Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: ry674osPFo0wTkpl95EwJ/qObyxSxqEORn2Tmqr8BEA=
Subject key identifier: DE:30:2F:9A:D2:A7:8B:86:2C:03:E0:27:C6:BC:C7:FC:57:02:75:32
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 0197B5FC081867CA98BD6D518F4A519C62A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 10:01:22 +0000
Manifest this update: Sat 28 Jun 2025 10:01:22 +0000
Manifest next update: Sun 29 Jun 2025 10:01:22 +0000
Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: OY8qvCt8iS1FsDpaS7TqGtyfQ8JTZ85UXV484JbLRsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:08:18:67:ca:98:bd:6d:51:8f:4a:51:9c:62:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Jun 28 10:01:22 2025 GMT
Not After : Jun 29 10:01:22 2025 GMT
Subject: CN=de302f9ad2a78b862c03e027c6bcc7fc57027532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:d7:c3:fa:aa:8e:4b:84:38:f2:c2:22:31:
3f:a2:94:e8:78:bc:8a:f5:ec:50:35:0f:41:bf:72:
94:1b:22:bc:41:94:e5:67:9b:2a:e5:8b:28:ae:31:
2f:ce:0c:f9:6b:f8:f0:5d:5e:bf:4b:79:80:fc:48:
b6:d5:17:88:95:3b:c0:de:bf:02:af:86:1a:67:19:
9d:b0:4a:5d:a3:65:14:ff:0b:cd:04:d3:94:8e:c7:
2a:d1:5a:1c:56:f1:4b:c0:a2:56:69:18:b7:7f:95:
45:6c:4d:d7:98:49:c0:41:75:8a:69:f3:0b:1c:93:
8b:70:4b:f6:14:52:ae:62:4a:0a:dd:ee:d3:4b:92:
e0:ef:56:6d:3a:33:e3:0d:b4:8a:be:66:29:0a:3f:
73:34:92:20:11:88:a6:fd:7b:a2:5c:25:40:43:1b:
d7:6c:1c:26:ae:2c:0b:33:d8:38:8c:49:ce:4c:e5:
22:f0:15:8f:79:23:bf:ed:0f:ca:ee:3d:b3:14:8a:
04:a3:82:1e:52:f9:b9:95:da:e3:03:42:e7:78:28:
45:ec:07:6c:52:ff:3f:a1:bf:94:a0:3b:50:c1:1f:
5d:8a:d8:0d:ea:1c:a8:73:b0:c5:4c:2f:ab:f5:3a:
c1:7c:2b:d8:ff:43:94:fc:69:91:1f:61:7f:75:d8:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:30:2F:9A:D2:A7:8B:86:2C:03:E0:27:C6:BC:C7:FC:57:02:75:32
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:78:6f:9e:b3:a2:d0:4e:c8:f9:9e:cc:a6:b8:ff:4a:0f:cf:
ea:ed:fb:2b:22:9b:0e:d9:76:83:19:fd:4d:65:d4:6a:db:e9:
70:bb:5c:b2:cb:92:4a:3f:9f:48:52:1a:0c:10:ec:e1:2b:ff:
7b:c2:72:01:7b:92:ff:f7:20:35:75:f0:c4:a4:4e:86:ca:e4:
3e:78:08:a7:31:26:49:77:ab:c9:1b:49:6b:68:8c:64:eb:19:
0e:25:11:59:2d:d1:f1:29:64:2c:d7:d7:84:b6:37:5a:ad:b9:
25:2a:89:3b:c2:b3:88:a8:3d:15:c3:21:a0:62:d9:b1:93:c6:
d3:1d:a8:f5:cc:0a:26:75:b6:ad:13:20:3c:94:85:4e:ca:9b:
0e:bd:da:70:02:0b:c6:a4:94:b4:c0:6e:a3:df:d9:bf:ca:a4:
18:04:43:33:07:9f:0d:59:2a:5a:e9:83:e4:b0:2b:85:0f:7d:
a9:21:48:ca:b4:72:27:34:2b:8b:d6:02:7d:e5:52:14:18:fd:
21:df:70:24:bd:c9:04:61:4d:b8:e2:2c:53:ca:81:54:1f:b8:
74:37:7c:41:4e:4c:70:62:13:9f:a0:ee:5c:22:9c:5d:4b:4b:
2b:69:3c:7d:0c:45:3e:74:1e:87:65:36:ee:6f:5b:4e:3f:eb:
24:b4:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:01 2025 by rpki-client