Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: x0tJkAiudpRFDv6nGr3uP5kB9ABqB5rlD+XZEYRahyo=
Subject key identifier: 40:74:36:BD:A2:BA:69:11:15:E7:D1:01:58:6D:B1:75:8D:BB:F5:AC
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 0197B77C063B0C366D9A9DE145B93423FE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: oOQnG5G7K9SVKc8MjsZywjuPQush146hG63kVFkx5wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:06:3b:0c:36:6d:9a:9d:e1:45:b9:34:23:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=407436bda2ba691115e7d101586db1758dbbf5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:39:f2:d6:21:0a:e4:08:12:1b:94:ff:29:
e9:e1:c9:31:3d:75:7b:76:d5:ce:c5:8a:8a:0e:5a:
0d:c3:8e:2f:20:d2:0d:6b:20:bd:e0:4d:b6:69:3a:
56:c3:1b:db:67:8d:90:7e:88:eb:b9:a4:e7:4d:b0:
a1:1b:b4:c4:37:91:e5:bb:68:d8:31:c3:24:35:5c:
f5:f5:b4:55:4b:ac:41:d6:71:d8:45:a1:a5:d0:53:
a4:76:49:9f:ee:b3:72:e8:b5:6c:3d:2b:cc:45:f8:
6f:7a:3c:48:af:16:97:1f:a1:a6:33:f4:2d:0f:2d:
a9:15:34:21:61:ef:2c:cd:74:59:e4:5a:1e:26:70:
84:e3:15:01:53:a2:7c:4f:36:b7:52:66:09:37:a0:
00:0d:29:87:be:9b:8c:3b:b6:a1:4b:15:d6:02:41:
c0:b2:01:1a:d6:4a:13:e6:07:75:63:46:cf:0a:b4:
ef:38:29:3b:14:80:e8:50:e0:45:21:bb:ab:ef:b6:
68:8c:ae:52:f0:cf:48:9a:64:0f:5d:a0:0a:1e:7a:
d2:ff:a9:54:21:96:ef:80:7e:15:ef:08:94:4c:f3:
05:ad:5f:1d:8e:72:88:75:23:5a:32:0d:40:7f:e2:
ab:e7:52:a8:47:2f:be:02:5b:6d:5e:fa:28:a6:68:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:74:36:BD:A2:BA:69:11:15:E7:D1:01:58:6D:B1:75:8D:BB:F5:AC
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1a:77:3e:0e:eb:75:4c:2d:48:a3:49:db:50:61:68:51:04:
f6:06:f7:21:91:43:6b:03:7f:ee:17:81:24:ac:4e:5e:8e:18:
d8:c3:b5:bb:b7:a1:c0:e6:f7:6f:f3:59:89:81:21:09:e0:c2:
ee:54:d9:eb:10:2a:cf:05:91:6a:21:c1:6f:fb:61:29:d9:b8:
b3:38:90:39:74:86:5e:3d:35:45:da:96:b8:b8:82:fa:60:a1:
78:cb:7f:f2:86:b8:fa:88:ed:73:09:52:2c:b2:ab:90:b7:4c:
86:32:13:ab:52:25:50:e1:d5:c6:83:d4:0e:46:ac:e3:2c:49:
47:65:87:f8:6e:1f:98:f3:50:94:6e:d2:79:98:e1:7f:2f:c0:
d8:b3:6a:3c:33:b2:21:d5:c4:53:75:57:ce:d2:ee:b8:8d:29:
4f:67:0a:da:f3:65:37:94:ed:35:c4:35:98:f8:71:ac:23:9e:
a7:35:66:19:d4:6a:77:43:ef:5e:62:dd:16:df:5f:2c:e4:6e:
c1:27:38:1b:a3:e1:17:91:e3:50:79:2d:1e:e3:80:c2:09:a7:
20:a5:d7:16:5f:ce:f8:7c:33:5f:66:55:2e:ba:19:cc:86:24:
cd:be:04:af:b1:85:61:3d:ce:ac:3d:be:f8:ea:a8:df:5b:e0:
c0:f3:4b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:53 2025 by rpki-client