Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: IozCCnWweYsdXeB6nn+ppO3FHZRpejUWQyLlD0rnAuw=
Subject key identifier: BF:8D:10:60:EF:03:68:97:D1:C1:40:F3:FB:68:24:22:09:21:BE:25
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 0197B7450559FB61C71845562EAACBA50472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: UoBypWiQcw/Y0NxBIYmL74j52Apcvfpgyqi7756Jux8=)
2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:05:59:fb:61:c7:18:45:56:2e:aa:cb:a5:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=bf8d1060ef036897d1c140f3fb6824220921be25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:83:ff:5f:76:0d:d4:19:a6:52:04:39:28:
b5:7e:ce:e9:77:06:db:82:3c:c9:b5:61:36:4d:89:
ef:33:32:8b:b1:2f:b4:7d:2e:e0:e9:26:13:7b:0b:
ea:07:c4:f5:03:f0:a2:ad:50:69:db:69:3d:f9:a1:
57:aa:3c:ce:b9:b1:db:8e:ce:00:af:ac:63:11:3b:
95:d5:93:76:c3:5f:eb:b5:9f:e8:91:bf:40:2a:ca:
00:56:66:80:81:54:c9:b3:fd:20:98:4b:dd:da:09:
44:f8:f4:0e:b2:30:f5:1d:df:9e:d5:0e:f7:37:14:
9b:f4:36:8a:ff:3d:72:6c:ca:8d:c6:58:09:9d:fc:
da:b9:3d:32:70:5a:24:bd:39:bc:07:ba:b3:0d:f4:
cf:52:b6:ae:a6:7f:0c:12:00:e8:67:46:7c:d9:c2:
7c:3f:9a:e4:c4:b5:7d:86:bb:b3:d1:c7:0a:9d:25:
ef:ce:3c:1c:fd:2a:9a:c7:cd:db:ec:af:fe:68:d9:
3b:49:45:74:f0:85:1e:60:db:d6:32:e6:49:a5:67:
2f:da:68:60:2c:3e:96:37:e5:e2:ba:fe:44:d8:24:
8a:df:d9:34:c9:ba:79:69:cf:ae:00:29:a1:fd:1a:
a2:1d:b3:54:5d:58:a7:21:24:a8:0a:f5:eb:39:c4:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:10:60:EF:03:68:97:D1:C1:40:F3:FB:68:24:22:09:21:BE:25
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bd:30:c1:96:58:77:81:1f:51:42:7a:3f:80:c1:a4:0a:58:
49:77:a6:ae:5f:99:50:16:bb:25:ed:4b:4f:0d:11:44:05:26:
9b:35:75:a9:2e:e0:a9:b9:8f:09:9d:19:7a:c3:22:4b:dd:12:
9f:68:55:56:25:ff:a1:77:d7:38:30:93:8f:7a:1f:e9:9f:a8:
db:42:91:f8:ac:72:36:a8:66:ca:20:a0:23:ed:9a:5c:ff:79:
68:60:bd:ef:1e:85:1b:1d:8c:2f:32:8d:7d:9f:13:43:26:60:
57:c1:1a:4d:1d:30:59:65:32:31:ee:e8:41:bd:13:86:5f:d1:
8a:50:d1:83:59:a1:77:26:9a:07:e8:62:14:16:68:e8:e1:38:
9b:24:30:42:6f:fe:52:19:a4:66:47:20:9f:b1:13:b4:ed:33:
d5:36:91:24:c6:c6:4e:01:9f:68:aa:71:7f:27:a6:b0:91:6c:
95:fc:c1:88:21:a3:68:b2:fb:60:58:c2:fe:6f:6b:55:f3:a5:
95:cd:39:44:c3:c2:2c:e8:8d:76:5a:ef:cf:c9:59:79:5f:81:
b7:e4:c5:49:03:cb:b9:8a:a1:d8:d4:8c:1f:f8:80:08:ff:4a:
9d:be:fa:af:4e:9d:cc:19:df:5b:ff:95:c0:18:7d:5c:48:43:
3c:02:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:08 2025 by rpki-client