Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: tSxbjocFfgdIZSR2yTHGLuhKjOQDpZNf3J8bvYtjZa0=
Subject key identifier: 71:4D:2F:A8:C7:2C:85:12:30:67:1B:31:ED:A0:EC:B4:85:61:70:17
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 0197B70F17D852F61078434CF880CB5DF7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: bPxvaIx1smJ45Mz/05MPduZb5gXNIeMXXL3IOeGV1wc=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:17:d8:52:f6:10:78:43:4c:f8:80:cb:5d:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=714d2fa8c72c851230671b31eda0ecb485617017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:a6:9e:ef:0c:82:a7:b1:87:40:f9:b0:0f:
44:26:75:16:d5:9c:06:a5:04:bd:47:1e:34:ab:12:
79:0c:2f:3d:7d:d6:06:7f:70:be:47:ef:16:d0:eb:
c1:9d:7f:a1:99:44:d5:44:f6:bb:9d:91:a4:a6:8e:
8d:61:59:24:f3:6d:01:99:b8:cc:81:c2:70:68:7a:
d9:91:92:e8:75:67:f7:09:4b:ba:ba:f6:ad:fe:e4:
4c:f1:f2:ac:05:d5:01:d4:8d:8d:4e:a9:2b:87:2e:
65:1c:37:e2:7d:e5:c5:1b:3c:65:2e:90:c1:2e:44:
d3:c7:54:f4:d0:f6:38:cc:9b:cb:b4:e0:9c:c3:90:
3c:26:42:22:52:3c:c9:a7:3b:75:d9:69:d3:28:1d:
f8:37:e9:dd:79:c5:fd:c9:5e:c6:50:e6:0a:f8:f0:
36:fb:f7:48:c6:9d:85:13:f2:d8:53:4f:e4:e6:76:
33:c4:6b:5c:89:dd:81:1c:01:87:9d:06:55:22:66:
20:1e:9d:8d:56:f0:7e:10:44:3b:cb:5e:9d:4a:31:
d7:e7:3d:e2:9a:d7:a2:aa:cf:ac:74:90:a8:b1:1d:
4f:d8:24:ce:af:16:e1:e9:4c:2f:40:68:33:8f:81:
be:54:d3:58:72:56:08:48:30:c4:4d:db:76:e6:fa:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4D:2F:A8:C7:2C:85:12:30:67:1B:31:ED:A0:EC:B4:85:61:70:17
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e5:11:9e:be:b0:11:70:b8:d2:33:8c:fe:35:3b:d6:a0:d7:
06:86:ca:77:6a:c6:15:1f:ef:e4:e8:e5:fd:1e:79:24:07:4d:
51:bd:30:dd:31:5a:84:ca:46:f4:8f:58:49:c1:f1:d5:61:5f:
c3:33:f0:da:da:d6:ed:77:a3:ff:d2:c6:10:de:19:21:49:33:
42:61:0c:58:97:49:bf:36:37:d7:bd:dc:fd:14:2d:f6:b6:3c:
04:da:20:ed:e1:14:26:f2:e6:3d:94:9c:59:e5:ba:75:f1:e7:
6a:0f:d4:5f:8e:bd:cf:a8:c4:5f:c4:01:86:3f:46:4b:f2:ea:
e5:ec:41:95:de:d0:c9:d9:e6:23:01:a2:cb:26:9f:b2:8c:bc:
f3:23:41:2e:19:ca:bb:e0:e4:ba:c8:0c:bc:7a:22:06:6f:45:
2c:b9:9e:18:8f:0b:ec:8a:53:d1:ea:d7:95:c0:80:db:60:02:
6a:a9:36:ff:18:14:76:f7:0e:57:47:fa:3e:1f:ff:0f:58:60:
75:ec:2d:89:12:70:5c:1f:2f:90:7d:1b:bc:ed:23:48:f0:f2:
ba:1e:3b:f9:01:e6:18:8a:bd:51:bf:96:5e:22:e7:50:7c:b5:
98:7f:69:ee:80:f0:4a:f1:33:66:e2:59:1b:d8:f1:c1:4d:02:
cd:d9:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:10 2025 by rpki-client