Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: lY5i8AlabU/ITXIO2oVb7yT7yuRajDU62/JClHPim/I=
Subject key identifier: 46:D2:61:23:2B:6D:20:E0:EA:37:93:E0:3C:F9:D7:68:A3:00:4A:1C
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 0197C2A4E59700A2A9496E92596C36F125BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 15C2
Signing time: Mon 30 Jun 2025 21:01:15 +0000
Manifest this update: Mon 30 Jun 2025 21:01:15 +0000
Manifest next update: Tue 01 Jul 2025 21:01:15 +0000
Files and hashes: 1: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
2: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
3: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
4: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=)
5: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
6: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
7: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (hash: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=)
8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: 8JdQDXZkHZ83bgGgJqF6l9bs2xM1NpGgpRSFUyZdy8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:e5:97:00:a2:a9:49:6e:92:59:6c:36:f1:25:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jun 30 21:01:15 2025 GMT
Not After : Jul 1 21:01:15 2025 GMT
Subject: CN=46d261232b6d20e0ea3793e03cf9d768a3004a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:a9:23:90:3f:a1:42:62:61:bb:50:b3:66:
72:57:70:17:25:25:b7:d0:c2:4d:10:89:c1:78:25:
89:4f:0e:b1:3b:22:9d:69:e9:b5:39:20:23:1e:7b:
82:2a:fb:f8:b8:e6:12:d5:31:d2:96:fd:ca:7b:38:
af:66:78:07:f0:92:2e:f1:22:71:da:1e:25:03:2c:
fa:df:01:7c:c3:7c:e5:99:5f:32:00:66:5a:3b:f6:
83:75:90:a2:d1:c6:17:c7:47:06:8b:24:c3:cb:5e:
aa:f7:9a:34:c2:ff:3c:45:35:2e:f8:52:7e:80:a4:
01:95:50:95:86:9f:14:08:44:40:0f:32:04:40:c9:
e9:77:42:d3:57:f9:df:29:1d:a5:04:82:ef:2c:96:
a5:ab:c7:37:6e:e6:33:4d:57:1c:dc:56:12:c4:25:
89:f9:d1:e5:e7:89:72:05:6e:a7:35:e5:73:11:4a:
8d:ac:a2:b0:b2:61:e3:b6:1e:22:c1:df:4b:27:d9:
38:63:ac:26:31:7a:f5:a1:3c:ab:78:be:aa:2a:26:
40:84:fc:09:58:fd:f5:8d:60:80:6a:a0:7e:6f:fb:
14:7e:d8:c9:b4:e4:69:0d:50:67:3c:f9:22:8f:06:
03:fe:45:cd:50:42:21:f4:f0:80:46:d5:81:05:45:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:61:23:2B:6D:20:E0:EA:37:93:E0:3C:F9:D7:68:A3:00:4A:1C
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:89:2c:0b:94:19:e5:5e:58:8a:b5:c5:74:22:4a:e4:61:
ad:04:8e:91:53:b8:ec:17:a0:2c:f1:1c:66:9d:df:4f:38:d9:
9d:85:a8:c0:ad:a9:3d:e5:d9:7d:a4:89:cf:3a:ea:ac:7f:81:
a7:3a:d6:23:2a:ac:de:82:6f:f0:c3:9c:00:62:36:63:ed:ce:
a0:28:8d:99:0d:39:70:fa:92:e4:98:e6:55:7a:1c:59:8d:5a:
2d:61:51:c9:b1:55:c8:2a:5a:39:33:f3:df:78:8f:b5:15:11:
e1:c5:b5:af:cc:1a:1a:5b:da:4f:0f:bc:28:b9:df:20:a4:49:
e2:cf:ae:71:d1:d2:ec:a5:5b:8b:1b:dc:74:ac:7c:45:42:17:
58:cb:64:7f:05:47:a3:c3:2e:30:06:5c:ee:3a:00:88:5f:de:
88:b3:ab:ed:ee:bc:b2:79:75:63:89:5b:b3:55:cc:18:75:1f:
7b:cd:79:bc:3f:98:92:90:3e:fe:5b:ed:7e:50:87:2a:26:22:
04:52:28:77:6b:63:ba:60:b2:31:1b:c3:5f:d0:fa:13:dc:c4:
41:21:a5:59:8f:cf:30:ce:dd:19:73:90:1f:4e:0a:03:3f:e1:
63:9e:fa:f2:25:12:33:7d:75:da:3d:3e:26:75:a6:dd:0c:b8:
3e:58:58:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:59 2025 by rpki-client