Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: wHeM6XgENO6hjALmYY8ZvbI0C1DX9PJMbiGt4evmCNg=
Subject key identifier: B9:5A:F1:BC:5D:03:36:2F:B6:58:F9:15:09:19:16:DB:19:F4:B8:82
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 0197B7B38A1DD6CA92596A868B99DF2C0BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0A19
Signing time: Sat 28 Jun 2025 18:01:26 +0000
Manifest this update: Sat 28 Jun 2025 18:01:26 +0000
Manifest next update: Sun 29 Jun 2025 18:01:26 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: kth5Ze19YO4GaxCxqnIFsw60C6K3+7PoOL14Ui2WZLE=)
2: UVCnnFZZjUR9w6yDQp9NPqjljfo.roa (hash: f6rKRc94PJnhp1qRU3+PGFxmR5pPPhe+G7K5mMW7jGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:8a:1d:d6:ca:92:59:6a:86:8b:99:df:2c:0b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Jun 28 18:01:26 2025 GMT
Not After : Jun 29 18:01:26 2025 GMT
Subject: CN=b95af1bc5d03362fb658f915091916db19f4b882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:f0:28:a6:bf:25:74:65:1d:c1:8d:1f:66:
27:6f:81:ca:88:88:9a:b1:80:b5:ce:73:12:6e:70:
bc:dc:0a:db:91:a3:61:e6:22:c4:42:57:f8:96:b1:
57:cb:db:52:92:df:11:a6:99:43:b6:d8:20:06:aa:
cb:08:07:29:a2:08:45:f4:a0:97:be:2c:cc:23:fb:
09:2f:85:99:df:72:18:dc:e1:c7:c7:e1:f7:8d:46:
dd:16:3a:b0:81:0b:bc:66:1f:e2:15:80:96:02:f1:
a0:22:c5:88:55:a7:b5:04:e7:c3:c6:f2:cd:2e:06:
60:6f:a0:66:59:1f:d2:2a:fb:e2:29:01:37:ec:c2:
3e:d5:3a:ff:67:f7:20:36:d7:6a:86:7a:00:0e:ec:
67:75:b8:47:32:fb:11:51:91:ad:a3:09:b9:dc:d2:
75:cc:78:7d:79:b5:42:44:c1:dc:d1:67:0b:73:74:
06:6d:5e:9a:a2:4f:54:e9:00:c9:2f:35:3c:b7:75:
fa:05:92:4e:42:32:f7:ad:26:91:5b:0a:31:fc:15:
e9:0a:5f:95:98:21:bf:af:b9:5b:df:f8:20:02:11:
13:b6:65:05:ed:6e:1d:73:84:38:20:d2:aa:59:49:
25:e0:52:19:1a:8a:32:3a:ec:cb:56:10:0b:29:30:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5A:F1:BC:5D:03:36:2F:B6:58:F9:15:09:19:16:DB:19:F4:B8:82
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:26:9c:c8:83:8f:78:ae:e9:8c:d6:fa:e8:7c:21:56:cb:14:
99:cd:b3:b3:0e:3c:a5:5e:33:86:d1:a6:2c:d9:9c:e2:83:12:
2c:af:b0:38:bc:fe:28:df:79:0b:7c:8b:15:8c:1a:6d:fb:df:
13:e9:d8:57:19:a2:12:49:03:a0:9f:26:05:48:10:a4:f6:8d:
9e:67:91:f9:04:0c:1c:f1:f5:b3:d1:42:28:63:a4:95:c3:d0:
4b:08:4d:2d:81:dc:d1:81:26:c5:f7:ba:e0:42:af:5a:91:cf:
04:07:6d:83:d4:f6:75:27:8f:b2:90:40:a6:e2:d1:28:eb:04:
ff:79:ee:fc:df:77:b7:fa:7d:ec:e9:aa:89:6c:35:19:4e:e3:
7d:08:68:25:dc:08:7f:43:f8:58:7b:1b:48:50:90:2b:45:a3:
99:47:be:d9:dd:90:46:36:e2:bc:a1:8b:bf:0c:a1:8d:f3:0d:
34:a8:1b:93:23:04:da:19:08:05:66:8d:6f:6d:27:0d:81:fc:
3b:8d:50:15:19:56:a6:27:f7:8b:81:b1:1b:38:cf:4e:ee:37:
dd:5c:d7:43:5d:fe:10:bb:7c:ff:63:be:94:13:38:e3:82:28:
e7:5d:de:69:48:44:2d:8c:d0:3e:e2:9b:ce:7e:3b:3a:36:94:
91:71:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:39 2025 by rpki-client