Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: /df4WmS744IAC/38hg/oIO7TYwbE47otnicDCa+63s4=
Subject key identifier: 15:DC:F8:16:39:11:AC:91:3F:A4:A8:C1:D1:5D:58:92:33:C2:5F:7F
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 0197B70EAC1C9BF93E24966B32CD804DDE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: 4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa (hash: A3c3lK9eOK2+oXlJyN8L6YhZDvbwMKgjDORS3hJPEzI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: 0PVv8tVMR0MzxeJ45WNVf8wDh1cNzXXE0mLRUKI3q0U=)
3: C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa (hash: I6wlUhROKZbhSUVuQLxUOY2F8mo+U4zrTtPsYJyoX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ac:1c:9b:f9:3e:24:96:6b:32:cd:80:4d:de:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=15dcf8163911ac913fa4a8c1d15d589233c25f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:ef:51:bc:9c:ed:b3:45:26:f4:fd:73:5e:
b6:b8:e0:88:04:08:b5:37:c1:a1:45:7d:78:7f:f5:
8f:1f:e4:02:66:41:43:c9:04:36:25:9e:ec:3c:72:
67:5e:76:13:7e:27:6f:0e:91:2a:b9:9f:ec:52:54:
e3:bb:92:d8:9e:9f:10:01:72:00:97:a4:c5:2d:b4:
2c:ef:af:a4:60:dc:9b:30:0b:11:aa:d9:a4:41:77:
e9:d8:05:24:c5:4e:7a:2f:bc:33:04:02:16:64:f0:
62:4f:db:da:41:47:a0:2b:04:da:df:05:e2:b1:e2:
1a:17:09:e4:65:a8:3b:a0:43:5a:7b:e6:e3:3e:40:
04:a7:a9:32:82:68:c1:70:99:7f:3f:9b:c2:8c:63:
31:21:eb:a7:c3:92:b0:dd:99:2a:1a:d8:13:60:fd:
3f:eb:16:28:2e:a1:de:62:42:2f:11:92:00:c5:88:
61:f5:20:18:41:e2:c1:b1:b3:94:11:06:82:22:58:
00:7b:5d:04:1a:d2:a7:5d:52:b1:73:26:e0:92:c9:
20:c8:c6:b9:fd:03:cf:27:28:f0:39:57:f5:58:1d:
26:72:b1:bf:0b:07:30:08:7a:c6:81:51:88:74:4a:
9f:ec:83:b0:8b:23:1e:b2:a6:f5:23:e7:8c:2e:74:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:F8:16:39:11:AC:91:3F:A4:A8:C1:D1:5D:58:92:33:C2:5F:7F
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d0:47:82:db:4d:d5:62:16:54:f5:4c:8a:80:3e:02:6d:8f:
4b:64:28:51:40:37:ad:c3:92:ab:c3:b3:ff:ba:4f:8f:60:ec:
c4:4b:a3:34:97:a4:bd:96:aa:49:86:b8:ab:97:8a:c9:1c:83:
5a:7d:9b:0c:f6:7c:6d:c0:a3:52:23:0c:b0:83:56:10:cd:95:
ae:5c:0d:7a:c5:6b:5f:25:c7:04:c6:e4:1a:3f:c7:66:74:f7:
1a:ac:11:35:16:07:d3:99:7f:9e:65:21:c3:74:70:8a:4b:45:
52:0b:cc:2a:74:9a:35:75:84:a7:4a:5c:f0:2c:41:40:e7:39:
82:ff:ff:06:77:92:b0:c1:1f:0f:86:5c:f0:14:ab:a6:a2:41:
d2:11:4d:13:f2:d7:61:2f:0e:af:a0:4b:ac:58:d8:f5:a6:3f:
06:d8:fc:55:68:39:df:e9:07:d5:03:22:b5:35:70:56:f9:7d:
82:39:0a:0f:8d:7b:c6:0f:04:65:aa:8e:9e:93:e5:5b:90:0b:
f4:24:ba:ac:9f:53:bc:21:6f:3d:19:ab:fd:7d:dc:54:0d:c6:
34:26:9a:fe:5a:9c:69:23:33:32:c3:be:b2:68:d3:e2:6d:11:
ef:0c:fb:80:9b:4c:73:39:ee:1b:ed:31:3f:71:e7:95:70:f2:
6b:f8:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:42 2025 by rpki-client