Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: 6eB/qYGDVRAykQaL9fT2JGSMB44gJSHF7dgui03MnfQ=
Subject key identifier: D7:78:30:8A:B8:7A:C3:BF:F9:EC:27:F7:E7:34:D8:D0:78:41:D4:FA
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 0197B77C726627D04B0B4CAE45DEF7FF1359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: 6cNyko6J/JA0lFA+9NUAbdYyE2M9pw/cLZc5rv7aJAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:72:66:27:d0:4b:0b:4c:ae:45:de:f7:ff:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=d778308ab87ac3bff9ec27f7e734d8d07841d4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:67:70:5c:d0:c0:fe:f0:2a:dc:3c:a1:8f:
a9:ea:04:25:75:d5:c6:64:1d:c3:15:16:ca:09:ca:
f4:36:90:9e:f9:9a:69:5c:32:4c:c8:03:7e:3d:db:
8d:eb:c4:6f:58:16:47:d8:c0:f0:eb:1b:08:c2:dc:
7e:a5:b3:e5:05:ec:71:c7:e3:4d:97:78:bb:3c:9f:
e4:09:1c:62:9e:ba:3d:91:0b:7b:93:f9:d5:92:79:
27:4b:71:dd:96:37:d3:bf:ce:08:0f:e5:7f:5c:90:
c5:ac:5f:1b:dc:33:7c:14:1e:22:7d:97:af:86:2b:
9a:86:92:63:9d:9f:2f:ff:0e:43:8f:af:9f:23:4a:
25:02:d6:9f:ca:42:83:25:53:c6:03:7a:9a:a9:ce:
ed:8d:c4:d0:b7:65:71:99:4d:d9:bf:7c:02:73:26:
35:dc:6f:68:37:fe:e9:60:73:37:a4:28:36:80:4d:
7c:e9:e3:a4:c5:86:a9:8f:80:36:f6:86:e1:89:15:
46:bd:82:72:27:45:53:f6:85:c2:7a:3a:c4:6d:50:
04:3e:04:86:7e:d8:f3:41:85:c1:0a:a1:2f:bf:f9:
6c:23:68:16:3f:53:58:76:8c:04:ba:61:71:cb:db:
f3:29:cf:d5:8d:e5:1b:de:de:8e:6f:83:f6:1b:59:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:30:8A:B8:7A:C3:BF:F9:EC:27:F7:E7:34:D8:D0:78:41:D4:FA
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:11:e1:af:e2:8f:95:98:a8:18:b7:9c:77:ab:9b:d2:76:45:
3b:02:af:5b:a7:21:61:79:d3:1e:1e:69:31:f8:f7:b9:a0:f1:
52:8b:68:1b:d0:61:48:bc:32:42:74:dc:b9:f2:be:5c:11:20:
7e:1e:f1:2d:20:06:07:e1:c6:ac:ca:ed:2c:61:32:2e:77:92:
4f:41:f3:01:4d:80:ec:6d:e5:6b:43:ae:b6:58:65:f5:ac:67:
e9:4a:89:13:af:22:e2:64:2c:02:b9:09:25:56:52:9c:2a:42:
de:d0:24:3c:eb:1c:43:d0:11:43:9b:d9:40:b7:9f:45:67:7b:
7d:ef:c2:f1:3c:4e:4b:ed:c6:5f:9e:1c:06:71:2d:cd:ff:46:
ed:55:aa:45:8f:cf:9f:d7:36:2d:fa:fa:54:91:9a:40:58:a7:
d5:20:a9:c8:7d:73:e9:74:59:95:54:c1:0a:79:b1:f6:77:c6:
75:ef:33:f0:23:25:e0:ba:b1:f6:a5:e0:a1:dd:7e:2a:ec:bc:
53:7e:8f:29:06:ba:37:8e:a8:4a:d4:77:63:41:81:78:bd:77:
77:60:47:37:9a:20:27:65:df:3b:80:29:98:22:12:a4:5a:2f:
b1:45:3c:ed:10:bb:12:96:3a:7f:b6:72:7a:b9:1f:76:ef:9e:
ee:3a:50:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:41 2025 by rpki-client