Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: aQjTDo7376cV3Iv1m9B5QQgTCDMNiaaroUdf0UFw5rE=
Subject key identifier: 6E:DF:A1:97:5D:90:4B:AF:FE:B4:F4:D5:04:E4:35:E7:96:2D:7B:A1
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0197B745B421EBE302DC685DD3278D7CF9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 15DD
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: Nw+1juHG4eBVeMwQkdQlnVyiwL3G/JOTEMD0gxZYr8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b4:21:eb:e3:02:dc:68:5d:d3:27:8d:7c:f9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=6edfa1975d904baffeb4f4d504e435e7962d7ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:0a:00:77:46:b1:30:6c:6a:bc:28:4c:f1:
19:2f:da:6f:1f:e7:cd:11:12:66:69:8b:a7:05:19:
15:4e:d5:b0:b6:48:6b:44:f3:98:5c:0f:74:c3:c8:
a3:4b:af:6a:b0:7c:31:44:59:46:e2:cd:0b:19:2f:
2d:bb:4d:ba:3c:73:24:46:98:af:13:98:b8:8d:aa:
34:61:11:8f:b9:ef:8a:05:03:c2:f4:67:2a:a3:0c:
11:eb:92:d0:cb:d3:82:83:d0:d8:1d:5f:dd:74:5b:
32:05:89:bc:7b:2b:bd:50:08:a5:89:01:ec:3d:c7:
cc:1e:2c:b6:76:4f:52:89:ec:0d:0c:e5:25:63:65:
e5:1c:62:9f:50:47:7d:8e:da:47:c4:78:d3:d9:a3:
59:8c:26:28:9b:e5:6a:3b:eb:87:2d:0a:60:07:bc:
b1:5b:ed:da:77:6f:43:6c:d3:c0:d2:28:b4:33:d0:
6d:af:68:99:b3:2f:b7:ab:65:40:0f:9f:12:a4:64:
e1:ec:34:e1:98:af:8d:16:bb:1c:63:90:16:47:87:
0b:5e:20:11:1d:d4:26:f1:e9:64:a4:d3:73:e8:36:
95:91:d2:0b:4e:ab:ea:b6:4f:ba:f4:c4:3b:24:3a:
c7:97:b5:54:16:92:88:3d:31:28:9a:19:d8:f3:3c:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DF:A1:97:5D:90:4B:AF:FE:B4:F4:D5:04:E4:35:E7:96:2D:7B:A1
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:50:da:1c:57:5b:e3:90:d8:7c:0a:07:ec:f2:70:a7:15:c2:
2e:3f:5b:3d:cf:33:59:a3:1a:ee:5f:f7:bd:bc:8f:a9:6c:2d:
34:c3:9e:67:95:1a:71:87:59:f9:ad:25:b4:9c:98:a4:32:c6:
68:1e:91:2e:33:3a:90:bc:85:7e:9f:2e:1f:a2:f5:88:32:15:
66:a4:93:0c:70:cb:3c:87:e5:93:a2:46:0e:79:e6:52:8a:bf:
c3:16:d1:a6:d5:79:f7:4c:22:01:35:5b:1f:39:67:e6:10:05:
f8:30:c0:7d:1f:12:62:e2:17:21:5e:70:08:18:9b:b3:73:2b:
fe:1b:70:ba:ec:96:29:c6:ac:4f:ba:0a:55:01:ee:78:5d:fa:
d5:b9:4e:e5:77:c0:28:a9:95:fb:8e:ee:68:d7:3e:20:f1:83:
98:a2:45:06:dd:b6:fb:a3:c9:67:d7:d0:9a:3d:87:67:5c:23:
46:29:fa:b2:b6:99:86:0d:74:a4:1e:b1:7e:1e:c9:1a:63:35:
28:de:64:07:e9:1f:de:a5:e2:76:af:8e:42:ad:4f:08:ee:ce:
d8:56:9c:a0:87:4b:f9:f7:c8:67:06:76:ae:9c:94:14:d7:05:
37:fb:de:86:cb:11:65:0c:18:51:a1:7f:e2:7b:2d:8c:19:26:
85:86:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:54 2025 by rpki-client