Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier: UKcfWV24k/lRSu1kijR/ej74INF8w3h//XWy/EaxopY=
Subject key identifier: 84:17:2F:AF:48:DA:92:6F:95:DF:22:CB:52:98:D9:57:43:14:0F:13
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 0197B77C9E29AA3F0585A5350983C1BE606D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: weNeWNAjAcGfBRHsD1RPoOeS+Fi0Q54P4xTNDmE+hNQ=)
2: 0rKi7U6MqI1r_Vs3kaCLYTfsLSY.roa (hash: 8QsFJSNtdZfQAAQzebOppMUtF/t29sf8g4pkzx7Cv9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9e:29:aa:3f:05:85:a5:35:09:83:c1:be:60:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=84172faf48da926f95df22cb5298d95743140f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:92:b8:8b:69:6f:98:dc:e8:3d:33:00:48:
d1:ca:e7:c4:04:5d:c8:0d:a6:6d:b3:34:e0:25:52:
75:e4:fa:fc:6c:66:27:b1:a0:83:3d:86:d9:8a:80:
b7:18:66:a0:70:3d:00:87:ae:e0:64:14:68:55:5e:
82:1d:d7:af:3c:f5:64:ac:dc:10:cb:2f:42:a0:4e:
f6:f9:71:cf:c6:f9:9b:a6:55:e2:2e:4f:b9:cb:7f:
6b:ce:77:2e:c1:54:fb:d2:f2:ef:81:73:81:f8:84:
36:83:7c:55:eb:21:6d:32:20:72:25:48:0f:50:a7:
dc:12:17:0b:c3:7e:6e:ef:20:99:88:da:1b:ea:99:
4a:2e:97:09:ec:49:ac:9d:c7:65:97:cd:25:cd:3e:
6e:7a:9a:5b:a9:fa:01:24:dc:66:63:f5:ae:25:06:
77:62:3f:1f:fc:7e:d3:bd:05:72:b3:fb:20:5b:a7:
1b:43:10:82:57:21:59:2d:57:8c:58:ac:8c:69:67:
90:2b:32:29:4e:7a:02:92:6a:0f:d8:98:7e:51:03:
78:17:81:4f:d6:75:de:e7:ef:8b:c5:71:44:a7:ed:
08:48:2d:bc:de:6d:bc:88:15:61:b3:30:42:71:f8:
c6:48:40:c5:e9:99:0d:b0:1c:34:59:05:e8:25:ff:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:17:2F:AF:48:DA:92:6F:95:DF:22:CB:52:98:D9:57:43:14:0F:13
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:73:04:f9:9c:a9:bf:11:a1:5b:02:c0:d3:4d:cb:3f:d4:a0:
9c:6c:aa:e3:66:f1:3d:de:7c:9a:f5:58:46:0b:5f:5a:fc:fe:
bb:69:d5:a9:cb:a4:62:a5:9f:b8:6f:18:57:d7:03:46:95:13:
e1:cf:7b:38:71:6a:0c:59:01:52:4b:9c:70:04:bd:7d:9a:24:
45:7d:1d:2c:f5:12:3b:a2:6f:7c:9c:d8:f1:ba:88:31:29:f6:
f1:cd:1a:18:a8:61:55:6e:86:85:b3:15:d6:49:0e:74:6c:2c:
d9:bf:0b:89:64:57:90:b7:1c:b8:bd:b1:5f:13:c7:3f:2e:38:
fa:bd:b7:e1:37:b9:7b:de:78:eb:66:51:ba:23:75:f7:8f:3c:
84:32:86:61:47:89:65:1e:ac:89:c9:48:94:78:15:39:97:90:
ab:b7:ab:9c:09:38:20:ea:bf:b1:69:55:37:48:d5:ef:6c:34:
b3:4f:5c:42:aa:c0:bf:95:f2:8b:18:1e:74:7d:9e:ee:42:de:
03:c6:93:b3:8e:07:05:63:47:1e:f7:ea:13:40:c7:36:fa:dd:
4d:a0:d0:54:ac:c7:2e:f0:2e:ee:e2:c9:fe:61:50:6e:e9:c0:
1f:d1:55:34:34:0f:9e:97:5d:5a:67:ba:7f:7b:a7:ba:5e:6a:
b1:1d:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:00 2025 by rpki-client