd:59:90:8a:f0:d2:b0:dd:b9:73:a2:f7:
53:3a:fa:02:41:85:5e:53:c6:15:ca:25:a5:dc:f1:9e:17:1d:
97:91:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:51 2025 by rpki-client